API Shield

September 12, 2024

Protecting APIs from abuse using sequence learning and variable order Markov chains

At Cloudflare, we protect customer APIs from abuse. This is no easy task, as abusive traffic can take different forms, from giant DDoS attacks to low-and-slow credential stuffing campaigns. We now address this challenge in a new way: by looking outside typical volumetric measures and using statistical machine learning to find important API client request sequences.

March 5, 2024

Protecting APIs with JWT Validation

Cloudflare customers can now protect their APIs from broken authentication attacks by validating incoming JSON Web Tokens (JWTs) with API Gateway

January 9, 2024

Introducing Cloudflares 2024 API security and management report

Today, were releasing our 2024 API Security and Management Report. This blog introduces and is a supplement to the API Security and Management Report for 2024 where we detail exactly how were protecting our customers, and what it means for the future of API security

July 11, 2023

Bring your own CA for client certificate validation with API Shield

API shield customers can now upload their own CA to use for client certificate validation. This ensures that only authorized clients and devices can make requests to your API endpoint or application.

June 12, 2023

Protecting GraphQL APIs from malicious queries

Starting today, Cloudflares API Gateway can protect GraphQL APIs against malicious requests that may cause a denial of service to the origin

March 20, 2023

Everything you might have missed during Security Week 2023

Learn how Cloudflare made it easier to shift from protecting applications, to protecting employees, and making sure they are protected everywhere during Security Week 2023

March 15, 2023

Automatically discovering API endpoints and generating schemas using machine learning

Today were announcing that Cloudflare can now automatically discover all API endpoints and learn API schemas for all of our API Gateway customers

March 15, 2023

Detecting API abuse automatically using sequence analysis

Today, we're announcing Cloudflare Sequence Analytics for APIs. Using Sequence Analytics, Customers subscribed to API Gateway can view the most important sequences of API requests to their endpoints

March 12, 2023

Welcome to Security Week 2023

Welcome to Security Week 2023. This week well demonstrate how Cloudflare is making it as easy as possible to shift from protecting applications, to protecting employees, and making sure they are protected everywhere.

September 22, 2022

API Endpoint Management and Metrics are now GA

API Shield customers can save, update, and monitor the performance of API endpoints

January 26, 2022

Landscape of API Traffic

More than 50% of all traffic processed by Cloudflare is API-based, and its growing twice as fast as traditional web traffic. This growth calls for the development of dedicated security solutions.

March 24, 2021

Protecting your APIs from abuse and data exfiltration

API Shield is growing with new functionalities: Schema Validation generally available, Managed IP List, more controls to manage certificates, and Data Loss Prevention.

October 1, 2020

Introducing API Shield

Of the 18 million requests per second that traverse Cloudflares network, 50% are directed towards APIs. Cloudflare is making it simple to secure APIs through the use of strong client certificate-based identity and strict schema-based validation.