A fully programmable secure web gateway
Cloudflare Gateway and Data Loss Prevention (DLP) now support execution of Cloudflare Workers code directly within the traffic inspection pipeline. This integration allows users to apply custom logic and programmatic filtering to web traffic and data exfiltration policies.
Verified State Diff
Impact & Verification Analysis
Enterprise security teams, network engineers, and developers managing Zero Trust architectures.
It enables granular, context-aware security policies that can adapt to unique business requirements, reducing reliance on vendor-provided static rules and allowing for custom data sanitization or complex compliance workflows at the edge.
Full Fact Overview
By integrating the Cloudflare Workers runtime into the Gateway and DLP stack, Cloudflare has transitioned its security products from static, rule-based configurations to a programmable architecture. This allows developers to write custom JavaScript or WebAssembly code to inspect, modify, or block HTTP/HTTPS requests and responses in real-time as they pass through the secure web gateway. This architectural shift moves the security perimeter from a rigid policy engine to a serverless execution environment, enabling complex data transformation and custom security logic that was previously impossible within the standard dashboard configuration.