DOCUMENTTYPE
Datasheet

Cloudforce One
Cloudflare Threat Intelligence and Operations

Stronger security and greater situationalawareness for security teams
Cloudforce One reduces security risk through a powerful
package of security intelligence, tools, and operations tomake SOC and security teams smarter, more responsive,and more secure.
●●●Threat research and briefings arm organizations
with the latest insights on threat actors and TTPs
targeting their industry.
Unmatched, ready-to-consume threat intelligencefeeds including domains, IPs, phishing sites, DNS
records and more.
Threat researchers ready to augment your team’s
capability with custom RFIs for research on anythreat.

Cloudforce One makes Cloudflare’s distinguished threat
intelligence available to customers, to bolster SOC teams
and security postures.

Advanced tools to solidify security postures
Additionally, customers get access to multiple tools tosolidify security and speed investigations:●●●

An automated, API-driven sinkhole service.
Cloudflare Security Center Investigate to querythreat data on IPs, ASNs, URLs, and domains.
Brand and phishing protection that notifies
when important brand keywords or assets areused in attack campaigns.

Cloudforce One tiers

1 888 99 FLARE | enterprise@cloudflare.com | www.cloudflare.com* Annual quota; additional RFIs can be addedCloudflare | Cloudforce One

Cloudflare threat intelligence advantages
Threat data at Cloudflare scale
We offer differentiated threat intelligence because weanalyze vast amounts of threat data nobody else has:●●●

Up to 48 million HTTP requests per second at peak
1.7+ trillion queries analyzed per day~8 billion preemptive attack campaign signals per day

Exceptional threat researchers
Cloudforce One is led by our world-class threat researchteam, with experience analyzing threats at nation-statescale. The team’s expertise spans threat research,
malware/vulnerability research, and threat operations todisrupt threat actors. The team publishes briefings andreports and leads RFI processes for organizations seeking
detail on threats targeting them and their industry.
Streamlined integrations
Our API-driven threat feeds easily integrate via STIX/TAXII
into SOC workflows and security products like
SIEM/SOAR, EDR/XDR, TIP platforms, firewalls, or security
analytics. Our threat intelligence automatically protects
Cloudflare customers, automatically fed into our Zero
Trust suite, Magic Firewall, WAF and API Gateway.

Converting data to intelligence with layered
data/threat analysis models
HTTP reverse proxy threat analysis

Attack fingerprint analysis, application attackdetections, machine learning models, DDoS
analysis, bot detections, TLS certificatemonitoring.

DNS Analysis

DGA domain detection, DNS tunneling, newly
seen/registered domains, brand protection
computer vision.

Threat and infrastructure analysis

28 ML models including: malicious email
content/attachments, credential harvestingsites, phishing website/spoofed domain
detection, sender reputation model, BEC,
malware hosting sites, IP classification, etc.

More agile SOC analysts

More effective security teams

More confident CISOs

Security analysts gain greatercontext and actionable
information to speed
investigations. Cloudforce One
provides visibility into threats via
research that prioritizes important
TTPs, threat experts on call toassist and our Threat
Investigation Portal to provide
instant context on current andhistorical threat data like IPs,ASNs, URLs and domains.

Teams charged with bolstering
the effectiveness oforganizational security postures
benefit from actionable threat
feeds that are easily
operationalized with direct
STIX/TAXII integrations into
security tools, to block morethreats outright.

Security leaders reduce
security risk through new
intelligence that keeps
organizations safer. Withsecurity postures more
effective at stopping threats
before they do damage, CISOs
will respond to fewer large
security incidents. Additionally,
they will maximize investments
in security tools by arming
them with distinguished threat
intelligence feeds.

Tools like phishing protections,brand protection and sinkholes
also help deliver a more effective
security posture.

1 888 99 FLARE | enterprise@cloudflare.com | www.cloudflare.com

REV:PMM-SEPT2022