Adaptive application security for the AI era: how Cloudflare connects code, traffic, and intelligence to stop attacks

This post introduces a connected application security framework for the AI era, organizing capabilities around four stages: Discover and prioritize risks, Govern access and agent behavior, Protect applications at runtime, and Investigate, respond and learn. It details new and evolved Cloudflare capabilities including using LLMs for WAF penetration testing, expanding threat intelligence, automating positive security deployment, and introducing Adaptive Security for automated runtime pentesting. It also enhances agent governance with Botbase for known automated entities and Precursor for client-side and session-level signals to distinguish human from automated behavior. The post highlights the shift in application security to address AI-enabled attackers, govern agentic clients, and secure applications containing AI models.