WAF for everyone: protecting the web from high severity vulnerabilities
Mar 15, 2022Michael Tremante
Summary
Introduces a free Cloudflare WAF Managed Ruleset for all plans, including free tiers, to protect against high-severity vulnerabilities like Log4J and Shellshock. This ruleset is automatically deployed for new free zones and can be configured or disabled. It leverages the new Edge Rules Engine for performance and includes rules for common WordPress exploits. Updates will be published on the change log.
More from the Website Security & Threat Management trail
- We tested our own WAF with frontier AI models. Here’s what we found
- When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts
- Introducing automatic remediation policies with Cloudflare CASB
- Introducing context-aware vulnerability discovery and remediation with Cloudflare Managed Defense and OpenAI Daybreak Models
- Introducing Adaptive Intelligence: undermining the economics of every bot attack