Stop reacting to breaches and start preventing them with User Risk Scoring
Mar 4, 2026Nevins Bartolomeo, Noelle Kagan, Ann Ming Samborski

Summary
Introduces User Risk Scores into Cloudflare One's ZTNA policies, enabling adaptive access based on user behavior and external telemetry. This moves security from a static login check to a continuous assessment of user risk. The system calculates risk based on selected behaviors (e.g., impossible travel, DLP violations) and integrates with third-party signals from partners like CrowdStrike and SentinelOne. Adaptive Access policies can now dynamically adjust access levels based on these risk scores, and risk signals can be shared back to IdPs like Okta.
More from the Website Security & Threat Management trail
- We tested our own WAF with frontier AI models. Here’s what we found
- When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts
- Introducing automatic remediation policies with Cloudflare CASB
- Introducing context-aware vulnerability discovery and remediation with Cloudflare Managed Defense and OpenAI Daybreak Models
- Introducing Adaptive Intelligence: undermining the economics of every bot attack