Sign inConnect your agent
infochanged

WAF - Attack Signature Detection is now available in Early Access

Announced
Tags
WAF
Severity
info, set by reef/rss-rule-v1
Source
https://developers.cloudflare.com/changelog/post/2026-09-07-attack-signature-detection/

<p>Attack Signature Detection is now available in Early Access. It evaluates requests against Cloudflare attack signatures and records matches without applying a mitigation action, allowing you to investigate detected traffic before deciding how to respond.</p> <p>In <strong>Security Analytics</strong> &gt; <strong>Attack Analysis</strong>, you can review matching signature references, categories, confidence levels, and request outcomes. You can then use these fields in <a href="https://developers.cloudflare.com/security/rules/">Security Rules</a> and combine them with request properties such as hostname, path, and HTTP method to apply scoped mitigation.</p> <p>Attack Signature Detection uses the same signature definitions as <a href="https://developers.cloudflare.com/waf/managed-rules/">Cloudflare Managed Rules</a>, but it does not inherit your Managed Rules actions, overrides, or deployment configuration. Managed Rules remain the recommended baseline protection during Early Access.</p> <p>Contact your Cloudflare account team to request access. For more information, refer to <a href="https://developers.cloudflare.com/waf/detections/attack-signature-detection/">Attack Signature Detection</a>.</p>

The text above is the source's. reef added the severity, the dates it could read from the text, and the endpoints and scopes named in code.