Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Cloudflare DDoS Web Protection Demo

Cloudflare DDoS Web Protection provides automatic, intelligent DDoS mitigation from the edge of Cloudflare's global network — mitigating most attacks in three seconds. Advanced Adaptive DDoS Protection learns your unique traffic patterns and adapts to them to provide better protection against sophisticated DDoS attacks. Learn more.

API Security with Cloudflare API Shield Demo

Cloudflare API Shield provides many capabilities across API discovery & management, posture management, and runtime protection. This demo highlights some of these capabilities including machine learning discovery, sequence analysis and mitigation, schema learning, schema validation, volumetric abuse protection, organizational / user-created labels, risk labels, sensitive data detection, and posture management.

Top Microsoft 365 Features & Best Practices for Data Protection in the Cloud

Microsoft 365 provides a security solution called the Microsoft 365 Security & Compliance Center, which provides solutions to many types of threats. These features include next-generation threat protection, identity and access control, information governance, data loss prevention, encryption, compliance solutions, security management, and device control, which offer an extensive security mechanism for organizations.

Open-sourcing OpenPubkey SSH (OPKSSH): integrating single sign-on with SSH

OPKSSH makes it easy to SSH with single sign-on technologies like OpenID Connect, thereby removing the need to manually manage and configure SSH keys. It does this without adding a trusted party other than your identity provider (IdP). We are excited to announce OPKSSH (OpenPubkey SSH) has been open-sourced under the umbrella of the OpenPubkey project.

Streamline your security workflows with Google SecOps and Datadog Observability Pipelines

As security threats increase in complexity and scale, modern SIEM solutions are becoming key choices by CISOs for consolidating security monitoring and incident response. Organizations relying on Google or Google Cloud infrastructure are increasingly adopting Google Security Operations (SecOps) to unify their security stack and workflows.

Load Balancing: The Key to Unlocking Cloud Potential

Most organizations today utilize cloud computing to streamline their workflows and deliver more cost-effective and scalable infrastructure. While some still host everything on-premises, and some are evolving to all-cloud, the middle ground of a hybrid cloud environment is becoming increasingly popular.

Security Week 2025: in review

Thank you for following along with another Security Week at Cloudflare. We’re extremely proud of the work our team does to make the Internet safer and to help meet the challenge of emerging threats. As our CISO Grant Bourzikas outlined in his kickoff post this week, security teams are facing a landscape of rapidly increasing complexity introduced by vendor sprawl, an “AI Boom”, and an ever-growing surface area to protect.

OpenShift Data Foundation: Enhanced Storage for Cloud Apps

Organizations running cloud-native applications face significant storage management challenges. As research shows, most of these applications require persistent storage capabilities. Red Hat OpenShift Data Foundation (ODF) offers a complete solution for these storage requirements through its unified platform designed for container environments and virtual machines.

Enhance data protection in Microsoft Outlook with Cloudflare One's new DLP Assist

Cloudflare Email Security customers using Microsoft Outlook can now enhance their data protection using our new DLP Assist capability. This application scans emails in real time as users compose them, identifying potential data loss prevention (DLP) violations, such as Social Security or credit card numbers. Administrators can instantly alert users of violations and take action downstream, whether by blocking or encrypting messages, to prevent sensitive information from leaking.

Detecting sensitive data and misconfigurations in AWS and GCP with Cloudflare One

Today is the final day of Security Week 2025, and after a great week of blog posts across a variety of topics, we’re excited to share the latest on Cloudflare’s data security products. This announcement takes us to Cloudflare’s SASE platform, Cloudflare One, used by enterprise security and IT teams to manage the security of their employees, applications, and third-party tools, all in one place.

Cloudflare named a leader in Web Application Firewall Solutions in 2025 Forrester report

Forrester Research has recognized Cloudflare as a Leader in it's The Forrester Wave: Web Application Firewall Solutions, Q1 2025 report. This market analysis helps security and risk professionals select the right solution for their needs. According to Forrester: In this evaluation, Forrester assessed 10 Web Application Firewall (WAF) vendors across 22 criteria, including product security and vision. We believe this recognition is due to our continued investment in our product offering.

Making Application Security simple with a new unified dashboard experience

Over the years, we have framed our Application Security features against market-defined product groupings such as Web Application Firewall (WAF), DDoS Mitigation, Bot Management, API Security (API Shield), Client Side Security (Page Shield), and so forth. This has led to unnecessary artificial separation of what is, under the hood, a well-integrated single platform.

A Step-by-Step Guide to S3 Security Features & Setup

As the gold standard for reliably storing files of varying types in the cloud, Amazon’s S3 has become synonymous with storage. While this widespread adoption is a sign of a good developer experience and reliable storage across the board, it also presents a unique opportunity for attackers looking to exploit multiple targets due to S3’s widespread adoption.

An early look at cryptographic watermarks for AI-generated content

Generative AI is reshaping many aspects of our lives, from how we work and learn, to how we play and interact. Given that it's Security Week, it's a good time to think about some of the unintended consequences of this information revolution and the role that we play in bringing them about.

Take control of public AI application security with Cloudflare's Firewall for AI

Imagine building an LLM-powered assistant trained on your developer documentation and some internal guides to quickly help customers, reduce support workload, and improve user experience. Sounds great, right? But what if sensitive data, such as employee details or internal discussions, is included in the data used to train the LLM?

Cloudflare for AI: supporting AI adoption at scale with a security-first approach

AI is transforming businesses — from automated agents performing background workflows, to improved search, to easier access and summarization of knowledge. While we are still early in what is likely going to be a substantial shift in how the world operates, two things are clear: the Internet, and how we interact with it, will change, and the boundaries of security and data privacy have never been more difficult to trace, making security an important topic in this shift.

How to Secure Your Information on AWS: 10 Best Practices

About one in three organizations that leverage cloud service providers (CSPs) use Amazon Web Services (AWS), according to November 2024 research from Synergy Research Group. This means two things. One is that when attackers are looking to get the most out of a single exploit, they will likely craft them to target AWS systems. And two, that AWS data security best practices are a timely topic for a wide range of today's organizations.

Cloudflare expands threat intelligence offering with new comprehensive, real-time events platform

Customers can tap into insights from Cloudflare's global network - one of the largest in the world - which blocked an average of 227 billion cyber threats each day during Q4 2024.

Cloudflare enables native monitoring and forensics with Log Explorer and custom dashboards

In 2024, we announced Log Explorer, giving customers the ability to store and query their HTTP and security event logs natively within the Cloudflare network. Today, we are excited to announce that Log Explorer now supports logs from our Zero Trust product suite. In addition, customers can create custom dashboards to monitor suspicious or unusual activity.

Extending Cloudflare Radar's security insights with new DDoS, leaked credentials, and bots datasets

Security and attacks continues to be a very active environment, and the visibility that Cloudflare Radar provides on this dynamic landscape has evolved and expanded over time. To that end, during 2023’s Security Week, we launched our URL Scanner, which enables users to safely scan any URL to determine if it is safe to view or interact with.

Unleashing improved context for threat actor activity with our Cloudforce One threat events platform

Today, one of the greatest challenges that cyber defenders face is analyzing detection hits from indicator feeds, which provide metadata about specific indicators of compromise (IOCs), like IP addresses, ASNs, domains, URLs, and hashes. While indicator feeds have proliferated across the threat intelligence industry, most feeds contain no contextual information about why an indicator was placed on the feed.

CyberArk Secure Cloud Access Free Trial: Platform Interface Guide | CyberArk

New to CyberArk Secure Cloud Access? In this walkthrough, we’ll guide you through the platform interface, helping you navigate key features during your free trial. What you'll learn: Overview of the Secure Cloud Access platform How to manage cloud access securely Essential tools & settings for AWS integration.

Hybrid Cloud Environments Demand More Agile Infrastructure

In 2025, hybrid cloud environments have emerged as a cornerstone for businesses striving to modernize their IT infrastructure. From leveraging AI-driven tools to enhancing performance, sustainability, and security, hybrid cloud is paving the way for a new era of efficiency and growth.

Falcon Cloud Security Identifies AI-Driven Packages in Container Images

Artificial intelligence (AI) is rapidly transforming industries, but with this innovation come new security challenges as threat actors explore AI’s powerful capabilities. They’re adopting new techniques, targeting AI models, injecting malicious code into AI processes, and exploiting vulnerabilities in AI-related software packages.

Password reuse is rampant: nearly half of observed user logins are compromised

Accessing private content online, whether it's checking email or streaming your favorite show, almost always starts with a “login” step. Beneath this everyday task lies a widespread human mistake we still have not resolved: password reuse. Many users recycle passwords across multiple services, creating a ripple effect of risk when their credentials are leaked.

Enhanced security and simplified controls with automated botnet protection, cipher suite selection, and URL Scanner updates

At Cloudflare, we are constantly innovating and launching new features and capabilities across our product portfolio. Today, we're releasing a number of new features aimed at improving the security tools available to our customers. Automated security level: Cloudflare’s Security Level setting has been improved and no longer requires manual configuration.

Security Week teaser and Lisbon's waves of entropy

We’re back with new episodes in 2025, kicking off this week with a Security Week teaser. Host João Tomé is joined by Michael Tremante, Sr. Director of Product Management, to discuss what to expect from our first innovation week of the year, starting next week. They also explore the security landscape in 2025 and the importance of simplicity.

The Cost Conundrum of Cloud Computing

For most businesses, change is driven by the need to reduce risk and innovate, while optimising cost and return on investment. In the case of cloud adoption, the powerful functionality offered by these platforms enable businesses to streamline, optimise, and make their workflows more efficient which, in turn, helps reduce costs. Organisations are always looking for the best solutions for optimising efficiency and reducing costs, particularly in uncertain economic times.

Managing Cloud Exposures Just Got Easier: Introducing Nucleus Cloud-Native Vulnerability and Exposure Management

Every day, security teams are expected to manage risks in cloud environments that they don’t fully control, can’t always see, and that are constantly changing. Cloud-native assets—such as container workloads, autoscaling groups, and serverless functions—are highly dynamic, appearing, disappearing, and evolving in response to demand and functionality changes.

2025 is Cloud Security's Breakthrough Year

Sysdig’s 2025 Cloud-Native Security and Usage Report identifies promising trends in how organizations are developing, using, and maintaining everything within their cloud environments. The eighth annual report shares the results of an analysis of millions of containers and cloud accounts. This year’s findings reveal several key areas that have improved, including cloud threat detection and response, AI security, and vulnerability management.

DANGER: Phishing messages

DANGER: Phishing messages are easier than ever for someone to make and send, thanks to the likes of GenAI. That’s what Mostafa Hassanin, Group CISO at SMG, told our host Mark Dembo on this episode of The Connectivity Cloud Podcast. The pair, along with Cloudflare’s VP of Emerging Tech and Incubation, Sam Rhea, discussed the challenges of weaponized AI threats, alongside other real-life impacts of AI on enterprise security and operations.

Jit + Google Cloud: Strengthening Cloud Security with CSPM and Google Chronicle Integration

We’re excited to announce our deepening partnership with Google Cloud, marked by two major milestones: Jit has received the “New Customer Acquisition” award from GCP Israel—recognizing our success in helping businesses enhance their cloud security on Google Cloud.

Is Your Organization's Cloud Environment as Secure as You Think? Trustwave Can Help

Organizations today face a growing volume of data and alerts while dealing with tight budgets and vulnerable legacy systems. Which is why they need the security partners with the right tools that can help them make the correct security choice for their environment, and this is where Trustwave Microsoft Security Threat Protection and Sentinel Engagements (also referred to as Modern Work and Modern SecOps) come into play.

Meet FireCloud Internet Access: The Future of Secure Remote Connectivity

With hybrid and remote work now the norm, organizations face an urgent challenge – how to provide employees with seamless, secure access to critical applications without the performance and security drawbacks of traditional VPNs. At WatchGuard, we recognize that businesses need a modern, scalable security solution that meets the demands of a distributed workforce.

Global expansion in Generative AI: a year of growth, newcomers, and attacks

AI (Artificial Intelligence) is a broad concept encompassing machines that simulate or duplicate human cognitive tasks, with Machine Learning (ML) serving as its data-driven engine. Both have existed for decades but gained fresh momentum when Generative AI, AI models that can create text, images, audio, code, and video, surged in popularity following the release of OpenAI’s ChatGPT in late 2022.

Falcon Cloud Security for Oracle Cloud Infrastructure

Falcon Cloud Security delivers fast, AI-powered protection for Oracle Cloud Infrastructure (OCI), providing real-time threat detection, compliance support, and risk remediation without disrupting performance. With instant visibility, frictionless deployment, and unified security across multi-cloud environments, organizations can secure their most critical OCI workloads while reducing complexity and operational overhead.

How to Protect Your Cloud from Costly Breaches?

In 2024, businesses lost an average of $4.88 million per cloud breach. Are you prepared? Discover how Fidelis Halo, an all-in-one cloud security platform, helps protect your data, applications, and resources from evolving cyber threats. From preventing data leaks, locking down APIs, and blocking insider threats, Halo ensures your cloud infrastructure stays secure—without chaos. Complete CNAPP Solution (CWPP, CSPM, Container Security) Automated threat responses for instant protection Real-time monitoring to eliminate blind spots.

How Cloud-Based Software Can Improve Business Efficiency

As your business grows, so do the challenges. More customers mean more data to handle, more projects to track, and more risks to manage. The bigger you get, the harder it becomes to keep everything running smoothly. That's why cloud-based software is more than just a trend; it's a solution. By centralizing your data and automating routine tasks, cloud software helps you manage growth without chaos. No more worrying about software updates or limited storage; everything is taken care of in the cloud.
Featured Post

Partnering to Overcome the Skills Gap in Cloud Computing

For organisations that are always trying to leverage the latest technology to gain an edge over their competitors, utilising public cloud computing is at the top of the list for most decision makers. The scalability and cost-effectiveness, along with businesses not needing to invest in traditional infrastructure and having it managed by a third party, offers a myriad benefits for companies in all industries.

Reasons to Switch to Cloud-Based Video Surveillance

Keeping your property secure is more important than ever, and traditional surveillance systems may not provide the flexibility and protection you need. Cloud-based video surveillance offers a modern alternative that allows users to monitor their homes or businesses from anywhere. Companies like Stratus Infosystems provide solutions that enhance security with remote access and AI-powered tools. Unlike older systems that rely on physical storage, cloud solutions offer greater accessibility, security, and convenience. Here are five reasons why making the switch is a smart move.

Egnyte on Azure Marketplace: A Powerful Partnership

With collaboration and efficiency a top priority, Egnyte’s partnership with Microsoft is revolutionizing the way teams work together. Many organizations are already leveraging Microsoft Office products, and now it’s easier than ever for them to streamline their procurement process and get the most out of their technology investments. Starting today, Egnyte is available through the Microsoft Azure Marketplace!

How to Achieve Modern Security and Network Performance with Netskope [Overview]

The face of network security has changed forever. With the rise of cloud computing and SaaS applications, traditional solutions are no longer sufficient. In this video, the minds behind Netskope discuss how the company is innovating to provide better protection, with a focus on granular policy enforcement, context-aware security, and scalable solutions.

Protect your users from Internet risks

The Internet is now part of your corporate network, however browsing the web comes with hidden risks—malware, phishing attacks, and malicious websites. In this video, we’ll explore how Cloudflare’s Secure Web Gateway (SWG) helps keep users safe by filtering and inspecting Internet traffic in real time. Whether you're protecting a remote workforce or securing an entire organization, Cloudflare’s solution ensures that users can access the web securely—without sacrificing speed or productivity.

Beyond the Endpoint: Why EDR/XDR Struggles in the Cloud

The cybersecurity landscape has dramatically shifted with the rise of cloud computing. While Endpoint Detection and Response (EDR) and Extended Detection and Response (XDR) have proven valuable in protecting traditional endpoints, the cloud introduces a new set of challenges. This post examines why these solutions, rooted in endpoint-centric approaches, may fall short in the cloud, highlighting the need for a new generation of cloud protection strategies designed for SaaS, IaaS, and PaaS environments.

CrowdStrike Falcon Cloud Security Introduces Application Context to Runtime Detections

Since CrowdStrike’s acquisition of Bionic, we have been embedding application security posture management (ASPM) capabilities into CrowdStrike Falcon Cloud Security, creating a unified solution that bridges the gap between proactive security for cloud security teams and cloud runtime protection for security operations. We are excited to share new ASPM updates in Falcon Cloud Security, built to help teams detect and respond faster to today’s cloud-focused adversaries.

Fireblocks x AWS: A Blueprint For Tokenized Asset Deployment and Management

The real-world asset tokenization market is projected to reach $200 billion by 2030, underscoring the enormous potential in this space. However, bringing digital assets to market presents non-trivial considerations and a need for infrastructure providers and software vendors to collectively fulfill functional and non-functional tokenization platform requirements.

Connect and secure from any network to anywhere

Build your new corporate network with Cloudflare, connecting any network into our modern SASE platform. In this video learn all the different methods of connecting networks to Cloudflare and what services can then be used to improve security and performance. Chapters: Watch the rest of the videos in our series to learn more about Cloudflare's SASE platform. Dive deep into the architecture of how our SASE platform works by reading our reference architecture content.

Detect cross-account access risks in AWS with Datadog

Managing access across multiple AWS accounts is a popular approach to isolating workloads and data. While it provides several benefits to organizing the various operational requirements for the environment, it introduces additional complexity for managing IAM policies and workload permissions. A primary concern is assigning too many permissions to any one source, which increases the risk of an attacker moving within the environment undetected.

Jit Now Available on AWS Marketplace and has become a Validated AWS Partner

We did that in a record time of 12 days!! Yes, you read right, TWELVE DAYS! We are thrilled to announce that Jit is now officially listed on the AWS Marketplace. This marks a significant milestone in our journey, as it not only enhances our visibility but also makes it easier for potential customers to find, test, buy, and deploy Jit. Being listed on the AWS Marketplace is a testament to our commitment to providing top-notch services to our customers.

Secure remote access to your critical infrastructure

Applications, databases and their servers are running in a variety of locations. From on-premises data centers to cloud hyperscalers, making the need to secure administrative access more important than ever. In this video learn how Cloudflare's SASE platform can provide highly secure access, leveraging a modern ZTNA service to implement zero trust principles for access to your critical infrastructure.

Banish bots from your Waiting Room and improve wait times for real users

With Cloudflare Waiting Room, you can safeguard your site from traffic surges by placing visitors in a customizable, virtual queue. Previously, many site visitors waited in the queue alongside bots, only to find themselves competing for inventory once in the application. This competition is inherently unfair, as bots are much faster and more efficient than humans. As a result, humans inevitably lose out in these high-demand situations, unable to secure inventory before bots sweep it all up.

Securing Datadog's cloud infrastructure: Our playbook and methodology

At Datadog, we build and operate a complex, self-managed infrastructure that spans multiple cloud providers and serves many customers in regulated environments. We need to secure this large, distributed infrastructure while maintaining strict uptime requirements and scaling our finite people resources. In this post, I’ll detail the playbook that we use on Datadog’s Cloud Security team for securing our infrastructure, including.

Optimize Wordpress performance with Cloudflare's Automatic Platform Optimization

Does your WordPress site load too slowly? Cloudflare’s Automatic Platform Optimization (APO) plugin caches and serves your site from a global network, making site loads up to 72% faster! APO allows Cloudflare to serve your entire WordPress site on its global edge network, and would take HTML and CSS that would not typically be cached on the CDN to be done so automatically.

Federal Zero Trust Maturity: From Backburner to Afterburner

Three years ago, the Federal Zero Trust Strategy promised that the government would learn and adjust as new technologies and practices emerge. That time is now. Let’s explore key innovations that advance Zero Trust maturity when your industry partner uses a federal-first approach. Watch this video to learn more.

Deliver Secure, Performant & Resilient Digital Citizen Services

Join Government Technology and Cloudflare for a live webinar where a panel of experts will explore how public sector agencies can leverage a platform-based approach to seamlessly navigate the shift to digital services—without compromising on efficiency, security, or simplicity.

A Complete Guide to Cloud Risk Assessment

As organizations worldwide race to transform themselves digitally in a cloud-first world, many are doing so to the detriment of their businesses by failing to assess the security risks posed by their cloud applications and services. This oversight is not only a security issue but a core business risk that differentiates market leaders from those who are sure to face expensive setbacks and regulatory headaches.