JA EN
shiichan

Cloudflare CASB Can Now Auto-Fix Microsoft 365 and Google Workspace Findings!

Cloudflare Changelog ★★★★ View Markdown
#cloudflare#security#devops

Hi, it's me, Shiichan! Today I've got an update from the Cloudflare Changelog that security folks will love.

Cloudflare Changelog developers.cloudflare.com

What was announced?

The Cloudflare Changelog introduced CASB remediation policies. Cloudflare CASB is an agentless, API-based tool that continuously scans your SaaS and cloud apps for security misconfigurations and data exposure. With this update, you can now automate what happens after CASB finds a problem: a policy can automatically remediate it or fire off a webhook the moment a finding is detected.

The story so far

Until now, once CASB detected an issue, someone still had to triage it and fix it by hand. Detection alone doesn't help much if the fix depends on a person noticing and acting — that gap means risky configurations can sit exposed longer than they should.

What changes

With CASB remediation policies, you can automate the path from detection to fix.

  • Automatic remediation: a policy calls the SaaS integration's API directly to take action — for example, revoking an external sharing configuration the instant it's flagged, with no manual step
  • Webhook delivery: a policy can send finding data to Slack, ServiceNow, or any other webhook destination
  • A single policy can do both at once — remediate the finding and send a webhook

Security teams no longer need to chase down every alert individually before a risky sharing setting gets closed.

Dive Deep

Automatic remediation currently covers file-sharing findings in Microsoft 365 and Google Workspace. When a policy triggers, Cloudflare revokes the external sharing configuration on your behalf. Support for more finding types and integrations is coming soon.

Webhook delivery has broader coverage — it works across all CASB posture finding types.

Setup happens in the Cloudflare One dashboard:

  • Go to Cloud & SaaS findings > Policies in Cloudflare One
  • Select Create a policy
  • Enter a policy name and, optionally, a description
  • Choose the trigger: vendor, integration, and finding type
  • Choose what to do when a finding matches (remediate, send a webhook, or both)

Wrap-up

  • Cloudflare CASB now has remediation policies that auto-fix detected security misconfigurations
  • Automatic remediation currently covers file-sharing findings in Microsoft 365 and Google Workspace
  • Webhook delivery to Slack, ServiceNow, and more works across all posture finding types
  • If your team already uses Cloudflare One's SaaS security features, this is a solid way to speed up your response time after a finding hits.

Related posts