DATASHEET

Cloudforce One
Threat Intelligence and Operations

Access Cloudflare’s unmatchedthreat visibility and expertise
Cloudforce One reduces security risk through Threat
intelligence is critical for organizations to stay ahead of
emerging risk, but today’s teams often find themselves
overwhelmed and under-resourced.
Cloudforce One provides a powerful packageof intelligence, tooling, and expertise to grantsecurity teams an edge, making them smarter, more
responsive, and more secure.
• Threat research and briefings with the latestinsights
on threat actors and TTPs targeting their industry.
• Unmatched, ready-to-consume threat intelligencefeeds including domains, IPs, phishing sites, DNS
records and more.
• Threat researchers ready to augment
your team’s capability with custom RFIs
for research on any threat.

Cloudforce One Benefits• Save days/weeks in research time by making
Cloudflare part of your team
• Identify and understand new threats before
they cause harm
• Prioritize actions that meaningfully reduce risk
• Mitigate risks directly within Cloudflare platform

Cloudflare threat intelligence advantages

Threat data at massive scale

Exceptional threat researchers

Turn insights to action~20% of the Internet runs on
Cloudflare, granting uniquevisibility into trillions of threat
activity signals that no one
else has.

Grow your team’s capabilities
with Cloudflare’s deep experiencein disrupting nation-state andcommercial-state actors.

Intelligence is natively integrated
into Cloudflare’s security solutions,making it easy to take action.

This enables us to identify
attacks at the earliest stagesof conception, well before
they hit your organization.

Analyst expertise includes
threat research, malware
analysis, traffic analysis, andvulnerability research, andconducting threat operations.

© 2024 Cloudflare, Inc. All rights reserved. | 1 888 99 FLARE | enterprise@cloudflare.com | Cloudflare.com

Additionally, our API-driven threat
feeds integrate via STIX/TAXII
into SOC workflows and security
products like SIEM/SOAR, EDR/
XDR, TIP platforms, and more.

Cloudflare | Cloudforce One

Data, analysis, and dissemination
Data sources~20% of the Web runs on
Cloudflare including:
DNS Infrastructure

Threat analytics& hunting

HTTP/S reverse proxy data

ML models paired withintelligence experts

Finished intelligence

Attack infrastructure
analysis

Reports & RFIs

3 trillion requests analyzed per day

57 million requests per second

Email inbox & Web crawl data
600 million phishing signals daily

HTTP/S request
data analysis

Integrations & API

SSL/TLS cert. transparency monitor
Hundreds of millions of certificatesInternet gateway data

Tens of millions of consumer andenterprise devices running 1.1.1.1. app

Investigation portal

DNS querydata analysis

Threat feeds into products

Cloudforce One threat
research teamPremium, partner, and OSINT feedsCrowdStrike, Avira, Zvelo, Mandiant,Recorded Future, VirusTotal, & more

Cloudforce One tiers

Cloudforce One Premier

Cloudforce One Core

Quarterly multi industry threat briefings✓✓

Early access to threat research reports✓✓

Threat actor profiles✓✓

Industry-specific briefings✓

Threat briefings and insights

Threat data and intelligence
New detections based on emerging threat intel/TTPs

✓

✓

✓

LimitedHistorical threat data available via API and Dashboard

Unlimited

60 daysMonthly API queries for threat intel data

50,00010,000✓✓AdvancedStandard8 IPs

2 IPsUp to 21*

Up to 7*

206

Open port data and banners

Threat investigation portal
Brand and phishing protection
Sinkhole and honeypot API accessThreat operations
Requests for information (RFIs)
Prioritised Intelligence requirements* Annual quota; additional RFIs can be added© 2024 Cloudflare, Inc. All rights reserved. | 1 888 99 FLARE | enterprise@cloudflare.com | Cloudflare.com

REV:BDES-6049.2024JUL24