Investigating threats using the Cloudflare Security Center
Mar 14, 2022Patrick R. Donahue, Jesse Kipp
Summary
This post introduces the 'Investigate' portal within the Cloudflare Security Center, enabling customers to query threat intelligence data (IPs, hostnames, ASNs). It also details the rollout of contextual threat annotations within existing analytics dashboards, starting with WAF analytics, to provide actionable intelligence directly in the workflow. The post highlights how Cloudflare leverages its network scale and cross-product data (DNS, Certificate Transparency, Area 1 email security) to train ML models and improve threat detection, making this intelligence accessible to customers.
More from the Website Security & Threat Management trail
- We tested our own WAF with frontier AI models. Here’s what we found
- When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts
- Introducing automatic remediation policies with Cloudflare CASB
- Introducing context-aware vulnerability discovery and remediation with Cloudflare Managed Defense and OpenAI Daybreak Models
- Introducing Adaptive Intelligence: undermining the economics of every bot attack