AI Defense Matrix Catalog

Cloudflare AI Security for Apps

Visit official site ↗

Overview

Product details compiled from public sources, each with a citation.

Vendor
Cloudflare1
Description
WAF protection for LLM-powered apps that discovers AI endpoints and detects and mitigates prompt injection, data exposure, and unbounded consumption.1
Deployment
SaaS1
Status
Active1
Compliance
SOC 2 Type 2, ISO 27001, ISO 27701, PCI DSS2 (company-level, see Methodology)

Matrix Coverage

Where this product defends, by asset class and NIST CSF function. The Coverage column shows whether each asset is Primary, Secondary, or Adjacent to what the product does. The table omits empty rows and columns.

Asset class IdentifyProtectDetect Coverage
AI Gateways and Routers Primary 1

Framework Relevance

These frameworks include controls relevant to the asset classes Cloudflare AI Security for Apps defends. This is an editorial inference from the AI Defense Matrix asset-level crossmap, not a statement that Cloudflare implements these controls or is certified against them.

Expand Collapse
Framework Asset class Relevant controls
NIST IR 8596 AI Gateways and Routers AI data flows; APIs; inference endpoints (traffic side); model registries and dataset sources
CSA AI Controls Matrix AI Gateways and Routers Infrastructure Security; Interoperability and Portability
ISO 42001 AI Gateways and Routers A.8 Information for interested parties; A.9 Use of AI systems; A.10 Third-party and customer relationships
Google SAIF AI Gateways and Routers Harden and monitor infrastructure; network-level access and egress controls
SANS Critical AI Security Guidelines AI Gateways and Routers Conventional Security Controls (authenticate and control access to inference APIs; API key management); Model I/O Handling (rate limiting; egress output filtering); Monitoring (interaction and API-usage logging)
MITRE ATLAS AI Gateways and Routers AML.T0057 LLM Data Leakage; AML.T0024 Exfiltration via AI Inference API (network-side observation)
OWASP AI Exchange AI Gateways and Routers Runtime threats: data leakage via AI egress; network-level access control gaps
OWASP LLM Top 10 AI Gateways and Routers LLM10 Unbounded Consumption (cost and rate control); shadow AI egress and output handling
OWASP Agentic Security Top 10 AI Gateways and Routers ASI07 Insecure Inter-Agent Communication; ASI02 Tool Misuse and Exploitation (egress and tool-invocation scope); ASI04 Agentic Supply Chain Vulnerabilities (MCP and tool-registry trust)

Provenance

Last sourced 2026-06-13.

Expand Collapse

Sources

  1. Cloudflare AI Security for Apps
    Vendor source accessed 2026-06-13
    • “AI Security for Apps provides advanced detection and mitigation of threats such as prompt injections, PII exposure, and toxic topics.”
  2. Cloudflare Trust Hub
    Vendor source accessed 2026-06-13
    • “Explore our posture around ISO 27001, ISO 27701, PCI DSS, SOC 2 Type II, and others”

Changelog

  1. Added to the catalog from the Cloudflare AI Security for Apps documentation; the product was formerly named Firewall for AI.

Found an error? Corrections are welcome. Suggest an edit.