#web-security

2 articles tagged

Cloudflare WAF release card: five managed rules on 24 August 2026, default action 31 August, Pro log retention 24 hours

Engineering · Aug 24, 2026 · 12 min read

Cloudflare's 24 August 2026 WAF release ships 5 rules in Log mode - ruleset overrides make them Block

Cloudflare announced five WAF managed rules on 17 August 2026 for release on 24 August in Log mode. Its own override documentation contradicts that: ruleset and tag overrides apply to future rules.

Manu Shukla

#cloudflare #waf #web-security

Continuous session monitoring beside a single gateway checkpoint, illustrating bot detection

Web & API Development · Jul 19, 2026 · 15 min read

Cloudflare Precursor vs Turnstile: which bot defense fits your 2026 stack?

Precursor is Cloudflare's continuous, session-level bot detection for Enterprise Bot Management, live since July 13, 2026. Turnstile is the free challenge widget. This guide shows which to switch on, and when to run

Manu Shukla

#cloudflare #bot-management #turnstile