← Wednesday, September 30, 2026SecurityDeep dive
Cloudflare tests WAFs by having LLMs mutate attack payloads
Cloudflare describes a dynamic test in which an LLM probes running applications using only selected HTTP responses, iterating on payloads without source-code or rule access. This offers a way to think about testing defenses against adaptive attackers, though the excerpt gives no results.
- What
- Cloudflare built a dynamic WAF tester that has LLMs mutate known attack payloads and evaluate responses without seeing WAF rules or source code.
- How
- A proposal call suggests a variation, code sends it, and a review call uses response data to guide the next attempt; non-blocked requests go to human review.
- Why it matters
- Adaptive testing can expose gaps for new detections, while treating bypass candidates as leads avoids mistaking them for confirmed exploits.
Discussion
Discussion is not switched on yet. Use Note above to keep your own thoughts on this story.
Headline, summary, brief and diagram are written by a model from the source's own text; the link, byline and numbers come from the source. Read the original before relying on a claim.
