# Cloudflare adds response blocking to its web application firewall

_Published Wednesday, October 21, 2026 at 10:21 AM EDT · Security · Latest · Tier 2 — Notable_

![Cloudflare adds response blocking to its web application firewall — Primary](https://blog.cloudflare.com/_emdash/api/media/file/01M5E1HV25GV2PKJHWP2MM8HGH.png)

Cloudflare announced generally available firewall capabilities that evaluate web requests alongside application responses and can block a response before it reaches the requester. The capabilities cover all plans, including Free, for sites routing traffic through Cloudflare.

The first managed protections target php2shell. Customers can also create up to three custom response rules with logging and blocking actions. Pairing suspicious input with response signals can help identify successful exploitation, rather than just an attempted attack.

Blocking a response cannot undo actions already performed at the application server. Customers cannot yet create rules directly on response bodies.

## Sources

- [The Cloudflare Blog](https://blog.cloudflare.com/full-transaction-waf/)

---
Canonical: https://techandbusiness.org/newswire/RITYWO6b8rk1vmOePaB9yq
Published: 2026-10-21T14:21:36.121Z
Story chronology: 2026-10-21T14:10:42.412Z
Retrieved: 2026-10-25T06:21:42.675Z
Publisher: Tech & Business (techandbusiness.org)