… Security Analytics cf.waf.signature.response. ref Array. Aggregates the Ref IDs of the matching signatures, up to 10. Security Analytics Initially, we are focused on offering visibility into matching requests via analytics. …
… For example, security teams can filter LLM traffic to analyze requests containing PII-related prompts. Using Cloudflare’s WAF rules engine, they can create custom security policies tailored to their AI applications. …
… Models like Opus 4.6 and GPT 5.4 handle security-sensitive and architecturally complex reviews where reasoning capability matters most. Over the last 30 days: 100% AI code reviewer coverage across all repos on our standard CI pipeline. …
… Going forward, when a third party application requests access to your Cloudflare account, you’ll be able to review: Which third-party application is requesting access, along with information about the application like Name, Logo, and the Publisher. …
… If your AI-powered endpoints have been discovered, you can review them immediately. Detection AI Security for Apps detections follow the always-on approach for traffic to your AI-powered endpoints. …
… Here is the plugin roster for a typical internal review: Plugin Responsibility @opencode-reviewer/gitlab GitLab VCS provider, MR data, MCP comment server @opencode-reviewer/cloudflare AI Gateway configuration, model tiers, failback chains @opencode-reviewer/codex Internal compliance checking agains… …
… Before getting into the details: the architecture below is built almost entirely from Cloudflare's own products, because Cloudflare security is customer zero for the security products we build. …
… Solving plugin security means solving marketplace lock-in WordPress plugin security is such a real risk that WordPress.org manually reviews and approves each plugin in its marketplace. At the time of writing, that review queue is over 800 plugins long, and takes at least two weeks to traverse. …
… Conversely to a negative security model where rules define what characteristics a request must have to trigger an action, such as block , Schema Validation is designed to allow requests that have been verified as compliant while taking actions on everything else. …
… Future requests from the same client. This is necessary for applications that do not carry state across requests. …