AI Security for Apps Reaches General Availability

Cloudflare AI Security for Apps has reached general availability. Operating as a reverse proxy in front of AI-powered applications, it connects discovery, detection, and blocking of AI endpoints.

The biggest change is that AI endpoint discovery is now offered free to all Cloudflare customers. Even on Free, Pro, and Business plans, it analyzes web assets to find LLM-powered endpoints, displaying them as cf-llm under Security → Web Assets in the dashboard.

Detection capabilities have also been strengthened. In addition to the existing prompt injection, PII exposure, and toxic topics, the GA version adds user-defined custom topics detection. By specifying topics that need to be prohibited or monitored by industry—such as finance, healthcare, or retail—Cloudflare calculates a relevance score for prompts and outputs, which can be used for logging, blocking, or custom responses.

Another key feature is custom prompt extraction. While OpenAI, Anthropic, Google Gemini, Mistral, Cohere, xAI, DeepSeek, and others are supported by default, failing to accurately identify the request payload structure can lead to detection across the entire body, increasing false positives. Cloudflare plans to reduce this issue going forward with JSONPath-based customization and prompt-learning features.

Detection results integrate directly with the existing WAF rules engine for immediate response. Unlike dedicated tools that only look at AI signals, Cloudflare explains that it can apply more sophisticated policies by combining these with other security signals such as IP, browser fingerprint, and botnet patterns.

Ecosystem expansion was also announced.

• Expanded collaboration with IBM Cloud Internet Services (CIS) to provide AI security to IBM Cloud customers
• Integration with Wiz AI Security to enable a unified view from model and agent discovery to application-layer guardrails at the edge

Currently, Enterprise customers can use it immediately, while other plans have access starting with the discovery feature. Cloudflare plans to expand full functionality to all plans going forward.