Cloudflare DLP

Protecting your organization’s most sensitive data

With the shift to hybrid work, it is harder than ever to maintain visibility and security controls over how users move and store data across cloud environments. At the same time, the financial and reputational risks to losing sensitive data are higher than ever – with IBM’s latest research estimating the average cost of a data breach at $4.35M.

Reduce your organizational risk by taking a proactive approach to data security. Cloudflare Data Loss Prevention (DLP) secures sensitive data in transit. Plus, our DLP is built into our broader Zero Trust platform, which verifies, filters, and isolates all traffic to provide holistic protection across your users, devices, applications, and the Internet.

Benefits of DLP

Securing data enables business agility

Reduce cyber risk

Prevent data exfiltration by insiders or external threats, whether unintentional or malicious. Secure sensitive info like Credit Card and U.S. Social Security Numbers.

Expand visibility

Expand visibility and control over movement of sensitive data across cloud environments and the Internet for remote and on-site users and devices

Strengthen compliance

Equip your teams with the logs and data controls they need to stay compliant with regulations, audits, and data governance best practices.

Cloudflare's DLP service

Inspect and control traffic after detecting sensitive data

Cloudflare DLP inspects HTTP/S traffic and files like Microsoft Office documents for the presence of sensitive data such as credit card information and social security numbers. After identifying the data you would like to protect, you can easily configure DLP profiles with allow or block policies to prevent information from leaving your corporate tenants.

Holistic data protection with SASE

Comprehensive data security with Cloudflare One

Cloudflare One our SASE platform, stops data from leaving controlled environments by leveraging the power of our global network to control authorized access and user permissions; log every IP, DNS and HTTP request; and scan incoming and outgoing data across all apps.

Learn more about Cloudflare One

Effectively secure your data with a Zero Trust approach.

The Cloudflare difference

DLP is built to work seamlessly across our security services and our network

Deployment simplificity

Turn on natively-integrated DLP with a few clicks in our Zero Trust dashboard.

Network resiliency

Lightning-fast TLS 1.3 inspection in all data centers for better user experiences

Innovation velocity

Our platform is architected to evolve rapidly in response to emerging business needs


Blog: Launching In-Line Data Loss Prevention (June 2022)

In June 2022, we announced the beta availability of DLP service and described our approach to the solution.

Read the blog
CFTV: In-transit data loss prevention (DLP)

Monday, June 20th 1:30PM PT Join Noelle Gotthardt to learn more about in-transit data loss prevention (DLP).

Tune In
Developer Docs: Data Loss Prevention (DLP)

Learn what steps to take to activate DLP inspection and filtering for your organization.

Read dev docs
A Roadmap to Zero Trust Architecture

This whitepaper was built by security experts to provide a vendor agnostic Zero Trust architecture and example implementation timeline. The timeline assumes that an organization is beginning their Zero Trust journey from scratch, but is meant to be useful for all organizations.

Download whitepaper
Cloudflare Zero Trust overview

Learn more about the benefits, features, and deployment outcomes of Cloudflare's Zero Trust platform.

Download brief
Cloudflare One at a glance

This brief summarizes Cloudflare One, which combines Zero Trust security with WAN-as-a-Service, firewall, and more on a single, unified global network.

Download brief
Blog: Data protection controls with Cloudflare Browser Isolation (August 2021)

This August 2021 blog post outlines some of the ways Cloudflare's Remote Browser Isolation (RBI) service protects data-in-use within browsers.

Read the blog

Ready to secure your sensitive data?