Join our Oct. 12 threat briefing on how Russian hacking group YackingYeti targets Ukraine—and the world Register

Cloudforce One

Cloudflare Threat Intelligence and Operations

Cloudforce One packages the vitals aspects of modern threat intelligence and operations to make organizations smarter, more responsive, and more secure. Cloudforce One is led by a world-class threat research team, experienced at disrupting global-scale threat actors.  

Learn more about Cloudforce One

Why Cloudforce One is different
Threat data at breathtaking scale

Only Cloudflare protects ~20% of the world's websites, allowing us to analyze a stunning amount of global data that nobody else has. We convert this data to finished, actionable threat intelligence.

Proven threat analytics and models

We run our vast threat data through dozens of layers of analytics and threat models to refine it into actionable threat intelligence, ready to be ingested into security tools.

World-class threat researchers

World-class threat researchers

The Cloudforce One offering

Insights on adversaries

We empower security teams to make faster, more informed decisions through compelling research and insights about adversaries.

  • Threat briefings
  • In-depth attacker profiles including IoCs
  • Research on nation-state and commercial-state adversary TTPs
  • Industry-specific briefings

Finished threat intelligence

Incorporate differentiated, finished threat intelligence into your security postures and tools for more effective security.

  • Finished Threat feeds (STIX/TAXII)
  • Phishing and brand protections
  • Brand/phishing takedown service
  • Sinkholes and honeypots API

Threat Research RFIs

Make our threat researchers an extension of your team. Directly access our experts for bespoke threat intelligence reports that profile any attack, threat or threat actor of interest.

  • RFI process for threat
  • Streamlined three-step process
  • Progress tracking
  • Unlimited threat lookups in Cloudflare Security Center
Threat data analyzed
36

million HTTP/S requests processed per second

1.7

trillion DNS requests analyzed per day

8

billion preemptive email campaign threat signals assessed daily

Cloudforce One tools for security analysts

As part of Cloudflare One, customers have access to powerful tools to strengthen security postures.

Threat investigation portal

Speed threat investigations with instant threat queries in Cloudflare Security Center's Investigate tab for context on IPs, domains, ASN, URLs and more.

Automated Sinkhole API

Sinkholes created on-demand to monitor hosts infected with malware and prevent them from communicating with command-and-control (C2) servers.

Brand and phishing protections

Brand and phishing protections are available in Cloudflare Security Center to register keywords or assets (e.g., corporate logos, etc.) that customers wish to be notified of when they appear on the Internet.

A Cloudforce One discussion

Tune into our Cloudflare TV session on Cloudforce One. Blake Darché, Head of Threat Intelligence for Cloudflare Area 1, Patrick Donahue, VP Product of Application Security, and Engineering Manager Jesse Kipp discuss Cloudforce One in detail.

What you gain with Cloudforce One

  • Reduced organizational security risk
  • More confident threat investigations and responses
  • Fresh insights on the actors/TTPs targeting your industry
  • Easy to operationalize threat feeds you can't get elsewhere
  • Cloudflare threat analysts that expand your team's capability
  • Tailored research on any pressing threat or actor

Trusted by millions of Internet properties

Logo mars trusted by gray
Logo loreal trusted by gray
Logo doordash trusted by gray
Logo garmin trusted by gray
Logo ibm trusted by gray
Logo 23andme trusted by gray
Logo shopify trusted by gray
Logo lending tree trusted by gray
Logo labcorp trusted by gray
Logo ncr trusted by gray
Logo thomson reuters trusted by gray
Logo zendesk trusted by gray