Industry NewsAI Business & Ecosystem
Cloudflare partners with OpenAI to bring AI-powered vulnerability discovery and remediation to the edge
Article content
Cloudflare has announced Vulnerability Discovery and Remediation, a new service available in early access through Cloudflare Managed Defense that combines AI-powered code investigation with real-time security intelligence.
The service uses OpenAI Daybreak models, including GPT-5.6 Cyber, to identify software vulnerabilities and help generate fixes, while Cloudflare's network provides traffic and security context around those vulnerabilities.
The approach is designed to move vulnerability management beyond simply identifying potential weaknesses toward understanding which issues are actively exposed and taking defensive action while engineering teams work on permanent fixes.
From vulnerability scanning to active threat context
Traditional vulnerability scanners can produce large volumes of findings, but determining which vulnerabilities represent an immediate production risk can be difficult without additional context.
Cloudflare is using its network visibility to connect vulnerability findings with real-world traffic and attack activity.
According to the company, this allows security teams to identify vulnerabilities that are actively being targeted and prioritize them accordingly, rather than treating every finding as an isolated issue.
The distinction is important as organizations face increasingly large volumes of software vulnerabilities and increasingly automated attacks.
Protecting applications before a code fix is ready
One of the key capabilities of the new service is the ability to deploy customized Web Application Firewall rules against specific attack vectors.
This gives security teams a way to create an additional layer of protection at the edge while developers work on a permanent code-level remediation.
The model effectively separates immediate protection from longer-term remediation. An organization can block an identified exploit without waiting for the complete software development and deployment cycle to finish.
Cloudflare says no edge rule or code fix takes effect without explicit human approval.
AI-assisted code remediation
The service also uses OpenAI Daybreak models to help generate code patches based on identified vulnerabilities.
Rather than requiring developers to start the remediation process from scratch, the AI-generated patches are designed to provide a reviewable starting point that engineering teams can validate and implement.
This keeps human oversight within the remediation process while reducing some of the manual work involved in investigating and addressing vulnerabilities.
Combining code intelligence with network visibility
Cloudflare's approach brings together capabilities that are often handled by separate security tools.
Its platform spans web assets, Web Application Firewall capabilities and Workers Observability, allowing vulnerability information to be considered alongside live network and application activity.
That combination could help security teams move from static vulnerability inventories toward a more dynamic view of application risk, where the priority of a vulnerability can change based on what is happening in production.
OpenAI collaboration expands the AI security layer
The integration also expands the role of OpenAI models within enterprise cybersecurity workflows.
Through the OpenAI Daybreak Defense Network, OpenAI is working with security providers to apply frontier AI to defensive use cases. Cloudflare's deployment brings those capabilities into a platform with visibility across Internet traffic and edge security.
For enterprise security teams, the potential value lies in combining AI reasoning and code analysis with the operational context required to determine whether a vulnerability is actually being exploited.
Moving toward proactive vulnerability defense
Cloudflare's new service reflects a broader shift in cybersecurity from detection toward continuous and increasingly automated defense.
As software environments become more complex and AI-assisted attacks accelerate, security teams face pressure to reduce the time between discovering a vulnerability, protecting the affected system and deploying a permanent fix.
By connecting vulnerability discovery, edge protection and AI-assisted remediation in a single workflow, Cloudflare is positioning its network as part of that response cycle.
Vulnerability Discovery and Remediation is currently available by invitation to select Cloudflare Enterprise customers.
About Cloudflare
Cloudflare is a connectivity cloud company providing services designed to help organizations make their applications, networks and employees faster and more secure. Its platform spans security, performance, networking and developer technologies and operates across one of the world's largest interconnected networks.