Cloudflare Client-Side Security: smarter detection, now open to everyone

2026-03-31T07:24:10Zab17ca959ea04bd092971c79fe3dbf5386273e089efc2598843eeb504f9cbd9a
account-abuseacme-validationai-securityapi-vulnerability-scannercgnatclient-side securitycloudflarecloudyddosfraud-preventiongraph-neural-networkshyper-volumetric-attacksllmlog-explorermerkle-tree-certificatespingorapost-quantumquicrequest-smugglingworkers-vpc

What happened

Collection of Cloudflare security posts (Mar 2025–Mar 2026) covering new product launches, threat research, and disclosed vulnerabilities. Highlights: Cloudflare opened advanced client-side detection (GNN+LLM) and made AI Security for Apps / AI discovery broadly available; announced Account Abuse Protection and a Web/API Vulnerability Scanner; Log Explorer expanded to detect multi‑vector attacks. Security disclosures include request smuggling vulnerabilities in the open‑source Pingora ingress proxy (fixed in Pingora 0.8.0), a mitigated ACME validation logic vulnerability, and two patched QUIC–

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
cloudflare_security_blog
Record identifier
ab17ca959ea04bd092971c79fe3dbf5386273e089efc2598843eeb504f9cbd9a
Enrichment time
2026-03-31T07:24:10Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.