News
Cloudflare tested its own WAF with frontier AI models acting as a hacker.
The vast majority of attacks were blocked, with XSS, LFI, SQLi and Log4j near full coverage.
After human review, 49 findings were worth investigating, 48 of them CMDi and SSRF.
The work contributed to three changes in Cloudflare's Managed Ruleset, including two new SSRF detections.