See risk, fix risk: introducing Remediation in Cloudflare CASB

Cloudflare introduces CASB Remediation within Cloudflare One, enabling security teams to fix risky file-sharing (remove public links, tenant-wide shares, and external shares, including DLP-matched files) directly from the CASB Findings page for Microsoft 365 and Google Workspace without deleting files. Actions are API-driven and logged to Admin logs; the backend leverages Workers, Workflows, Queues, Workers KV, Secrets Store, and Hyperdrive, with observed p50/p90 job completion times of ~48s/72s. Planned enhancements include quarantine actions, custom webhooks, autoremediation policies, bulk remediation, and expanded SaaS integrations; the feature requires a paid CASB license.