The state of application security in 2023

What this post added

This post provides updated insights and trends on mitigated traffic, bot and API traffic, and account takeover attacks, based on Cloudflare's network traffic data from March 2022 through February 2023. It details the definitions of mitigated traffic, bot traffic, and API traffic, and presents global traffic insights including the percentage of mitigated HTTP requests, the breakdown of mitigated traffic by product group (DDoS, WAF, IP reputation, Access Rules), and the most frequent layer 7 attack vectors mitigated by the WAF. It also includes insights into bot traffic, highlighting the confidence in bot classification and the distribution of bot scores.