The Cloudflare Blog

Subscribe to receive notifications of new posts:

Chase Catelli

Principal Security Strategist

Defend against frontier cyber models: Cloudflare's architecture as customer zero

2026-06-09

Security AI Threat Intelligence Risk Management Customer Zero WAF Zero Trust Cloudforce One Bot Management

In our post about Project Glasswing, we made the argument that the architecture around a vulnerability matters more than the speed of the patch. Here we walk through what that architecture looks like, the threats it defends against, and how we run it ourselves as Cloudflare's customer zero....

Shifting left at enterprise scale: how we manage Cloudflare with Infrastructure as Code

2025-12-09

Infrastructure as Code Customer Zero Terraform Dogfooding

Cloudflare has shifted to Infrastructure as Code and policy enforcement to manage internal Cloudflare accounts. This new architecture uses Terraform, custom tooling, and Open Policy Agent to enforce security baselines and increase engineering velocity....