Introducing Threat Signals: agentic skills for open-source threat intelligence, free for every Cloudflare account
Cloudflare launches Threat Signals, free agentic AI skills that turn open-source threat reports into normalized IOCs and WAF-ready threat events.
Cloudflare announced Threat Signals, available free to every Cloudflare account, using agentic AI skills to summarize open-source threat reports, extract and normalize indicators of compromise, and apply tags within a private per-account dataset. Extracted indicators become contextualized Threat Events that can be applied directly in WAF policies. Access to Cloudforce One's Threat Events Platform is also expanding to all accounts, with free-tier users getting one RSS feed (RSS 2.0, Atom, RDF supported) and 30-day storage. The pipeline is built on Cloudflare Workflows, Browser Render, and R2 storage; enterprise tiers gain more feeds, custom skills, and proprietary Cloudforce One datasets.
- Free for all Cloudflare accounts; one RSS feed on free tier
- Agentic skills summarize reports and extract normalized IOCs
- Indicators become Threat Events directly usable in WAF policies
- Cloudforce One Threat Events Platform access expanded to all accounts
- Built on Workflows, Browser Render, and R2 with 30-day storage
- Organizations
- CloudflareCloudforce One
From the original article
5 min read at blog.cloudflare.com
We are expanding access to Cloudforce One's Threat Events Platform to every Cloudflare account and introducing Threat Signals. Threat Signals automatically parses open-source threat reporting, extracts structured indicators, and connects threat context directly to your WAF rules.
By Emilia Yoffie · blog.cloudflare.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.