Cloudflare’s Vulnerability Discovery and Remediation Service
Cloudflare has launched an early-access service called Vulnerability Discovery and Remediation, which integrates OpenAI models accessed through Daybreak with its extensive global network and threat context. This service aims to connect potential code vulnerabilities with production signals, such as traffic patterns and existing security measures.
How the Service Operates
The service analyzes customer-authorized source code to identify possible vulnerabilities while collecting supporting evidence for each finding. By incorporating live traffic data and other security signals, Cloudflare prioritizes these findings and prepares proposed code patches. Additionally, when necessary, custom web application firewall rules are created for customer review. Automated checks are conducted on these proposed fixes, which are then reviewed by Cloudflare’s team before being shared with customers.
Empowering Customers with Control
This approach is designed to provide a clear path from vulnerability discovery to mitigation, ensuring that implementation decisions remain in the hands of the customers.
Boosting Developer Productivity with Codex
Cloudflare also reports extensive internal use of Codex across its engineering teams. According to Mark Anderson, President of Revenue at Cloudflare, one-third of the company consists of software developers, all of whom utilize Codex to enhance their productivity and improve code quality. Anderson highlighted a recent project where a four-person team completed a significant rebuild in just three days using Codex, incurring a token cost of $1,100. He noted that this same project would have taken months and potentially required ten times more developers without the tool.
Cloudflare’s Scale and Security Impact
Cloudflare operates one of the largest networks globally, handling approximately 20% of the web’s traffic. In Q1 2026, the company reported blocking an average of 234 billion cyber threats daily across its network. The Vulnerability Discovery and Remediation service effectively connects code investigation with production evidence and proposed mitigations, allowing security teams to prioritize issues and apply necessary protections while maintaining customer control over implemented changes.
Original source: OpenAI News