WAF. DDoS. Bot protection. Edge-native.
Enterprise-grade security at the edge. WAF rules, DDoS protection, bot detection, and geo-fencing powered by Cloudflare's global network. Protect your APIs and applications from 330+ edge locations worldwide.
Core Capabilities
Everything Edge Security brings to your organization.
Cloudflare WAF Management
Managed WAF rules protect your APIs and applications against OWASP Top 10, SQL injection, XSS, and zero-day exploits. Custom rules can be deployed and managed through the Arqera dashboard.
Always-On DDoS Protection
Network-layer and application-layer DDoS mitigation absorbs attacks before they reach your infrastructure. Protection capacity exceeds 100 Tbps — larger than any recorded attack in history.
ML-Powered Bot Detection
Machine learning distinguishes legitimate traffic from scrapers, credential stuffers, inventory hoarders, and abuse bots. Challenge suspicious traffic with managed challenges that are invisible to real users.
Geo-Fencing & Data Residency
Restrict access by geography for data residency compliance. Block, challenge, or rate-limit traffic from specific regions. Essential for GDPR data localisation and export control requirements.
Intelligent Rate Limiting
API-aware rate limiting protects backend services from abuse. Set limits per endpoint, per API key, or per IP with configurable response codes and retry headers.
Custom Domain SSL
Provision and manage SSL certificates for custom domains automatically. Certificate renewal, OCSP stapling, and TLS 1.3 enforcement are handled without manual intervention.
Real-Time Threat Analytics
Monitor attack patterns, blocked requests, and threat intelligence in real time. Dashboards show traffic origin, attack vectors, and rule effectiveness with drill-down capabilities.
Use Cases
API Protection for AI Endpoints
Protect AI inference endpoints from abuse, credential stuffing, and cost-based attacks. Rate limiting prevents individual actors from exhausting your AI budget, while WAF rules block prompt injection attempts at the edge.
AI CompaniesData Residency Compliance
EU-based companies can enforce GDPR data residency by geo-fencing traffic and ensuring requests are served from EU edge locations. Compliance evidence is generated automatically for every geo-restriction event.
Regulated IndustriesE-Commerce Fraud Prevention
Block bots that scrape pricing, hoard inventory, or abuse promotional codes. ML-powered detection identifies automated traffic patterns and challenges them before they impact legitimate customers.
E-CommerceWhat's Included
Enterprise plan only
Edge Security is available exclusively on the Enterprise plan.
Enterprise
Full edge security suite
- WAF management
- DDoS protection
- Bot detection
- Geo-fencing
- Rate limiting
- Threat analytics