Bug Bounty

Advancing cybersecurity: Cloudflare implements a new bug bounty VIP program as part of CISA Pledge commitment

2024-09-27

Cloudflare strengthens its commitment to cybersecurity by joining CISA's "Secure by Design" pledge. In line with this commitment, we're enhancing our vulnerability disclosure policy by launching a VIP bug bounty program, giving top researchers early access to our products. Keep an eye out for future updates regarding Cloudflare's CISA pledge as we work together to shape a safer digital future....

Advancing cybersecurity: Cloudflare implements a new bug bounty VIP program as part of CISA Pledge commitment

Mitigating a token-length side-channel attack in our AI products

2024-03-14

Bug Bounty LLM Vulnerabilities Developer Platform Workers AI AI Gateway SASE

The Workers AI and AI Gateway team recently collaborated closely with security researchers at Ben Gurion University regarding a report submitted through our Public Bug Bounty program. Through this process, we discovered and fully patched a vulnerability affecting all LLM providers. Here’s the story...

Cloudflare's handling of a bug in interpreting IPv4-mapped IPv6 addresses

2023-02-02

Security Bug Bounty IPv6

Recently, a vulnerability was reported to our bug bounty about a bug in the way some of our code interprets IPv4 addresses mapped into IPv6 addresses. Read about how Cloudflare addressed this vulnerability and what will prevent similar exploits in the future....

The Cloudflare Bug Bounty program and Cloudflare Pages

2022-05-06

Bug Bounty Vulnerabilities Security

The Cloudflare Bug Bounty has resulted in numerous security improvements to Cloudflare Pages...

Cloudflare's Handling of an RCE Vulnerability in cdnjs

2021-07-24

CDNJS Security Bug Bounty

Recently, a RCE vulnerability in the way cdnjs’ backend is automatically keeping web resources up to date has been disclosed. Read about how Cloudflare handled the security incident and what will prevent similar exploits in the future....