Cloudflare Security Overview can now archive and audit your action items!

Hey everyone, it's me, Shii-chan! Today's news makes a security dashboard a little friendlier to live with.

Cloudflare Changelog developers.cloudflare.com

What was announced?

Over on the Cloudflare Changelog, they announced that you can now archive security action items in Security Overview. You can clear resolved or irrelevant items off your active list while keeping a clear record of why you did it.

The story so far

When a lot of security insights pile up, your list fills up fast and gets hard to manage. And until now, there was no structured way to dismiss an item while keeping the context of why you ignored it. That meant the truly important items could get buried.

What changes

From now on, when you archive an item you pick a reason category. The choices are False Positive, Accept Risk, and Other. For "Accept Risk" and "Other", you must write rationale text, so later on you can always trace why something was cleared — which is a relief at audit time.

Dive Deep

The nice part is that archiving isn't one-way. If the situation changes, you can move an archived item back to the active list anytime.

There are also new audit log API endpoints. At the account or zone level, you can programmatically retrieve the history of status changes and the rationale for any insight. To pull the audit log at the account level, it looks like this:

curl "https://api.cloudflare.com/client/v4/accounts/{account_id}/insights/{insight_id}/audit-log" \
     -H "Authorization: Bearer $API_TOKEN" \
     -H "Content-Type: application/json"

One thing to keep in mind: archiving a suspicious activity item removes it from the Security Overview page, but the activity still shows up in your Security Analytics dashboard. So if you want to dig into it later, it won't just vanish.

Wrap-up

• Cloudflare Security Overview now lets you archive security action items
• Categories are False Positive / Accept Risk / Other, and the last two require rationale text
• New audit log API endpoints let you fetch status-change and rationale history at the account or zone level
• Archiving is reversible, and cleared items still live in Security Analytics

This is a lovely update for security teams juggling a flood of insights, and for anyone who needs to keep a solid audit trail!