Cloudflare Application Security and Performance Features

Supports all required file types including but not limited to: Google Docs, MS Office, images, videos, etc.

Automatically adds descriptive metadata like file size and upload date, has standard metadata fields like keywords, and allows the definition of custom fields and vocabulary.

Can structure unstructured data through Optical Character Recognition or other automated filing/tagging processes for scanned documents.

Keep track of incrementally changing versions of the same file.

Multiple users can collaborate on document creation, annotation, and review.

Autogenerate documents based on templates and form submission.

Able to create and manage submittable user forms.

Able to create user portals and sites.

Automatically archive, delete, or revoke access to files that have reached the end of their life cycle.

Can easily find files via a simple and/or advanced search.

Ability to access documents via a web interface without a client being installed on a device.

iOS, Android and Windows phone apps provide functionality that enable users to perform the same functions as they would on a PC.

Specifying a series of conditions and actions can automate internal processes, is customizable to the complexities of organization's needs and easy to set up and execute.

The workflow engine provides relevant and customizable conditions on which to execute rules.

Any action a user can perform in the system can be specified as an automated action.

System provides the necessary tools and fuctionality to maintain evidence of business activites and comply with governmental requirements or industry standards.

System provides specialized functionality for bundling structured and unstructured content, automating adaptive, multi-person processes and setting deadlines for open cases. Also, cases can be completed and closed with the associated information stored and auditable.

Create, save, and re-purpose templates for emails, forms, etc.

Store, manage, and track all electronic documents in a centralized location

Collect and maintain structured information that describes data or content

Handles digital content throughout its lifecycle, from creation and storage to distribution and archiving

Create, design and manage workflows for repetitive tasks

Track and manage adherence to policies for any service, product, process, or supplier

Manage digital assets

Create, manage and track all task activities and progression

Create, save, and store files

Store, manage and track all forms in a centralized location

Optimize and manage the search engine optimization efforts for a website or digital content

Plan, schedule, and execute organization's accounts and assets to ensure compliance with policies and laws

Built-in website builder or integration with third-party site

Manage user accounts, profiles, roles, permissions, and other details across applications, devices or networks

Allows organizations multi-national organizations to use tool effectively across multiple languages and currencies.

Software is consistently available (up-time) and allows users to complete tasks quickly because they are not waiting for the software to respond to an action they took.

Access pre-built and custom reports to monitor user activity and storage.

Integrates with other systems of record such as CRM, ERP, Outlook, Sharepoint.

Enables custom integration to external systems.

Caching of static content at distributed PoPs for faster load times.

Routing of dynamic content for faster load time of dynamic pages.

The ability to purge the cache from different edge location PoPs.

Shared SSL certificate.

SSL certificate that you provide to the CDN software, or is provided for you and is not shared.

Provides Domain Validated SSL certificates.

Issues SSL certificates in a timely manner.

Provides at least 128-bit encryption during SSL session.

Provides Extended Validation SSL certificates.

Provides Organization Validated SSL certificates.

An easy to read, often single page, real-time user interface, showing a graphical presentation of the current status and historical trends of an organization's Key Performance Indicators (KPIs) to enable instantaneous and informed decisions to be made at a glance.

Access pre-built and custom reports.

Record of data changes taking place in the software.

Send summary, update, or actionable alerts to administrators to detail activity.

Provide control over traffic. Limits access to suspicious visitors and monitors for traffic spikes to prevent overloads like DDoS attacks.

Information on each incident is stored in databases for user reference and analytics.

Application Programming Interface - Specification for how the application communicates with other software. API's typically enable integration of data, logic, objects, etc. with other software applications.

Set up connections to third-party platforms to improve business processes

Application Programming Interface - Specification for how the application communicates with other software. API's typically enable integration of data, logic, objects, etc. with other software applications.

Standard integrations for common CMS tools.

Lets users group and organize their endpoints to gather threat intelligence on specific technologies.

Reduces the need for IT and security professionals to iterate repetitive tasks associated with gathering threat information.

The process in which users integrate their existing security systems and endpoints to the threat intelligence platform.

A feature that allows security testing and information gathering to occur in a secure, resource independent environment.

Identify and orchestrate execution of actions needed to restore systems to optimal conditions

Prior to security incidents, the product will alert users when a new, relevant vulnerability or threat is discovered.

Provides multiple techniques and information sources to alert users of malware occurrences.

The ability for users to produce reports outlining detailed and personalized threat information

Information to prevent, understand and identify cyber threats

Receive notification of issues as soon as they occur

Analysis for users to examine threat intelligence data specific to their endpoint devices.

The product has a recurring examination process to update your intelligence reports as new threats emerge.

The ability to examine your application, website, or database's code to uncover zero-day vulnerabilities.

Investigate security threats and validate malicious activity

Identify and respond to security threats to web applications

Identify and respond to security threats to developed applications

Caching of static or dynamic content at distributed PoPs for faster load times.

Reporting and analytics that report on activity and program effectiveness.

Identifies and alerts administrators of threats, issues, incidents and requests related to website security.

Application Programming Interface - Specification for how the application communicates with other software. API's typically enable integration of data, logic, objects, etc. with other software applications.

Provides Administration tools/console that are easy to use and learn for routine maintenance tasks

Helps administrators ensure applications and information is accessible to users

Limits access to suspicious visitors and monitors for traffic spikes to prevent overloads like DDoS attacks.

Self-monitors important metrics and sends notifications to users in-app or through email, text message or otherwise.

Ensures reimbursement in the case of money lost during payment on SSL-secured site.

Providers may limit the number of servers to which SSL certificates may be issued.

Allows users to reissue SSL information in the case the private key or certificate is lost.

The ability to green light a specific Domain or system to bypass the scanning process.

Abilities to set DNS protection policy control standards including whitelisting, blacklisting, and application access.

Produces reports detailing suspicious activity and anomalies related to networks and endpoints.

Allows administrators to group users and devices based on IP, Endpoint, or role.

Allows centralized administration and control of DNS protection and policies across multiple networks.

Tracking recipient tagging of domains for blacklists and whitelists.

Analyzes your existing website and network to outline access points that can be easily compromised.

Analyzes data associated with web traffic and site performance to provide vulnerability insights and best practices.

Identify and respond to security threats to web applications

Protects websites and web applications from a variety of attacks and malware threats.

Protects against distributed denial of service (DDoS) attacks.

Automatically identify and flag unusual behaviors and malicious software

Facilitates the remediation of website and web application malware.

Protect users working remotely and provide secure environments for personal devices to access company programs

Offers multi-factor authentication to better protect information.

Protects application's code from data injections

Ability to protect both byte and binary code

Protects applications against man-in-the-middle attacks

Offers advance detection of potential risks to your application

Ability to protect a variety of different kinds of data, including digital content

Gives users a secure enviornment to access and process sensitive data

Ensures applications are in compliance with necessary policies and regulations

Ability to run on any device that has software needing protection

Provides required reports to manage business. Provides adequate logging to troubleshoot and support auditing.

Track issues and manage resolutions.

Detects anomalies in functionality, user accessibility, traffic flows, and tampering.

Gives user configurable rules to control requests, protocols and policies.

Limits access to suspicious visitors and monitors for traffic spikes to prevent overloads like DDoS attacks.

Lets users provision networks, deliver content, balance loads, and manage traffic.

API / Integrations

Provides the ability to extend the platform to include additional features and functionalities

Control and filter bot traffic.

Supports SSL encryption across multiple website domains

Supports SSL-secured access across required browser types.

Provides a visual indicator for online privacy status.

Utilizes AI for certificate lifecycle management functions.

Associate information from various domains to identify associated parties and threats.

Develops domain reputation by gathering contextual information related to web-based threats.

Allows DNS routing to resolve requests across HTTP or HTTPs requests and/or covers IPv4 and IPv6 protocols.

Automatic discovery of certificates directly from Certificate Authorities, network scanning, and deep discovery methods.

Monitors and notifies administrators of certificate expiration dates.

Automates certificate deployment, renewals, and revocations.

Offers granular permissions for assigning certificate owners and other roles.

Offers built-in workflows to assign ownership and management of certificates.

Offers industry-standard protocols such as CMP, ACME, and SCEP.

Offers template and custom reports and search functionality.

Enforces certificate policies and provides audit trails of user and certificate activities to detect issues.

Allows keys to be stored on end devices, on the platform, or hardware security modules.

Live streams audio and video from both teacher and student managed devices

Allows administrative ability to deploy software, applications, and operating systems across endpoints.

Caching of static content at distributed PoPs for faster load times.

Routing of dynamic content for faster load time of dynamic pages.

Allows users to update programs, fix bugs and patch security flaws remotely.

Documents the actions from endpoints within a network. Alerts users of incidents and abnormal activities and documents the access point.

Protects media, websites and web applications from a variety of attacks and malware threats.

Detect and protect against attacks targeting domain name servers.

Detect and protect against attacks targeting websites.

Detect and protect against attacks targeting on-premise or locally controlled infrastructure.

Blocks malicious website or destination, redirecting the user to a secure page

Monitors 24/7 to detect anomalies in functionality, user accessibility, traffic flows, and tampering.

Supports agent-based DNS protection with individual endpoint devices on any network.

Allows DNS filtering and protection for guest WiFi networks.

Supports bring-your-own-device (BYOD) users, supporting DNS protection across any device connected to a network or equipped with an agent.

“DoH” is a protocol that facilitates DNS resolution via HTTPS. Native DoH functionality facilitates DNS over DoH using local agents to manage DNS requests, extending DoH beyond a single browser or network.

Monitors for and rids systems of bots, or other threats suspected of committing unauthorized actions.

Documents the actions from endpoints within a network. Alerts users of incidents and abnormal activities and documents the access point.

Detects anomalies in functionality, user accessibility, traffic flows, and tampering.

Constantly monitors acivity related to user behavior and compares activity to benchmarked patterns.

Diagnoses and resolves incidents without the need for human interaction.

Monitor the IP addresses of the incoming traffic

Continuously scan servers on a designated network to monitor health and search for any irregularities or failures

Detects new and undocumented assets as they enter a network and add them to asset inventory.

Detects anomalies in functionality, user accessibility, traffic flows, and tampering.

Provides results of the simulation and reveals potential security gaps or vulnerabilitites.

Tools to track and implement required security policy changes.

Monitors data quality and send alerts based on violations or misuse.

Allows users to set customizable API verification settings to improve security requirements.

Runs pre-scripted security tests without requiring manual work.

Abilities to set standards for network, application, and API security risk management.

Constantly monitors activity related to user behavior and compares activity to benchmarked patterns.

Monitors for and rids systems of bots suspected of committing fraud or abusing applications.

Condenses long documents or text into a brief summary.

Use AI to generate content in the form of text, images, videos, etc.

Condenses long documents or text into a brief summary.

Use AI to propose possible threat actor tactics, techniques, and procedures against specific environments or assets.

Use AI to automatically create detection rules based on observed patterns.

Use AI to produce concise summaries of complex threat reports or alerts.

Use AI to generate content in the form of text, images, videos, etc.

Condenses long documents or text into a brief summary.

Continuously scans websites and applications to detect suspicious activities.

Performs signature-based detection for known threats.

Protects against a wide range of client-side threats, including XSS attacks, formjacking, digital skimming, and Magecart exploits.

Prioritizes the script's degree of risk based on its behavior.

Performs heuristic analysis to identify suspicious behavior.

Obscures first-party Javascript code to make it less readable and harder to understand.

Protects against browser-based attacks (e.g., XSS, CSRF) and bloc malicious scripts.

Encrypts data in transit and at rest.

Offers several obfuscation methods, including polymorphic obfuscation, control flow flattening, code hardening, and virtual-machine based obfuscation.

Monitors and prevents data leakage by blocking destinations that are unknown or have illegitimate parameters.

Discovers third-party services automatically and continuously with detailed activity tracking.

Protects against endpoint attacks such as ransomware and phishing.

Logs events for security incidents and policy violations.

Provides actionable insights and reports for clear visibility into security incidents, vulnerabilities, and compliance status.

Monitors client-side activities in real time.

Provides an intuitive interface for managing configurations and monitoring activity.

Simplifies the setup process with clear instructions and minimal technical effort.

Integrates seamlessly with cloud, on-premises, and hybrid environments.

Works effectively with containerized applications and orchestration platforms like Kubernetes.

Distributes traffic across multiple data centers or regions to optimize performance.

Adjusts resources automatically to handle traffic spikes efficiently.

Continuously monitors server availability to prevent routing to unresponsive systems.

Restores operations quickly and effectively after failures or disruptions.

Active monitoring of systems, applications, or networks

Gain insights into the health of employees, equipment, registered instances or any other organizational asset to check their status

Tracks and makes accessible data on the health of servers and other network components.

Monitor the IP addresses of the incoming traffic

Efficiently manages encryption and decryption of traffic to secure data in transit.

Supports integration with web application firewalls (WAF) for additional protection against vulnerabilities.

Protects against Distributed Denial of Service (DDoS) attacks to maintain service availability.

Provides mechanisms to restrict unauthorized access and manage user or system permissions.

Controls traffic by allowing or blocking specific IP addresses to enhance security.

Define levels of authorization for access to specific files or systems

Distributing traffic by sending client requests across servers capable of completing the request

Protect networks against DDoS (Distributed denial-of-service) attacks

Set up connections to third-party platforms to improve business processes

Capability to perform complex tasks without constant human input

Ability to break down and plan multi-step processes

Anticipates needs and offers suggestions without prompting

Makes informed choices based on available data and objectives

Anticipates needs and offers suggestions without prompting

Anticipates needs and offers suggestions without prompting

Capability to perform complex tasks without constant human input

Engages in human-like conversation for task delegation

Makes informed choices based on available data and objectives

Enforces strict request and token quotas per user, tenant, or application to prevent system overloads and manage API budget limits.

Caches responses for identical or semantically similar prompts to significantly reduce API latency and eliminate redundant token costs.

Routes API requests to various LLM providers via a single unified API and automatically fails over to backup models if downtime occurs.

Intercepts traffic to detect and mask Personally Identifiable Information (PII) or block malicious prompt injections before the request reaches the external model.

Provides granular dashboards to monitor token consumption and calculate exact monetary costs broken down by application, team, or specific model.

Securely vaults and manages external LLM API keys within the gateway so developers do not need to hardcode credentials into their applications.

Provides visibility into bot activity, attack trends, and traffic composition through dashboards and reporting

Distinguishes approved bots such as search engine crawlers and partner integrations from malicious automation

Identifies and classifies malicious automated traffic across web applications, APIs, or digital services

Uses machine learning or AI models to identify sophisticated or evolving bot behavior patterns

Identifies, classifies, and manages traffic generated by AI agents, autonomous agents, or LLM-based systems

Dynamically adjusts detection and mitigation decisions based on AI-driven risk analysis

Automatically blocks, challenges, rate limits, or otherwise mitigates malicious bot traffic

Protects APIs from automated attacks, scraping, excessive requests, and unauthorized access attempts

Detects and prevents credential stuffing, account takeover, and automated login abuse

Decrypting traffic and routing it to different inspection tools to identify potential threats.

Receive data and information in real time

A chronological record of actions or occurrences within a network, software, or process

Alerts or notifications of various types such as pop-up messages, sounds, banners, or badges

Removing the SSL based encryption from incoming traffic

Determine the configuration of network traffic between clients and web applications based on the content being sent

Directing traffic in a circular pattern such as round robin pattern to each load balancer node in succession

Automatic configuration of devices/instances without manual intervention

Securely stores data to prevent data loss or breaches

Dashboard to view the status of ongoing processes, identify current incidents and track past activities

Temporarily stored data recently accessed in order to improve website performance and reduce load on bandwidth

Analyze and gain insights into data in real-time

Application programming interface that allows for integration with other systems/databases

Process to improve load performance and handle unnecessary network requests.

Identify component attributes like servers, hardware, software, and manage relationships across all services

A set of indicators that tracks the performance of networks, applications, systems, teams, etc.

A virtual assistant that uses AI to pursue goals and complete tasks on behalf of users

Allows businesses to monitor and secure applications and workloads across multiple public clouds

View and track pertinent metrics to find patterns and gain insights from data

Safeguard confidential data and meet compliance regulations

Accepting a request from client, forwarding it to a server that can fulfil it, and returning the server's response back to the client

Reduction in the number of bits needed to represent data

Track the status over time for a request, process, asset, or transaction

Verify the identity of users/devices to enable secure access

Checking for another server when one is down and all the traffic needs to be routed to another one.

Interact with data visualization elements, such as charts and graphs, to drill down into data

Use AI to generate content in the form of text, images, videos, etc.

Set up and configure network resources to make them accessible for authorized users, devices and servers

Remotely monitor and manage client networks, endpoints, systems, and devices via locally installed applications

Distribute client requests or network load across multiple servers

Manage user accounts, profiles, roles, permissions, and other details across applications, devices or networks

Security protocol that ensures secure, encrypted communication over the internet, safeguarding sensitive data from unauthorized access

Create, manage, and track policies and procedures within an organization

Manage incidents related to outages or breaches in functionality of IT systems

Use AI to generate content in the form of text, images, videos, etc.

A virtual assistant that uses AI to pursue goals and complete tasks on behalf of users

Alerts or notifications of various types such as pop-up messages, sounds, banners, or badges

Assembly of graphs and charts for visualizing and tracking statistics/metrics

View and track pertinent metrics to find patterns and gain insights from data

Information to prevent, understand and identify cyber threats

Active reporting of data and metrics

Analyze and gain insights into data in real-time

Tracks and makes accessible data on the health of servers and other network components.

Application programming interface that allows for integration with other systems/databases

View and track pertinent metrics to find patterns and gain insights from data

Alerts or notifications of various types such as pop-up messages, sounds, banners, or badges

Track and analyze user behavior within a system or network

A virtual assistant that uses AI to pursue goals and complete tasks on behalf of users

Dashboard to view the status of ongoing processes, identify current incidents and track past activities

Scanning of users & devices to ensure there are no potential threats

Process of backing up of files and applications to cloud-based remote servers for protection of data

Graphical representation of data

Track and report on everything that happens within the system or network

Scanning networks to identify security threats

A chronological record of actions or occurrences within a network, software, or process

Observe and track the demand, usage, progress or quality of a system, product, or user

Continuously scan servers on a designated network to monitor health and search for any irregularities or failures

Discover patch statuses and vulnerabilities

Report and update incidents related to health or workplace injuries that occur on a job or en route to a job site

Track and document all activities across devices, networks, and other systems

Collection, analysis, and representation of numerical data and generation of reports to understand various patterns

Set up and configure network resources to make them accessible for authorized users, devices and servers

Arrange tasks based on the level of priority or urgency

Identifying, analyzing, and mitigating security issues and taking appropriate action to protect systems and data from potential harm

Receive data and information in real time

Tracking KPIs over a certain period to assess helpdesk issues, ticket status & resolution, costs and revenue stats, assets usage & more

Protect against code driven website security attack techniques

Process of distributing a set of tasks over a set of resources, with the aim of making their overall processing more efficient

Alerts or notifications of various types such as pop-up messages, sounds, banners, or badges

Discover patch statuses and vulnerabilities

Identifying, analyzing, and mitigating security issues and taking appropriate action to protect systems and data from potential harm

Application programming interface that allows for integration with other systems/databases

Collects and aggregates data from various systems within the IT environment

A virtual assistant that uses AI to pursue goals and complete tasks on behalf of users

Centralized repository to store content and assets

Define levels of authorization for access to specific files or systems

A virtual assistant that uses AI to pursue goals and complete tasks on behalf of users

Accountability over info/data that ensures appropriate behavior in the valuation, creation, storage, use, archiving & deletion of info.

Assemble applications and processes by dragging over and arranging pre-built components

Provides a channel for team members to share media files, communicate, and work together

View and track pertinent metrics to find patterns and gain insights from data

Import, collect, and capture data from multiple sources

Compile and organize data into specific metrics

Find & retrieve relevant data or documents

Digitally sign online documents

Track revisions and updates made to files and navigate between different versions

Access software remotely via mobile devices

Store and organize documents in a centralized system

Use AI to generate content in the form of text, images, videos, etc.

Manage the process of evaluating documents or requests submitted for approval

Allow users to access multiple services after entering their login credentials once

Edit, touch up, and convert images for publishing

Add customized logos and colors to align with company branding

Search and filter data across systems to locate required information by entering keywords or certain criteria

Attach digital tags to documents and assets for identification, search, or monitoring purposes

A record of all activities within the system, including user access, changes made, etc.

Review and analyze existing information across documents

Track and document all activities across devices, networks, and other systems

Dashboard to view the status of ongoing processes, identify current incidents and track past activities

Moving and separately storing data that is not actively used or continuous storage of data for compliance purposes

Securely stores data to prevent data loss or breaches

Configure existing workflows to meet your organization's needs

Security protocol that ensures secure, encrypted communication over the internet, safeguarding sensitive data from unauthorized access

Alerts or notifications of various types such as pop-up messages, sounds, banners, or badges

Synchronizing data between two or more devices/systems and automatically updating changes to maintain consistency

At least a username and password is required to access the system

Distributing content through various platforms or channels

Extra layer of security that requires not only a password and username but also something specific to that user

Pre-designed layouts that can be customized to match preferences and requirements

Ability of websites, web applications, or mobile applications to function without an active internet connection

Sample files or documents that could be customized as needed or used as is

Public or private sharing of digital files such as documents, audio/video, images, and more

Monitor the IP addresses of the incoming traffic

Automatically identify and flag unusual behaviors and malicious software

Identify and prevent suspicious activity

A chronological record of actions or occurrences within a network, software, or process

Reduce or block bot traffic

Discover patch statuses and vulnerabilities

Receive notification of issues as soon as they occur

Information to prevent, understand and identify cyber threats

Identify bot traffic

Assembly of graphs and charts for visualizing and tracking statistics/metrics

Software program that continuously adjusts its behavior based on observed data

Use AI to generate content in the form of text, images, videos, etc.

A virtual assistant that uses AI to pursue goals and complete tasks on behalf of users

Track and analyse user behavior within a system or network

In a peer-to-peer (P2P) network, each computer acts as both a server and a client

Identify component attributes like servers, hardware, software, and manage relationships across all services

Optimizes large files delivered over the network.

Optimizes assets across a distributed network.

Use AI to generate content in the form of text, images, videos, etc.

Ability to handle large datasets

Optimizes the delivery of assets from the network to websites.

Process of distributing a set of tasks over a set of resources, with the aim of making their overall processing more efficient

Encode videos for faster distribution over networks.

Compress assets and content to be delivered more easily over a network to optimize site speed & response time

Optimizes the delivery of videos over the network.

Allows the distribution of software over the network.

A set of indicators that tracks the performance of networks, applications, systems, teams, etc.

Convert data into a code for security

Allows for content delivery to be optimized globally.

Personalize delivered content based on characteristics, preferences, behavior or other data across the network

Protect networks against DDoS (Distributed denial-of-service) attacks

A virtual assistant that uses AI to pursue goals and complete tasks on behalf of users