Enforce positive security with Cloudflare Application Profiles

This post introduces Application Profiles, a new feature that extends positive security to web applications by learning and enforcing expected HTTP request structures. It details the learning process, which analyzes traffic to infer data types and constraints for path variables, query parameters, headers, cookies, and body structures. The feature provides an always-on validation layer that adds metadata to requests, which can then be used in Security Rules for enforcement. It highlights how non-conforming requests, even if not malicious, are identified and can be blocked. The post also explains how to review learned profiles in Security Analytics and create targeted rules based on specific fields or operations. This builds upon existing API security features like Schema Learning and Schema Validation.