AI BriefingCloudflare WAF adds full transaction detection and response rules
·2026.10.21 23:10
Key point
The new feature correlates HTTP requests with origin responses to detect exploitation evidence, available on all plans including Free.
Details
- Cloudflare WAF introduces full transaction detection and response rules, allowing the system to evaluate HTTP requests alongside their responses to identify exploitation evidence.
- Response rules can block the origin's response before it reaches the requester, preventing sensitive data exposure such as configuration files revealed by path traversal attempts.
- The feature is generally available to all Cloudflare customers, including Free plans, with managed protections addressing the recently disclosed php2shell vulnerability.
- New fields like cf.waf.signature.response.confidence and cf.waf.signature.response.categories are added to the platform for use in custom rules and Security Analytics.
- Customers can create up to three custom response rules supporting Log and Block actions, though creating rules on the response body is not yet available.
This summary was generated automatically by AI. Check the original for the author's claims and context. Copyright belongs to the original author.
Our guide explains how the AI works. Report summary errors, attribution issues, or removal requests via Contact.
Related
Alter launches YC S25 platform for privileged access management of AI agentsTrail of Bits releases patching-bugs and regression-hunt plugins for AI-driven security fixes