Topic

Managed Rules

1 post about Managed Rules. Every summary links to the original.

Paid picks we use ourselves. Links carry a referral code — a subscription through one earns us a commission at no extra cost to you.

Newest first

Posts

Cloudflare
Introducing full transaction detection for Cloudflare WAF
Cloudflare has expanded its web application firewall with full transaction detection and response rules, correlating each HTTP request with its response to identify evidence of successful exploitation. This approach answers both whether a request looks malicious and what happened when the application handled it, using new fields like cf.waf.signature.response.confidence. For example, a path traversal attempt followed by a response containing configuration file content provides stronger evidence of data exposure than either signal alone. Response rules can block the origin’s response before it reaches the requester, preventing sensitive information from reaching an attacker. The feature is generally available to all Cloudflare customers, including Free plans, with managed protections for high-profile vulnerabilities such as php2shell. Detection and mitigation are separated, allowing security teams to inspect detections in Security Analytics before designing policies.

The best engineering reads, once a week.

Topic

1 post about Managed Rules. Every summary links to the original.

Paid picks we use ourselves. Links carry a referral code — a subscription through one earns us a commission at no extra cost to you.

Newest first

Cloudflare
Introducing full transaction detection for Cloudflare WAF
Cloudflare has expanded its web application firewall with full transaction detection and response rules, correlating each HTTP request with its response to identify evidence of successful exploitation. This approach answers both whether a request looks malicious and what happened when the application handled it, using new fields like cf.waf.signature.response.confidence. For example, a path traversal attempt followed by a response containing configuration file content provides stronger evidence of data exposure than either signal alone. Response rules can block the origin’s response before it reaches the requester, preventing sensitive information from reaching an attacker. The feature is generally available to all Cloudflare customers, including Free plans, with managed protections for high-profile vulnerabilities such as php2shell. Detection and mitigation are separated, allowing security teams to inspect detections in Security Analytics before designing policies.

The best engineering reads, once a week.