Cloudflare opens code vulnerability service to selected customers

Cloudflare has opened early access to Vulnerability Discovery and Remediation, an invitation-only addition to Managed Defense for selected customers. The service uses OpenAI Daybreak models, including GPT-5.6 Cyber, to investigate customer-authorized codebases, corroborate findings in source code, and propose code patches or narrowly scoped WAF rules. Cloudflare says it combines code analysis with traffic, route and security-event context to prioritize exposed paths. Customers review results and decide whether to test or deploy changes; the model cannot apply a proposed patch or rule.