Changelog | API Shield

API Shield - API Authentication Posture

Thu, 16 Jan 2025 00:00:00 GMT

Customers will see per-endpoint authentication details inside API Shield's Endpoint Management for zones with configured session identifiers.

API Shield - Automatically applied endpoint risk labels

Thu, 19 Dec 2024 00:00:00 GMT

API Shield now automatically labels endpoints with risks due to authentication status and sensitive data detection.

API Shield - Endpoint labels

Mon, 04 Nov 2024 00:00:00 GMT

Customers can now organize their endpoints by use case and custom labels in Endpoint Management for easy reference and future machine learning (ML) model training.

API Shield - API Shield fields in Custom Rules

Fri, 18 Oct 2024 00:00:00 GMT

Customers can now use API Shield product feature fields in custom rules, referencing features such as JWT Validation, session identifiers, and Schema Validation.

API Shield - Fallthrough rule for Schema Validation 2.0

Wed, 25 Sep 2024 00:00:00 GMT

Customers can now enable the Fallthrough Action for Schema Validation 2.0 to block or log requests that do not match the endpoints listed in schemas protected by Schema Validation 2.0.

API Shield - Increased capacity for Endpoint Management and Schema Validation

Wed, 28 Aug 2024 00:00:00 GMT

Endpoint Management and Schema Validation now support up to 10,000 saved and validated API endpoints.

API Shield - API Discovery's hostname variables

Mon, 08 Jul 2024 00:00:00 GMT

Customers can now see when API Discovery groups similar subdomains with the same methods and paths, making it easy to discover and manage APIs that share many vanity domains or subdomains.

API Shield - Route API requests using API Routing

Tue, 02 Jul 2024 00:00:00 GMT

Customers can now route requests to different back-end services through API Routing, creating a unified front for their APIs distributed across otherwise disparate systems.

API Shield - Use JWT claims in Advanced Rate Limiting, Transform Rules, and as session IDs

Mon, 13 May 2024 00:00:00 GMT

Customers can now use the fields inside JSON Web Tokens (known as claims) as session identifiers in API Shield, to count values in Advanced Rate Limiting, and to send on useful information in Transform Rules.

API Shield - Build Sequence Mitigation rules via the Cloudflare dashboard

Tue, 30 Apr 2024 00:00:00 GMT

Customers can now build Sequence Mitigation rules with a new user interface inside the API Shield section of the Cloudflare dashboard.

API Shield - Endpoint Management supports hostname variables

Fri, 23 Feb 2024 00:00:00 GMT

Customers can now save endpoints in Endpoint Management that contain variables in the hostname. Hostname variables are supported across all product features.