PARTNER BRIEF

Unify risk posture with
Cloudflare and partners
Exchange risk indicators and automated risk posture
enforcement with one time integrations.

Challenge: Rising complexity to manage risks
Managing risk effectively and efficiently is becoming exceedingly complex as attack surfaces expand.
Security teams today struggle with siloed tools with limited interoperability that require too much manual effort andexpertise to assess, prioritize, and mitigate evolving risks within a business.

Joint solution with Cloudflare partners
Cloudflare exchanges risk signals with best-in-class technology partners to enforce security controls dynamically.
One-time integrations with Cloudflare’s unified API help you to do more with your existing tools:●●

Ingest device posture, identity, and other risk scores from endpoint protection (EPP) and identity provider(IDP) partners to enforce posture checks for all access requests.
Share Cloudflare logs to extended detection and response (XDR) and security information and event
management (SIEM) platforms for further analysis and additional risk mitigation steps.

Adopt Zero Trust

Simplify defense in depth

Automate SOC responseDefault-deny, least privilege rules
based on identity, device postureand dynamic user risk scoring.

Layer policies to guard users anddevices from multi-channel
phishing, ransomware, and more.

Build mitigation workflows withinyour SIEM / XDR enriched by
Cloudflare telemetry.

1 888 99 FLARE | enterprise@cloudflare.com | Cloudflare.com

REV:PMM-JUNE2024

Cloudflare & Technology Partners | Unified Risk Posture

Use case: Enforce Zero Trust with Cloudflare and Partners
Below is a sample workflow of how Cloudflare and our technology partners work together to enforce Zero Trust policies andmitigate emerging risks. Here, Cloudflare exchanges activity and risk data with SIEM and EPP platforms to enforcing risk-based
policies and take additional remediation steps.

Phase 1

Phase 2Phase 3

Remote user access request

Remote user

User activity
User potentiallycompromised

BlockCloudflareactions

SWG

ZTNA withdevice posture

CES

Share logs on blocked activity likerisky web browsing & phishing emails

Block access based on
partner risk score

User risk scoring(UEBA)

Quarantine

Increase user risk score after
failed device posture check

Share Cloudflarelogs
Share device posture/ risk score withCloudflare

3rd party tool(s)SIEM / EPPactions

SIEM
Alert analyst of
suspicious activity

3rd party tool(s)SIEM

EPPDetect infected
endpoint

Propose remediation
to analyst

Select remediation &enforce additional controls

Phase 1: Automated investigation

Phase 2: Zero Trust enforcement

Phase 3: Remediation

Cloudflare and EPP & SIEM partners
help an organization detect that a user
is compromised.

This org has set up device posturechecks via Cloudflare’s Zero Trust
Network Access (ZTNA), only allowing
access when the EPP partner’s device
posture score is deemed healthy.

In parallel, the SIEM partner has
continued to analyze the specific user’s
activity and broader risks throughout
the organization’s environment. Usingmachine learning models, the SIEM
partner surfaces top risks andproposes solutions for each risk to youranalyst.

In this example, Cloudflare has recently
blocked web browsing to risky
websites and phishing emails, serving
as the first line of defense. Those logs
are then sent to a SIEM partner, whichalerts your organization’s analyst aboutsuspicious activity.
At the same time, the EPP partner
automatically scans that user’s device
and detects that it is infected. As aresult, EPP partner reflects a lower /unhealthier device posture score.

Our ZTNA denies the user’s next
request to access an application
because device posture from the EPP
partner is deemed unsafe.
Because of this failed device posturecheck, Cloudflare increases the risk
score for that user, which places themin a group with more restrictive
controls.

1 888 99 FLARE | enterprise@cloudflare.com | www.cloudflare.com

The analyst can then review and selectremediation tactics — for example,
quarantining the user’s device — tofurther reduce risk throughout theorganization.

REV:PMM-JUNE2024

Cloudflare & Technology Partners | Unified Risk Posture

What customers are saying“Cloudflare is helping us
mitigate risk more effectively
with less effort and simplifies
how we deliver Zero Trustacross my organization”“Having a single Cloudflare
solution in place to help us
manage complexity across ourglobal operations has made ourlives so much easier.”

Anthony Moisant
SVP, Chief Information Officerand Chief Security Officer, IndeedWilson Tang
Director of Engineering, Platform CoreServices, Delivery Hero

#1 job site in the world
with over 350M unique visitors per month

German online food ordering and delivery
company operating in over 70 countries
Read the case study

Ready to discuss your risk management approach?
Request a consultation
Want to keep learning more?
Read our announcement blog or visit our tech partner directory