One platform to manage your company’s predictive security posture with Cloudflare

This post details the evolution of Cloudflare's security posture management by introducing real-time data collection for SaaS applications and a new 'Security Overview' page for web applications. For SaaS, the shift from batch crawlers to a dynamic pipeline using Workers, R2, and Queues to process vendor webhooks is a key technical contribution. This pipeline involves a webhook listener Worker, R2 for raw payload storage, a queue for raw changes, a transformation Worker to normalize data, another R2 for transformed data, and a queue for transformed messages. The CASB layer then uses a polling consumer and crawlers to fetch updated asset details from vendor APIs. For web applications, the 'Security Overview' page aggregates security suggestions based on discovered web assets and traffic profiles. The post also mentions the addition of RBAC to Security Insights.