---
title: "Managed Rules"
description: "1 posts about Managed Rules, summarised, each linking to the original."
---

# Managed Rules
> 1 posts about Managed Rules, summarised, each linking to the original.

## Articles

### [Introducing full transaction detection for Cloudflare WAF](https://yomu.fyi/post/introducing-full-transaction-detection-for-cloudflare-waf.md)
- Company: [Cloudflare](https://yomu.fyi/company/cloudflare.md)
- Author: Nick Downie
- Published: Oct 21, 2026
- Type: Announcement

Cloudflare has expanded its web application firewall with full transaction detection and response rules, correlating each HTTP request with its response to identify evidence of successful exploitation. This approach answers both whether a request looks malicious and what happened when the application handled it, using new fields like cf.waf.signature.response.confidence. For example, a path traversal attempt followed by a response containing configuration file content provides stronger evidence of data exposure than either signal alone. Response rules can block the origin’s response before it reaches the requester, preventing sensitive information from reaching an attacker. The feature is generally available to all Cloudflare customers, including Free plans, with managed protections for high-profile vulnerabilities such as php2shell. Detection and mitigation are separated, allowing security teams to inspect detections in Security Analytics before designing policies.