A simpler path to a safer Internet: an update to our CSAM scanning tool
Sep 24, 2025Rachael Truong

Summary
The CSAM Scanning Tool has been simplified by removing the requirement for website operators to create and provide their own NCMEC credentials. This change has led to a 1600% increase in monthly adoption. The tool now scans cached content for potential CSAM using fuzzy hashing and automatically blocks identified matches, notifying the site operator. The underlying fuzzy hashing technique is described as creating a 'perceptual fingerprint' that remains similar even if an image is modified.
More from the Website Security & Threat Management trail
- We tested our own WAF with frontier AI models. Here’s what we found
- When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts
- Introducing automatic remediation policies with Cloudflare CASB
- Introducing context-aware vulnerability discovery and remediation with Cloudflare Managed Defense and OpenAI Daybreak Models
- Introducing Adaptive Intelligence: undermining the economics of every bot attack