← Friday, October 16, 2026SecurityRelease

Cloudflare Gateway adds inline custom logic to security policies

blog.cloudflare.com by AJ Gerstenhaber, Abe Carryl 13 min read Editor score 7/10

Cloudflare is adding a Forward action and custom validation functions so customer code can run inline during Gateway and DLP policy evaluation. This moves programmability into the enforcement path, where latency and execution boundaries matter.

What: - Cloudflare Gateway and DLP add inline custom logic to security-policy evaluation through Workers.
How: - A new Forward action and custom validation functions let Workers transform traffic or supply data to policy evaluation.
Why it matters: - Inline programmability can replace separate proxies or delayed alert pipelines for environment-specific security behavior.

Traffic passes through Gateway policy evaluation, where a Worker can transform it inline. Sketched from the article's own text.

Read on blog.cloudflare.com →

Discussion

Discussion is not switched on yet. Use Note above to keep your own thoughts on this story.

Headline, summary, brief and diagram are written by a model from the source's own text; the link, byline and numbers come from the source. Read the original before relying on a claim.