Securing non-human identities: automated revocation, OAuth, and scoped permissions
2026-04-22T07:24:08Z•1b56b12518037b7d883eab5716ba19ce63e442317bf38620c16e88f18d73ab91
31.4-TbpsPQCRFC-9728account-abuse-protectionacmeai-detectionai-security-for-appsapi-tokensautomated-revocationcertificate-validationcg-natclient-side-securitycloudflareddoslog-explorermanaged-oauthoauthphishingpingorapost-quantumradarrequest-smugglingresource-scoped-permissionsvulnerability-scannerworkers-vpc
What happened
Cloudflare published a batch of security-focused updates and product launches: scannable API tokens with automated revocation and GA resource-scoped permissions to enable least-privilege, Managed OAuth for Access (RFC 9728) for agent-safe auth, and a PQ roadmap moving full post‑quantum targets to 2029. Several defensive capabilities were expanded or opened broadly — Client‑Side Security with cascaded AI detection, Account Abuse Protection (Early Access), AI Security for Apps (GA), a new stateful Web/API vulnerability scanner, and Log Explorer enhancements for multi‑vector investigations. Cloud
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- cloudflare_security_blog
- Record identifier
- 1b56b12518037b7d883eab5716ba19ce63e442317bf38620c16e88f18d73ab91
- Enrichment time
- 2026-04-22T07:24:08Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.