Cloudflare WAF adds full-transaction detection and response rules
Original title: Introducing full transaction detection for Cloudflare WAF
The features are generally available on every plan, including Free, and the first managed rules target php2shell.
Cloudflare is adding full transaction detections that score an HTTP request together with the origin response, plus response rules that can replace a sensitive reply with a block page. Customers can use managed protections or custom policies, with results shown in Security Analytics. The first managed detections focus on confirming exploitation of the php2shell vulnerability. Cloudflare says request-only signatures can miss successful exploits or block legitimate traffic.
- New response fields cover signature confidence, categories, and up to 10 reference IDs.
- A response rule can return HTTP 403 before leaked content reaches the requester.
- Cloudflare plans later coverage for data exposure and exfiltration signals.
- Vendors
- Cloudflare
- Products
- Cloudflare WAF
From the original article
7 min read at blog.cloudflare.com
Cloudflare's web application firewall can now correlate an HTTP request with its response. Full transaction detection helps every customer find successful exploits, data exposure, and risky misconfigurations that request-only inspection can miss.
By Daniele Molteni · blog.cloudflare.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.