Cloudflare WAF developers.cloudflare.com ↗
Cloudflare's managed web application firewall.
ServiceSecurity & privacywafmitigationcdnedge-protection
Recommended in 2 threads
Dutch National Cyber Security Center is Offline because it uses PHPncsc.nl ·
Deployed managed rules to mitigate the PHP exploit until patching.
PHP session.upload_progress heap UAF (CVE-2026-109618 / -109619)jackalsyn.com ·
Its managed rules reportedly block known exploit payloads, though you need to lock the origin to Cloudflare's IPs or a tunnel.
Similar tools
- 1 thread
- Cloudflare Durable Objects Hosting & SaaS0 threads
Cloudflare's stateful serverless objects with built-in SQLite storage.
- 1 thread
- 1 thread
- 1 thread
- Privacy Guides ↗Security & privacy1 thread
A community website recommending privacy tools, including VPN providers.
- OneCRL ↗Security & privacy1 thread
Mozilla's centrally pushed list of revoked intermediate certificates for Firefox.
- Durable Objects Infrastructure & cloud1 thread
Cloudflare's stateful serverless objects with built-in SQLite storage.
Also in Security & privacy
- 2 threads
- Convergence ↗2 threads
Moxie Marlinspike's 2011 proposal for client-chosen notary-based TLS certificate verification.
- Ente Photos2 threads
An end-to-end encrypted photo storage service.
- Lockdown Mode ↗2 threads
An optional iOS hardening mode that restricts attachments, web features and connections.
- Paranoid Crypto ↗2 threads
Google's open-source library for detecting weaknesses in cryptographic keys and signatures.
- 2 threads
- Tor2 threads
An anonymity network that routes traffic through volunteer relays.
- YubiKey2 threads
A hardware security key supporting FIDO2, PIV and OpenPGP.
- 1Password ↗1 thread
A commercial password manager with a built-in SSH agent that can be unlocked with Touch ID.
- ACME Renewal Information1 thread
An ACME extension that lets CAs tell clients when to renew certificates early.
- AWS WAF1 thread
Amazon's managed web application firewall service.
- AWS-LC1 thread
AWS's general-purpose cryptographic library derived from BoringSSL.
Link from a commenter, not checked or endorsed by us: ↗ https://developers.cloudflare.com/waf/change-log/changelog/