Changing the industry with CISA’s Secure by Design principles
Mar 4, 2024Kristina Galicova, Edo Royker
Summary
This post details Cloudflare's commitment to CISA's 'Secure by Design' principles, highlighting how memory-safe languages like Rust are used in critical components like the WAF and HTTP proxy (Pingora), and how Zero Trust principles are applied by default. It also emphasizes the free offering of Universal SSL, unmetered DDoS mitigation, MIGP for credential checking, WAF Managed Rulesets, and post-quantum cryptography, all of which contribute to a more secure internet by default.
More from the Website Security & Threat Management trail
- We tested our own WAF with frontier AI models. Here’s what we found
- When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts
- Introducing automatic remediation policies with Cloudflare CASB
- Introducing context-aware vulnerability discovery and remediation with Cloudflare Managed Defense and OpenAI Daybreak Models
- Introducing Adaptive Intelligence: undermining the economics of every bot attack