Cloudflare rolls out real time threat intel for WAF rules

Cloudflare introduces a new integration that allows security teams to utilize real-time threat intelligence from its Threat Events platform to create proactive Web Application Firewall (WAF) rules. This helps automate the blocking of high-risk IPs associated with known threats, improving security response time. Key capabilities include defining attack contexts by identifying threat actors, targeted industries, and attack types.

The WAF can now leverage specific threat signals like attacker names and targeted countries to formulate rules. All detections are integrated into Cloudflare’s analytics for better visibility and auditing. The performance of this service is maintained with negligible latency, enabling real-time threat responses across Cloudflare's extensive network.