Protecting your APIs from abuse and data exfiltration
Mar 24, 2021Daniele Molteni
Summary
This post announces the general availability of Schema Validation for Enterprise customers, a managed IP List for blocking open proxies, enhanced client certificate lifecycle management (revocation/restoration), and the beta release of Data Loss Prevention (DLP) for egress traffic. Schema Validation now accepts OpenAPI v3 specifications and is deployable via the Cloudflare dashboard. DLP identifies sensitive data in response payloads and is released as a managed ruleset. The 'Cloudflare Open Proxies' managed IP list is now available for Firewall Rules. Certificate revocation is now a managed feature, removing the need for custom Workers KV solutions.
More from the Website Security & Threat Management trail
- We tested our own WAF with frontier AI models. Here’s what we found
- When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts
- Introducing automatic remediation policies with Cloudflare CASB
- Introducing context-aware vulnerability discovery and remediation with Cloudflare Managed Defense and OpenAI Daybreak Models
- Introducing Adaptive Intelligence: undermining the economics of every bot attack