JA EN
shiichan

Cloudflare DLP Gets a Way to Test-Scan Without Touching Production!

Cloudflare Changelog ★★★★ View Markdown
#cloudflare#security

Hi everyone, it's Shii! Today I found news that makes Cloudflare's DLP easier to work with.

Cloudflare Changelog developers.cloudflare.com

What was announced?

Cloudflare's Changelog announced a new feature for Data Loss Prevention (DLP) called "Test scan." It lets you check how a DLP profile evaluates content before you apply it to production traffic, without sending anything through Gateway.

The story so far

Until now, the only way to check whether a DLP profile actually caught sensitive content the way you expected was to run real traffic through Gateway. That meant risking an impact on production traffic, plus extra Gateway activity logs piling up along the way.

What changes

With Test scan, you can paste text, upload a file, or upload a HAR file, pick the profiles you want to test, and get results right away. The content goes straight to the DLP scanner: Gateway policies aren't evaluated, no traffic passes through Gateway, and no Gateway activity logs are created. That means you can safely try out your DLP setup with zero impact on production.

Dive Deep

Test scan results bring together information like:

  • Matched profiles
  • Detection entries
  • Confidence levels
  • Match context and proximity keywords
  • File metadata
  • Antivirus status
  • OCR output

Test scan itself is available to every Cloudflare Zero Trust customer, but which profiles you can actually test depends on your Zero Trust plan, so keep that in mind. Check Cloudflare's Test scan documentation for more details.

Wrap-up

  • Cloudflare DLP now has "Test scan," a way to check detection results without sending anything through production traffic
  • You can submit text, files, or HAR files and see how selected profiles react
  • Gateway policies aren't evaluated and no logs are created, so there's zero impact on production
  • Available to all Zero Trust customers, though profile availability depends on your plan

If you're designing or tuning DLP profiles on Cloudflare Zero Trust, this one's worth trying out!

Related posts