Security for SaaS providers
Mar 15, 2022Dina Kozlov, Daniele Molteni

Summary
This post introduces 'WAF for SaaS', a significant extension of Cloudflare's WAF capabilities specifically tailored for Software-as-a-Service (SaaS) providers. It allows SaaS providers to create and deploy distinct sets of WAF rules for their individual customers, enabling segmented security based on varying requirements. The post also announces a free tier for Cloudflare for SaaS, offering 100 custom hostnames for free, and a substantial price reduction for custom hostnames, making advanced security more accessible to startups and growing SaaS businesses. It details how custom metadata can be associated with hostnames to dynamically trigger different security products like WAF, Firewall Rules, and Rate Limiting.
More from the Website Security & Threat Management trail
- We tested our own WAF with frontier AI models. Here’s what we found
- When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts
- Introducing automatic remediation policies with Cloudflare CASB
- Introducing context-aware vulnerability discovery and remediation with Cloudflare Managed Defense and OpenAI Daybreak Models
- Introducing Adaptive Intelligence: undermining the economics of every bot attack