Cloudflare WAF checks whether an attack worked before blocking its response

Cloudflare's October 21st release adds request-response detection and response rules, with php2shell protections as its first managed use case.

By · Published

Primary source: Cloudflare Blog

Why it matters

Cloudflare's WAF can use an application's response to help identify successful exploits, giving security teams more evidence for blocking while leaving software patching essential.

Cloudflare WAF checks whether an attack worked before blocking its response — The October 21st release adds request-response detection and response rules, with php2shell protections as the first managed use case.

Cloudflare, founded by Matthew Prince, Michelle Zatlyn and Lee Holloway, has updated its web application firewall to assess what an application returned after a suspicious request. The new capabilities, announced on October 21st, pair full-transaction detection with response rules that can stop an origin's reply from reaching the requester.…

When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.

Reader comments

Conversation for this story loads after sign-in.