Scaling Security Insights: how we achieved a 10x increase in global scanning capacity
Jun 12, 2026Dave Baxter

Summary
This post details how Cloudflare achieved a 10x increase in global scanning capacity for its Security Insights feature. It describes the technical challenges and solutions implemented, including scaling Kafka by introducing batch processing and parallel goroutines, avoiding head-of-line blocking with a 'slow lane' and 'fast lane' approach, optimizing database inserts using a hybrid UNNEST/COPY strategy, resolving API latency issues by switching to an active-passive configuration, and rethinking the scheduler with independent zone scheduling, randomized timing, and adaptive rate limiting to ensure uniform scan distribution and handle increased scanning frequency for all customers.
More from the Website Security & Threat Management trail
- We tested our own WAF with frontier AI models. Here’s what we found
- When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts
- Introducing automatic remediation policies with Cloudflare CASB
- Introducing context-aware vulnerability discovery and remediation with Cloudflare Managed Defense and OpenAI Daybreak Models
- Introducing Adaptive Intelligence: undermining the economics of every bot attack