The truly programmable SASE platform

What this post added

This post details how Cloudflare's SASE platform (Cloudflare One) is becoming more programmable by integrating deeply with its Developer Platform (Cloudflare Workers). It introduces the concept of 'programmability' beyond basic APIs, focusing on the ability to intercept security events, enrich them with external context, and act on them in real time. The post highlights the ability to extend policy decisions with custom logic, such as calling external risk APIs, injecting dynamic headers, or validating browser attributes, all executed at the edge via Workers. It provides a concrete example of automated device session revocation using a scheduled Worker that queries the Devices API to revoke inactive registrations. The post also outlines future plans for custom actions in Cloudflare Gateway to support dynamic policy enforcement and request augmentation.