Building an evidence-grounded agentic security operations harness on Cloudflare

Cloudflare describes its Managed Defense AI agent harness, built to help analysts handle the "alert paradox"—a single alert can cause a spike across the environment, and simultaneous alerts can overwhelm even seasoned analysts. The post explains why a single general-purpose agent failed in their first prototype: context became authority (a detection is a hypothesis, not proof), scope drifted (a prompt isn't a boundary), and failure disappeared (timeouts couldn't distinguish "not checked" from "checked and not found"). The redesign moves evidence collection and scope enforcement into deterministic application code before any model runs: fixed, versioned reconnaissance workflows collect identity, detection history, traffic baseline, enforcement outcome, and network observations, each stored with source, version, and timestamp, making evaluation reproducible. Noise is filtered early—Clef, Cloudflare's open-source decision model running on Workers AI, scores alerts against recon data, and high-likelihood false positives skip specialist analysis. For deeper review, a coordinator agent runs four specialists in parallel (traffic analysis, customer context, global telemetry, threat intelligence), with a synthesis agent combining typed findings without fetching new evidence. Global telemetry uses only aggregates to preserve customer privacy. History is treated as evidence, and related alerts are aggregated into consolidated cases. Before analysis, the system builds a versioned evidence package; specialists must cite items in it, and application code validates every citation. Clef scores evidence sufficiency and picks from a reduced list of classifications. The platform stack uses Workers, Workflows, D1, R2, Durable Objects with Flue, and AI Search. The post details how incomplete evidence is handled with three distinct states (not checked, checked with no match, checked with supporting absence), how advisories lead to concrete remediations like rate limiting or WAF rules, and that analysts remain responsible for decisions. It closes with plans for a Custom Managed tier and continuous agents that surface patterns fixed rules miss, plus availability of the early beta. 

https://blog.cloudflare.com/agentic-security-operations

Comments

Post a Comment

Popular posts from this blog

OWASP ASVS 5.0 Released - Key Updates and What You Need to Know

The OWASP Foundation has released version 5.0 of the Application Security Verification Standard (ASVS), a major update to their security framework for web applications. This new version features restructured security requirements for better clarity, expanded guidance for cloud and API security, improved DevSecOps integration for CI/CD pipelines, updated threat modeling support, and enhanced compliance mapping with standards like NIST and PCI DSS. ASVS serves as a critical benchmark for developers building secure applications, penetration testers conducting security assessments, and auditors performing compliance reviews.  The standard is available for download from the OWASP ASVS project page, with organizations encouraged to integrate it into their software development lifecycles through code reviews and security testing tools. As a vendor-neutral, community-driven project, OWASP continues to welcome contributions to further develop the standard. This release represents an importa...
Read more

Critical OpenSSH Flaws Enable MITM and DoS Attacks

On February 18, 2025, HackRead reported on two critical vulnerabilities in OpenSSH, identified by the Qualys Threat Research Unit (TRU). The first vulnerability, CVE-2025-26465, affects the OpenSSH client and permits machine-in-the-middle attacks, potentially allowing attackers to impersonate legitimate servers and compromise SSH session integrity. This flaw exists regardless of the 'VerifyHostKeyDNS' setting and has been present since OpenSSH version 6.8p1. The second vulnerability, CVE-2025-26466, impacts both the client and server, enabling pre-authentication denial-of-service attacks that consume excessive system resources, leading to potential outages. Introduced in version 9.5p1, this issue persists up to version 9.9p1. Users are strongly advised to upgrade to OpenSSH version 9.9p2 to mitigate these vulnerabilities.  https://hackread.com/critical-openssh-flaws-expose-users-mitm-dos-attacks/
Read more

MITRE ATT&CK v19 Redefines How Defenders Model Modern Threats

MITRE ATT&CK v19 introduces one of the framework’s most significant structural changes in years, splitting the former Defense Evasion tactic into two clearer categories: Stealth and Defense Impairment. The release also expands coverage for AI-enabled adversary behavior, social engineering, and mobile detection strategies, while adding greater precision to ICS through new sub-techniques. Beyond taxonomy updates, v19 signals a broader evolution of threat modeling—toward more actionable, behavior-driven intelligence that reflects how attackers increasingly blend automation, deception, and cross-domain operations.  https://medium.com/mitre-attack/attack-v19-ff329cb65d66
Read more