,

Cloudflare adds request-and-response correlation to WAF detection

Cloudflare has announced full transaction detection for its web application firewall, correlating requests with their responses. The company says the capability helps distinguish suspicious input from outcomes such as sensitive data exposure and makes detections available through Security Analytics.

NEWS BRIEF

What happened

Cloudflare has announced full transaction detection for its web application firewall, correlating requests with their responses. The company says the capability helps distinguish suspicious input from outcomes such as sensitive data exposure and makes detections available through Security Analytics. It says the capability is generally available, including on Free plans.

What the announcement does not establish

Response correlation adds context but does not prove that every exploit will be detected. Teams should review supported signals and validate the behavior of managed or custom rules against their own applications.

Primary source: Cloudflare: original announcement (2026-10-21). Sources checked November 3, 2026.

THE CTO BRIEFING

Keep the next decision in perspective.

Analysis for the people responsible for systems, teams, and outcomes.

Join the briefing ↗

CONTINUE EXPLORING

← All briefings   News desk →