How Cloudflare’s First AI Agent Could Streamline Your Security Setup

AI agents are the thing of 2025. Almost all companies are working to unveil their AI agents to automate tasks. Now, Cloudflare has joined this trend by introducing ‘Cloudy.’ It aims to automate time-consuming tasks like reviewing and contextualizing Custom Rules in Cloudflare WAF and Gateway policies in Cloudflare One.

Built on Cloudflare Workers AI

Cloudy is built on Cloudflare Workers AI and uses large language models (LLMs) to process and analyze rule configurations. It combines raw policy data with enriched context to deliver accurate and actionable results.

It follows structured output instructions to minimize errors and provide insights in a clear, standardized format. By automating complex configuration reviews, Cloudy aims to save time and reduce human error in security management.

AI-Powered Security Rule Management

Cloudy is designed to simplify security rule management by automating the analysis of WAF Custom Rules. While these rules allow users to set tailored security policies, managing them at scale can be difficult. That’s why Cloudy provides summaries of existing rules, identifies redundancies, and highlights potential misconfigurations. 

Cloudy can also detect redundant rules that perform the same function and optimize execution in order to prevent rules from interfering with one another. It can analyze conflicting rules and identify disabled rules that might be crucial for security but are inactive.

Earlier teams had to run a manual audit for these rules. But now, with Cloudy, they can reduce the manual audit and improve their security posture. 

Simplifying Cloudflare Gateway Policies 

Cloudy also extends its functionality to Cloudflare Gateway, which is part of the Cloudflare One platform. Businesses use Gateway policies to enforce security controls, like blocking malicious sites and managing access permissions. However, with time, these policies can become difficult to track and manage. That’s where Cloudy comes in, providing concise summaries of Gateway policies. 

Cloudy helps administrators understand the purpose of each policy at a glance and identify redundant or conflicting policies. It can also spot outdated policies that may no longer be needed. 

Cloudy’s Availability and Future  

Cloudy’s beta preview is already live for all Cloudflare customers. However additional AI-driven features are expected to roll out in the coming months.

This is Cloudflare’s first foray into AI agents, and the company plans to expand Cloudy’s capabilities beyond security in the future, aiming to optimize performance, streamline operations, and enhance overall usability.