A starting point for threat intelligence
Cloudflare announced Threat Signals on 29 September, making a threat-indicator feed available to all accounts. The free level includes one RSS feed and a private indicator dataset with 30-day retention. Customers can inspect indicators through the dashboard or API and use tags when building security rules.
A match still needs context
The feature brings external intelligence into the same environment where customers manage application protection. It can reduce the manual work of moving indicators between tools. A listed address or domain is a lead whose relevance depends on its source, freshness and relationship to the request being examined. Customers still decide how the intelligence affects enforcement. Broader feed options sit in paid levels rather than the free starting allowance.
Sources & further reading
Introducing Threat Signals: agentic skills for open-source threat intelligence, free for every Cloudflare accountPublished by Capvise Media. Editorial standards · Corrections
