Securing non-human identities: automated revocation, OAuth, and scoped permissions
2026-04-21T07:24:09Z•e4264cce16ef38f617c3b5ad74c4852d8c6a3a015a8c1be307b5c928facb0e69
31.4 TbpsAI security for appsDDoS reportLLMLog ExplorerPQC roadmapPingoraPingora 0.8.0RFC9728Web and API Vulnerability Scanner','ACME validationapi tokensclient-side securitycloudflaregraph neural networksleast privilegemanaged oauthmulti-vector attacksnon-human identitiesoauthpost-quantumrequest smugglingresource-scoped permissionsshadow AI discoverytoken revocationvulnerability disclosure
What happened
Cloudflare published a batch of security-focused updates: scannable API tokens, automated revocation, enhanced OAuth visibility and Managed OAuth for Access (RFC 9728) plus GA resource‑scoped permissions to enable least‑privilege and safer non‑human identities. They set a new target of 2029 for full post‑quantum deployment, opened advanced Client‑Side Security to all users (GNN + LLM detections), and announced AI Security for Apps GA and expanded discovery for shadow AI. Operational/security tooling updates include a Web & API Vulnerability Scanner, Log Explorer multi‑dataset investigations, D
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- cloudflare_security_blog
- Record identifier
- e4264cce16ef38f617c3b5ad74c4852d8c6a3a015a8c1be307b5c928facb0e69
- Enrichment time
- 2026-04-21T07:24:09Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.