Cloudflare Expands Threat Intelligence Offering with New Comprehensive, Real-Time Events Platform

Rhea-AI Summary

Cloudflare (NYSE: NET) has launched the Cloudforce One threat events platform, a new real-time intelligence system for monitoring cyberattacks across the Internet. The platform leverages Cloudflare's global network, which blocked an average of 227 billion cyber threats daily during Q4 2024.

Built on Cloudflare Workers AI, the platform provides organizations with a comprehensive view of attack streams, actionable insights, and personalized threat intelligence based on specific environments, industries, or regions. The solution addresses the growing challenge of cybercrime, projected to cost $10.5 trillion in 2025, by offering context-rich threat intelligence that helps security teams prioritize and respond to the most critical threats.

The platform's key features include an attacker timelapse view, detailed threat actor profiles, and actionable indicators of compromise (IoCs), designed to help organizations improve their security posture and operational efficiency.

Positive

• Launched new Cloudforce One platform leveraging massive global network data
• Blocked 227 billion cyber threats daily in Q4 2024
• Platform offers real-time, actionable threat intelligence
• Built on scalable Cloudflare Workers AI technology

Negative

• None.

Insights

Financial Analyst

Cloudflare's launch of the Cloudforce One threat events platform represents a strategic expansion of its security product portfolio, positioning the company to capture additional market share in the growing cybersecurity sector. With cybercrime costs projected to reach $10.5 trillion in 2025, this product addresses clear market demand.

The platform leverages Cloudflare's existing network infrastructure - which blocked an average of 227 billion cyber threats daily in Q4 2024 - to deliver differentiated threat intelligence. This approach demonstrates effective monetization of the company's core infrastructure assets without significant additional capital investment.

Built on Cloudflare Workers AI, this solution integrates with their existing technology stack, potentially creating cross-selling opportunities across their customer base. The platform appears designed to address specific customer pain points around actionability and contextualization of threat data, which could drive adoption among security-conscious enterprises.

From a competitive standpoint, Cloudflare's emphasis on their unique global visibility suggests they've identified a defensible market position. By transforming network telemetry into actionable security intelligence, this launch extends Cloudflare beyond connectivity into higher-value security services - a strategic move that could improve overall revenue quality if successfully executed.

Cybersecurity Expert

Cloudflare's new threat events platform addresses a fundamental problem in threat intelligence: the gap between data collection and actionable insights. Most security teams suffer from alert fatigue and intelligence overload rather than intelligence scarcity.

The technical approach - leveraging Cloudflare's massive network visibility across one of the internet's largest infrastructures - creates a differentiated data foundation. Their processing of 227 billion daily threats provides statistical significance that smaller security vendors simply cannot match.

Three key technical capabilities stand out: the attacker timelapse view for tracking threat progression, the environment-specific customization, and the contextual enrichment of indicators of compromise. These features address the core problems of prioritization and relevance that plague most threat intelligence platforms.

Building the solution on Cloudflare Workers AI suggests they're applying machine learning to threat pattern recognition, which is essential for scaling beyond manual analysis. This matters because effective threat intelligence requires both breadth (comprehensive data collection) and depth (meaningful analysis and context).

For enterprises struggling with fragmented security tools, this platform could reduce the cognitive burden on already-strained security teams by consolidating intelligence flows and providing richer context for security events.

Customers can tap into insights from Cloudflare’s global network – one of the largest in the world – which blocked an average of 227 billion cyber threats each day during Q4 2024

SAN FRANCISCO--(BUSINESS WIRE)-- Cloudflare, Inc. (NYSE: NET), the leading connectivity cloud company, today launched the Cloudforce One threat events platform to provide real-time intelligence on cyberattacks occurring across the Internet. Based on telemetry from Cloudflare’s massive global network, Cloudforce One’s threat events platform helps security teams get more done with the same resources by spotting issues faster, responding to threats quickly and staying one step ahead of how cybercriminals operate and what systems they target.

Every day, cybercriminals change tactics, finding new vulnerabilities to exploit and ways to overwhelm their victims. What’s more, cybercrime costs are projected to reach $10.5 trillion in 2025. For organizations to keep up, they need to understand the threat landscape they face. However, traditional threat intelligence feeds often lack meaningful or complete context for why a threat event was placed on the feed–similar to getting a warning without an explanation or path to resolution. Optimal threat intelligence feeds need to cut through the noise to deliver specific, actionable information about cybercriminals, emerging risks, and indicators of compromise (IoCs) that directly impact an organization's security posture.

“Not all threat feeds are reliable or timely. The industry is plagued by insights that are stale or fragmented, significantly increasing organizations’ chances of falling victim to hackers,” said Matthew Prince, co-founder and CEO, Cloudflare. “Cloudflare has built one of the world’s largest global networks, which positions us to be one of the only companies that has access to the most complete and accurate threat intelligence. Our unique robust visibility makes our threat events platform the most comprehensive option to move the needle.”

Built on Cloudflare Workers AI, the threat events platform is designed to both scale and maintain resiliency during surges in data that reflect the unpredictable nature of attacks on the Internet. Starting today, the Cloudforce One threat events platform can help organizations:

• Gain a single view of the constant attack stream across the Internet: Now, organizations will have access to an attacker timelapse view powered by threat insights no one else has, designed to answer strategic questions and drill down into the details of an attack. This approach ensures that users have access to the most relevant information at their fingertips.
• Take action against today’s sophisticated threat actors: Security teams can tap into personalized information for a specific environment, industry or region. Threat events provide users with actionable IoCs and event summaries, including the associated threat actor group, with profiles that break down methods and map tactics.
• Boost efficiency and reaction speed of security teams: Threat events provide valuable context around the data gathered, allowing security teams to prioritize activity and focus limited resources on the most pressing threats. Businesses can significantly improve their threat intelligence ecosystem and overall security posture by routing and integrating the right threat intelligence into cybersecurity tools.

“Organizations need actionable threat intelligence to understand the scale of threats they are up against, and how the aggression and techniques of hackers are evolving,” said Blake Darché, Head of Cloudforce One, Cloudflare. “Most industry tools flood security teams with threat intelligence that's irrelevant, often leading to false positives and/or negatives. Cloudforce One’s threat events platform keeps customers focused on the most pressing threats to their direct environment, from trivial risks up through complex use cases like the exploitation of CVEs or insider threats.”

To learn more, please check out the resources below:

• Blog: Unleashing improved context for threat actor activity with our threat events platform
• Cloudforce One: Threat events platform

About Cloudflare

Cloudflare, Inc. (NYSE: NET) is the leading connectivity cloud company on a mission to help build a better Internet. It empowers organizations to make their employees, applications and networks faster and more secure everywhere, while reducing complexity and cost. Cloudflare’s connectivity cloud delivers the most full-featured, unified platform of cloud-native products and developer tools, so any organization can gain the control they need to work, develop, and accelerate their business.

Powered by one of the world’s largest and most interconnected networks, Cloudflare blocks billions of threats online for its customers every day. It is trusted by millions of organizations – from the largest brands to entrepreneurs and small businesses to nonprofits, humanitarian groups, and governments across the globe.

Learn more about Cloudflare’s connectivity cloud at cloudflare.com/connectivity-cloud. Learn more about the latest Internet trends and insights at https://radar.cloudflare.com.

Follow us: Blog | X | LinkedIn | Facebook | Instagram

Forward-Looking Statements

This press release contains forward-looking statements within the meaning of Section 27A of the Securities Act of 1933, as amended, and Section 21E of the Securities Exchange Act of 1934, as amended, which statements involve substantial risks and uncertainties. In some cases, you can identify forward-looking statements because they contain words such as “may,” “will,” “should,” “expect,” “explore,” “plan,” “anticipate,” “could,” “intend,” “target,” “project,” “contemplate,” “believe,” “estimate,” “predict,” “potential,” or “continue,” or the negative of these words, or other similar terms or expressions that concern Cloudflare’s expectations, strategy, plans, or intentions. However, not all forward-looking statements contain these identifying words. Forward-looking statements expressed or implied in this press release include, but are not limited to, statements regarding the capabilities and effectiveness of the Cloudforce One threat events platform, as well as Cloudflare’s other products and technology, the benefits to Cloudflare’s customers from using the Cloudforce One threat events platform and Cloudflare’s other products and technology, Cloudflare’s technological development, future operations, growth, initiatives, or strategies, and comments made by Cloudflare’s CEO, Cloudflare’s Head of Cloudforce One, and others. Actual results could differ materially from those stated or implied in forward-looking statements due to a number of factors, including but not limited to, risks detailed in Cloudflare’s filings with the Securities and Exchange Commission (SEC), including Cloudflare’s Annual Report on Form 10-K filed on February 20, 2025, as well as other filings that Cloudflare may make from time to time with the SEC.

The forward-looking statements made in this press release relate only to events as of the date on which the statements are made. Cloudflare undertakes no obligation to update any forward-looking statements made in this press release to reflect events or circumstances after the date of this press release or to reflect new information or the occurrence of unanticipated events, except as required by law. Cloudflare may not actually achieve the plans, intentions, or expectations disclosed in Cloudflare’s forward-looking statements, and you should not place undue reliance on Cloudflare’s forward-looking statements.

© 2025 Cloudflare, Inc. All rights reserved. Cloudflare, the Cloudflare logo, and other Cloudflare marks are trademarks and/or registered trademarks of Cloudflare, Inc. in the U.S. and other jurisdictions. All other marks and names referenced herein may be trademarks of their respective owners.

View source version on businesswire.com: https://www.businesswire.com/news/home/20250318221852/en/

Cloudflare, Inc.

Daniella Vallurupalli

Vice President, Head of Global Communications

press@cloudflare.com

Source: Cloudflare, Inc.

FAQ

How many cyber threats did Cloudflare (NET) block daily in Q4 2024?

Cloudflare blocked an average of 227 billion cyber threats each day during Q4 2024 through its global network.

What are the key features of Cloudflare's (NET) new Cloudforce One platform?

The platform offers attacker timelapse view, actionable IoCs, threat actor profiles, and personalized threat intelligence based on environment, industry, or region.

What is the projected cost of cybercrime by 2025 according to Cloudflare's (NET) announcement?

Cybercrime costs are projected to reach $10.5 trillion in 2025.

What technology powers Cloudflare's (NET) new threat events platform?

The platform is built on Cloudflare Workers AI, designed to scale and maintain resiliency during attack surges.