Cloudforce One

Cloudflare Threat Intelligence and Operations

Cloudforce One packages the vitals aspects of modern threat intelligence and operations to make organizations smarter, more responsive, and more secure. Cloudforce One is led by a world-class threat research team, experienced at disrupting global-scale threat actors.

cforce one

Learn more about Cloudforce One

Why Cloudforce One is different

Threat data at breathtaking scale

Only Cloudflare protects ~20% of the world's websites, allowing us to analyze a stunning amount of global data that nobody else has. We convert this data to finished, actionable threat intelligence.

Proven threat analytics and models

We run our vast threat data through dozens of layers of analytics and threat models to refine it into actionable threat intelligence, ready to be ingested into security tools.

World-class threat researchers

Cloudforce One calls on a world-class team of researchers, steeped in expertise analyzing and stopping nation-state and commercial-state cyber actors.

The Cloudforce One offering

Insights on adversaries

Insights on adversaries

We empower security teams to make faster, more informed decisions through compelling research and insights about adversaries.

  • Threat briefings
  • In-depth attacker profiles including IoCs
  • Research on nation-state and commercial-state adversary TTPs
  • Industry-specific briefings

Finished threat intelligence

Finished threat intelligence

Incorporate differentiated, finished threat intelligence into your security postures and tools for more effective security.

  • Finished Threat feeds (STIX/TAXII)
  • Phishing and brand protections
  • Brand/phishing takedown service
  • Sinkholes and honeypots API

Threat Research RFIs

Threat Research RFIs

Make our threat researchers an extension of your team. Directly access our experts for bespoke threat intelligence reports that profile any attack, threat or threat actor of interest.

  • RFI process for threat
  • Streamlined three-step process
  • Progress tracking
  • Unlimited threat lookups in Cloudflare Security Center

Cloudforce One tools for security analysts

As part of Cloudflare One, customers have access to powerful tools to strengthen security postures.

Threat investigation portal

Threat investigation portal

Speed threat investigations with instant threat queries in Cloudflare Security Center's Investigate tab for context on IPs, domains, ASN, URLs and more.

Automated Sinkhole API

Automated Sinkhole API

Sinkholes created on-demand to monitor hosts infected with malware and prevent them from communicating with command-and-control (C2) servers.

Brand and phishing protections

Brand and phishing protections

Brand and phishing protections are available in Cloudflare Security Center to register keywords or assets (e.g., corporate logos, etc.) that customers wish to be notified of when they appear on the Internet.

A Cloudforce One discussion

Tune into our Cloudflare TV session on Cloudforce One. Blake Darché, Head of Threat Intelligence for Cloudflare Area 1, Patrick Donahue, VP Product of Application Security, and Engineering Manager Jesse Kipp discuss Cloudforce One in detail.

cforce one

What you gain with Cloudforce One

  • Reduced organizational security risk
  • More confident threat investigations and responses
  • Fresh insights on the actors/TTPs targeting your industry
  • Easy to operationalize threat feeds you can't get elsewhere
  • Cloudflare threat analysts that expand your team's capability
  • Tailored research on any pressing threat or actor

Trusted by millions of Internet properties

logo mars gray 32px wrapper
logo loreal gray 32px wrapper
logo doordash gray 32px wrapper
logo garmin gray 32px wrapper
logo ibm gray 32px wrapper
logo 23andme color 32px wrapper
logo shopify color 32px wrapper
logo lending tree color 32px wrapper
logo labcorp color 32px wrapper
logo ncr gray 32px wrapper
logo thomson reuters gray 32px wrapper
logo zendesk gray 32px wrapper