{"source":"https://www.cloudflare.com/application-services/","category":"Application Services","products":[{"slug":"waf","name":"Web Application Firewall","short":"Protect business-critical web apps from exploits and the OWASP Top 10.","description":"An enterprise-grade web application firewall that inspects every request at the network edge, blocking SQL injection, cross-site scripting, and zero-day exploits before they reach your origin.","url":"https://www.cloudflare.com/application-services/products/waf/","icon":"shield"},{"slug":"cdn","name":"CDN","short":"Deliver content fast from 335 cities with caching and optimization.","description":"A massively scalable content delivery network spanning 335 cities in 125+ countries. Static and dynamic content is cached close to users with Brotli compression, HTTP/3, and image optimization built in.","url":"https://www.cloudflare.com/application-services/products/cdn/","icon":"globe"},{"slug":"ddos-protection","name":"DDoS Protection","short":"Unmetered mitigation of DDoS attacks of any size, in seconds.","description":"Backed by 534 Tbps of global network edge capacity, Cloudflare absorbs the largest DDoS attacks ever recorded without ever charging for mitigation. Attacks are detected and mitigated in seconds, automatically.","url":"https://www.cloudflare.com/ddos/","icon":"bolt"},{"slug":"managed-rules","name":"Managed Rules","short":"Curated rule sets maintained by Cloudflare security experts.","description":"Ready-made rule sets covering the OWASP Top 10, known CVEs, and platform-specific exploits. Cloudflare's security team updates them continuously so you are protected against new threats within hours of disclosure.","url":"https://developers.cloudflare.com/waf/managed-rules/","icon":"list"},{"slug":"custom-rules","name":"Custom Rules","short":"Write your own filtering expressions to allow, block, or challenge traffic.","description":"Full control over your traffic with a powerful expression language. Match on IP, headers, ASN, bot score, and hundreds of fields, then choose the action: allow, block, challenge, log, or route.","url":"https://developers.cloudflare.com/waf/custom-rules/","icon":"sliders"},{"slug":"turnstile","name":"Turnstile","short":"A privacy-friendly CAPTCHA alternative that verifies humans without puzzles.","description":"Automatic human verification with no CAPTCHA puzzles, no data harvesting, and no tracking. Runs in the background using machine learning and proof-of-work signals to separate humans from bots.","url":"https://www.cloudflare.com/application-services/products/turnstile/","icon":"check"},{"slug":"bot-management","name":"Bot Management","short":"Machine-learning detection that stops credential stuffing and scraping.","description":"Advanced bot detection using machine learning, behavioral analysis, and fingerprinting. Stop credential stuffing, content scraping, inventory hoarding, and carding before they impact your business.","url":"https://www.cloudflare.com/application-services/products/bot-management/","icon":"robot"},{"slug":"api-shield","name":"API Shield","short":"Discover, monitor, and protect your APIs with schema validation.","description":"End-to-end API security: discover your API surface, enforce strict schema validation, require mutual TLS or token authentication, and get alerts on API abuse and anomalies.","url":"https://www.cloudflare.com/application-services/products/api-shield/","icon":"key"},{"slug":"ai-security-apps","name":"AI Security for Apps","short":"Protect AI-powered apps from prompt injection, data leaks, and abuse.","description":"Purpose-built protections for AI applications: detect prompt injection, prevent sensitive data from leaking into model requests, and control which AI crawlers can access your content.","url":"https://www.cloudflare.com/application-services/products/ai-security-for-apps/","icon":"spark"},{"slug":"email-security","name":"Email Security","short":"Detect and block phishing, malware, and impersonation.","description":"Cloud-native email security that scans inbound and outbound mail for phishing, business email compromise, malware, and account takeover attempts, with DMARC management to stop domain spoofing.","url":"https://www.cloudflare.com/products/email-security/","icon":"mail"}]}