Securing non-human identities: automated revocation, OAuth, and scoped permissions
2026-04-16T07:24:06Z•4a444e636548fd3aebd7298a01ff6f57ae3f66c0cf6bbb4b17c0628dae1bd565
ACMEAI-security-for-appsAPI-tokensCloudflareDDoSGNNLLMLog-ExplorerManaged-OAuthOAuthPQCPingoraPingora-0.8.0RFC-9728RadarWorkers-VPCaccount-abuse-protectioncertificate-validationclient-side-securitydeveloper-securitypost-quantumrequest-smugglingresource-scoped-permissionsvulnerability-mitigationweb-api-scanner
What happened
A collection of Cloudflare security blog posts (Mar–Apr 2026) announcing new security controls, mitigations, and telemetry: scannable API tokens, enhanced OAuth visibility, and GA resource-scoped permissions to enable least-privilege; Managed OAuth for Access (RFC 9728) to let agents authenticate without insecure service accounts; a shift of Cloudflare’s post‑quantum readiness target to 2029 and new Radar telemetry for PQ adoption; Client‑Side Security made broadly available using graph neural nets + LLMs to reduce false positives; Account Abuse Protection (Early Access) and AI Security for AP
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- cloudflare_security_blog
- Record identifier
- 4a444e636548fd3aebd7298a01ff6f57ae3f66c0cf6bbb4b17c0628dae1bd565
- Enrichment time
- 2026-04-16T07:24:06Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.