Introducing Cloudflare Domain Protection — Making Domain Compromise a Thing of the Past
Dec 10, 2021Eric Brown

Summary
This post introduces Cloudflare Domain Protection, a new service for Enterprise customers that aims to prevent domain compromise. It details the common attack vectors for domain hijacking (unauthorized transfers, name server updates, suspensions/deletions) and outlines Cloudflare's 'triple-locked' approach to securing domains, which includes EPP Registrar Locks, internal API locks, and Registry Locks. The service is offered for free to eligible Enterprise customers, including registration and renewal fees, and builds upon existing offerings like Cloudflare Registrar and Custom Domain Protection.
More from the Website Security & Threat Management trail
- We tested our own WAF with frontier AI models. Here’s what we found
- When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts
- Introducing automatic remediation policies with Cloudflare CASB
- Introducing context-aware vulnerability discovery and remediation with Cloudflare Managed Defense and OpenAI Daybreak Models
- Introducing Adaptive Intelligence: undermining the economics of every bot attack