AI Security for Apps is now generally available

Cloudflare has announced that its AI Security for Apps is now generally available, offering a critical security layer for AI-powered applications. This solution is designed to detect and protect applications regardless of the model or hosting provider they use. In addition, Cloudflare is making AI discovery free for all plans, enabling teams to identify and secure shadow AI deployments.

Cloudflare's AI Security for Apps is designed to address the unique challenges posed by AI-powered applications, which differ significantly from traditional web applications. Unlike traditional apps, where operations are deterministic and can be secured with fixed rules, AI applications accept natural language inputs and generate probabilistic responses. This unpredictability makes them vulnerable to various threats, such as prompt injection, sensitive information disclosure, and unbounded consumption, as outlined in the OWASP Top 10 for LLM Applications.

As AI applications evolve into agents with access to tool calls—processing refunds, modifying accounts, providing discounts, or accessing customer data—the risks associated with these applications increase. A single malicious prompt can lead to immediate security incidents. Rick Radinger, Principal Systems Architect at Newfold Digital, which operates Bluehost, HostGator, and Domain.com, highlights that while many teams are implementing their own Generative AI safeguards, the rapid pace of innovation often leaves gaps in security.

To address these challenges, Cloudflare has developed AI Security for Apps. This solution provides detection and mitigation capabilities for threats to AI-powered applications. It also includes new features such as detection for custom topics, ensuring that organizations can protect their specific AI applications.

In addition to the general availability of AI Security for Apps, Cloudflare is expanding its collaboration with IBM, which has chosen Cloudflare to deliver AI security to its cloud customers. The company is also partnering with Wiz to provide a unified view of AI security posture for mutual customers.

Furthermore, Cloudflare is making AI endpoint discovery free for all customers, including those on Free, Pro, and Business plans. This move aims to give everyone visibility into where AI is deployed across their Internet-facing apps, enabling teams to identify and secure shadow AI deployments.

As AI applications continue to transform industries and become more integrated into daily life, the need for robust security measures becomes increasingly important. Cloudflare's AI Security for Apps represents a significant step forward in protecting these applications from threats, ensuring that they remain secure and reliable for users and businesses alike.