TLDR DevOps · OPINIONS & TUTORIALS

WE TESTED OUR OWN WAF WITH FRONTIER AI MODELS. HERE'S WHAT WE FOUND

blog.cloudflare.com9 min read

Summary from the TLDR DevOps newsletter

Cloudflare built a dynamic testing tool that uses large language models to iterate attack payloads against its Web Application Firewall. The system ran 1,107 attempts across six attack categories and recorded 49 findings that required human review. Cloudflare used these results to release new detections for SSRF attacks and improve an existing cloud metadata rule.