A fully programmable secure web gateway

Cloudflare announced programmable extensions for its Gateway and Data Loss Prevention products that let customers run Cloudflare Workers directly within security policy processing, aiming to overcome the limits of conventional allow, block, isolate, and log actions. The new Forward action, available in public beta, routes matching HTTP traffic through a Worker that can transform requests or responses, proxy traffic, store data, or trigger asynchronous actions such as alerts, while forthcoming Custom Functions will return typed values for use as conditions in Gateway network and HTTP policies. Cloudflare says the integration avoids additional network hops because Gateway and Workers operate on the same distributed edge infrastructure, allowing organizations to add capabilities such as JWT-based header injection, access-justification pages, real-time DLP notifications, file inspection, and internal risk-score evaluation without operating separate proxy infrastructure. DLP custom validation functions are available immediately and enable customers to validate detected credentials, secrets, or other sensitive data against their own systems before enforcement decisions are made. Forward and Custom Functions are intended for all Zero Trust plans at general availability, with dispatched Worker traffic billed under standard Workers pricing, and Cloudflare plans to extend similar programmable entry points across Cloudflare One services, beginning with Email Security.

Use this post, company, and trend context to find content marketing opportunities, perform competitive analysis, or address product feature gaps via the Plushcap MCP server or the Plushcap API.