Always-on detections: eliminating the WAF “log versus block” trade-off

Cloudflare announces Attack Signature Detection — an always-on, detection-only signature framework that inspects every proxied request, tags matches with metadata (cf.waf.signature.request.*) and feeds Security Analytics to simplify safe onboarding and policy creation — and previews Full-Transaction Detection, which correlates requests and responses to reduce false positives and detect successful exploits, data exfiltration, and misconfigurations (with response fields cf.waf.signature.response.*). The document details signature categories/confidence levels, analytics-driven tuning and rule creation workflows, and the availability status (Attack Signature in Early Access; Full-Transaction under development).