Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

What AWS Transform Means for Your Application Modernization Strategy

Technical debt costs US enterprises an estimated $2.41 trillion per year, according to Accenture research cited by AWS. For most organisations, roughly 30% of engineering time gets absorbed by maintaining legacy systems – work that’s necessary, but produces no new business value. That’s the problem AWS has been trying to solve with AWS Transform, its agentic AI service for enterprise application modernization.

GitProtect 2.2.0: GitHub Enterprise Cloud with Data Residency Backups, AES-GCM Encryption, and More

The huge news is coming: GitProtect is the first solution on the market to support the backup of the GitHub Enterprise Cloud with Data Residency environments. The launch of version 2.2.0 also brings more secure and efficient AES-GCM encryption, a refreshed dashboard, a new onboarding experience, support for Azure DevOps related work links, and much more. Let’s dive into all the new features.

Managed OAuth for Access: make internal apps agent-ready in one click

We have thousands of internal apps at Cloudflare. Some are things we’ve built ourselves, others are self-hosted instances of software built by others. They range from business-critical apps nearly every person uses, to side projects and prototypes. All of these apps are protected by Cloudflare Access. But when we started using and building agents — particularly for uses beyond writing code — we hit a wall. People could access apps behind Access, but their agents couldn’t.

Securing non-human identities: automated revocation, OAuth, and scoped permissions

Agents let you build software faster than ever, but securing your environment and the code you write — from both mistakes and malice — takes real effort. Open Web Application Security Project (OWASP) details a number of risks present in agentic AI systems, including the risk of credential leaks, user impersonation, and elevation of privilege.

Secure private networking for everyone: users, nodes, agents, Workers - introducing Cloudflare Mesh

AI agents have changed how teams think about private network access. Your coding agent needs to query a staging database. Your production agent needs to call an internal API. Your personal AI assistant needs to reach a service running on your home network. The clients are no longer just humans or services. They're agents, running autonomously, making requests you didn't explicitly approve, against infrastructure you need to keep secure.

"It's Quite a Shock": The Quantum Deadline Is Real

In this World Quantum Day special edition of This Week in NET, host João Tomé is joined by Bas Westerbaan (Principal Research Engineer) and Sharon Goldberg (Senior Director, Product) to explain why the timeline for post-quantum cryptography may be arriving sooner than expected. Recent research suggests the number of qubits required to break today’s encryption could fall dramatically, accelerating the urgency for companies and the Internet ecosystem to migrate to post-quantum security. Google has set a 2029 migration target, and Cloudflare is working toward a similar timeline.

Understanding Cloudflare's network architecture

For decades, enterprise IT relied on a “hub and spoke” security model. But between the explosion of cloud infrastructure, SaaS apps and a remote workforce, that old perimeter hasn't just cracked—it’s shattered. In an attempt to stay on top of the advancing perimeter, many different solutions from many vendors entered the market and created a "spaghetti mess" of point solutions that drive up costs and tank user experience. Cloudflare is an answer to this problem, delivering everything you need to secure your apps, networks, users, data and devices.

Lightboard series - Secure your AI-powered applications with Cloudflare

Humair from Cloudflare walks through the details of how Cloudflare's AI Security for Apps secures AI-powered applications. Learn how Cloudflare can discover AI/LLM endpoints and detect and mitigate AI-specific threats like PII exposure, unsafe/toxic content, prompt injection and jailbreak. Learn more.