shiichan

Threat Events now watches for you: real-time alerts and daily digests!

Hi everyone, it's me, Shiichan! Today I found a nice update that makes security monitoring a little easier, so let me tell you about it.

Cloudflare Changelog developers.cloudflare.com

What was announced?

Over on Cloudflare's Changelog, they announced that Security Center added notifications to Threat Events. Now you can attach real-time alerts or a once-a-day digest to your saved views.

The story so far

Until now, to keep up with threat activity you had to open the dashboard yourself and check for updates. To avoid missing anything, you had to peek in again and again, which was a bit of a chore.

What changes

By linking your saved views to Cloudflare's Notifications Center, you get a heads-up automatically whenever new data matches your filter set. You can decide the conditions you care about ahead of time, like fresh activity from a specific threat actor or a spike of activity in your own industry.

Dive Deep

You can pick from two kinds of notifications.

  • Immediate Alerts: the moment a critical event matching your saved criteria is detected, you get a real-time notification. Great for high-priority monitoring, like tracking a campaign from a specific APT group.
  • Daily Digests: a summarized report delivered once a day. Handy when you want a loose read on broader trends, like regional activity shifts or industry-wide threat landscapes, without cluttering your inbox.

To set it up, head to Application Security > Threat Intelligence > Threat Events. Choose your datasets, apply your filters, and Save View (or pick an existing one), then open the Manage Saved Views menu and select Add Alert next to your chosen view. For more configuration details, check the Threat Events documentation.

Wrap-up

  • Cloudflare's Security Center now lets you attach notifications to saved Threat Events views
  • Choose between real-time Immediate Alerts and a once-a-day Daily Digest
  • Setup is just saving a view on the Threat Events screen and hitting Add Alert

This is a welcome update for security teams who watch threat intelligence every day and want to cut down on babysitting the dashboard.