Holistic web protection: industry recognition for a prolific 2020

This post details the evolution of Cloudflare's web security capabilities in 2020, focusing on WAF, Bot Management, and DDoS mitigation. Key technical contributions include: decoupling WAF configuration from the zone/domain model for granular control, releasing IP Lists for referencing custom and third-party lists, upgrading the edge-logging framework to push real-time security logs to SIEMs, implementing HPKE for encrypting sensitive log payloads, introducing a data localization suite, re-implementing the Rate Limiting engine in Rust for improved performance and memory safety, adding HMAC functions and regex-based HTTP header/body inspection to the Firewall Rules engine, completing a total rewrite of the Machine Learning engine for Bot Management with nearly double the features, upgrading the behavioral analysis engine for Bot Management, developing a lightweight JavaScript element for browser fingerprinting and User Agent misrepresentation detection, rewriting the CAPTCHA challenge platform for speed and robustness, releasing dedicated Bot Management analytics, and deprecating the __cfduid cookie.