Cloudflare links vulnerability discovery to defense with OpenAI

Cloudflare operates one of the world’s largest networks and proxies roughly 20% of the web’s traffic. Organizations depend on that network to keep their applications and services secure, fast, and reliable.

Cloudflare combines OpenAI models accessed through Daybreak with its global network and threat context in Vulnerability Discovery and Remediation ⁠ (opens in a new window) , an early-access service offered through Cloudflare Managed Defense. The models investigate code and assess potential vulnerabilities. Cloudflare adds live traffic data, security signals, and validation to prioritize findings and prepare proposed mitigations and patches for customers to review.

Codex extends OpenAI’s role across Cloudflare’s engineering organization, where developers use it to increase output and improve code quality.

Security teams face a constant stream of vulnerability information and alerts. Manually sifting through that data takes time and effort, leaving teams with less capacity to investigate and address critical issues. “Traditional security teams have a ton of useful data. They just don’t have the people and time to deal with it,” Anderson says.

Cloudflare’s approach is to connect a vulnerability in source code to what is happening in production. Is the affected route active? Is it receiving suspicious traffic? Are existing security controls already protecting it? Those signals give security teams more context for deciding what to investigate first.

Through Vulnerability Discovery and Remediation ⁠ (opens in a new window) , Cloudflare uses OpenAI models accessed through Daybreak to investigate customer-authorized code, identify potential vulnerabilities, and check the evidence supporting each finding. The service prepares proposed code patches and, where appropriate, custom web application firewall rules to reduce exposure while developers review a fix. Cloudflare runs automated checks on these proposals, and its team reviews them before sharing them with customers.