Cloudflare Announces General Availability of AI Security for Apps

Cloudflare has announced the general availability of AI Security for Apps, a solution designed to detect and mitigate threats to AI-powered applications. This new capability is part of Cloudflare's reverse proxy and is now available to all customers, including those on Free, Pro, and Business plans. AI Security for Apps provides three key benefits: (1) discovery of AI-powered apps across web properties, (2) detection of malicious or off-policy behavior, and (3) mitigation of threats via the WAF rule builder.

Key Technical Details

AI Security for Apps uses a detection system that looks at how endpoints behave, rather than just their names or path patterns. This approach allows it to identify AI-powered endpoints that don't have a traditional chat interface, such as product search or recommendation engines. The system requires sufficient valid traffic to confidently identify AI-powered endpoints, which are then visible under Security → Web Assets, labeled as cf-llm.

Practical Implications for Developers

With AI Security for Apps, developers can now gain visibility into where AI is deployed across their Internet-facing apps, regardless of where the models are hosted or what provider is used. This capability is essential for identifying and mitigating threats to AI-powered applications, which are increasingly being used to interact with customers and process sensitive data. By using AI Security for Apps, developers can ensure that their AI-powered applications are secure and compliant with industry standards.

Expanded Collaboration and Partnerships

Cloudflare has also announced an expanded collaboration with IBM, which has chosen Cloudflare to deliver AI security to its cloud customers. Additionally, Cloudflare is partnering with Wiz to give mutual customers a unified view of their AI security posture. These partnerships demonstrate Cloudflare's commitment to providing a comprehensive and integrated security solution for AI-powered applications.