Integrating CrowdStrike Falcon Fusion SOAR with Cloudflare’s SASE platform
Sep 15, 2025Ayush Kumar, Andrew Meyer, Michael Mcgrory, Gavin Chen
Summary
This post details the integration of Cloudflare's SASE platform (specifically Zero Trust Access and Email Security) with CrowdStrike Falcon Fusion SOAR. It introduces two out-of-the-box integrations for automated response workflows, leveraging webhooks and API calls. Technical details include the specific API actions available for Email Security and Zero Trust Access within CrowdStrike, an example of an automated workflow (phishing detection -> block sender -> revoke sessions -> isolate endpoint), and the configuration of Logpush jobs from Cloudflare to CrowdStrike via HTTP destinations.
More from the Website Security & Threat Management trail
- We tested our own WAF with frontier AI models. Here’s what we found
- When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts
- Introducing automatic remediation policies with Cloudflare CASB
- Introducing context-aware vulnerability discovery and remediation with Cloudflare Managed Defense and OpenAI Daybreak Models
- Introducing Adaptive Intelligence: undermining the economics of every bot attack