Email security - Block emails by content with blocked content rules

<p>Cloudflare Email security now lets administrators write their own content-based blocking rules. A new <strong>Blocked content</strong> area under <strong>Policies &amp; rules</strong> lets you define a plaintext string or a regular expression, choose whether to scan the message subject, body, or both, and automatically block any message that matches.</p> <ul> <li>Create rules using either <strong>plaintext</strong> matches or <strong>regular expressions</strong> — useful for blocking targeted phishing campaigns, known-bad phrases, or content patterns unique to your organization.</li> <li>Choose the <strong>search location</strong> for each rule: <strong>subject</strong>, <strong>body</strong>, or <strong>subject and body</strong>.</li> <li>Use the built-in <strong>regular expression checker</strong> to validate your pattern against sample text before saving, so you can confirm the rule matches what you expect and avoid false positives.</li> <li>Matching messages are marked with a malicious <a href="https://developers.cloudflare.com/cloudflare-one/email-security/reference/dispositions-and-attributes/">disposition</a> and prevented from reaching users' inboxes.</li> </ul> <p>Blocked content rules currently only support the block action.</p> <p>This feature is available for the following Email security packages:</p> <ul> <li><strong>Enterprise</strong></li> <li><strong>Enterprise + PhishGuard</strong></li> </ul> <p>To get started, refer to <a href="https://developers.cloudflare.com/cloudflare-one/email-security/policies/inbound/blocked-content/">Blocked content</a>.</p>