Cloudflare extends Cloudflare One data security from endpoints to AI prompts
Original: Cloudflare One unifies data security from endpoint to prompt: RDP clipboard controls, operation-mapped logs, on-device DLP, and Microsoft 365 Copilot scanning via API CASB. View original →
What Cloudflare announced
On March 6, 2026, Cloudflare said Cloudflare One was extending unified data security from the endpoint to the prompt. The X post highlighted browser-based RDP clipboard controls, operation-mapped logs, on-device DLP, and Microsoft 365 Copilot scanning through API CASB. Taken together, the message is that Cloudflare is treating the full path from remote access to AI interaction as one security surface rather than a set of separate product modules.
What the blog post adds
Cloudflare frames the update around the idea that data security is enterprise security. The new browser-based RDP controls let administrators restrict copy-and-paste direction between the local device and a remote session. The company also says it has extended operation mapping into logs, so security teams can see specific actions such as SendPrompt for ChatGPT instead of working only from raw HTTP events. On top of that, Endpoint DLP is being pushed into clipboard workflows through the Cloudflare One Client, so protection does not stop when data leaves a browser tab.
Why the AI angle matters
The most important change is that AI prompts are now being treated as a first-class data movement problem. Cloudflare says customers using API CASB can now analyze Microsoft 365 Copilot activity for data security issues, including chats and uploads that match DLP detection profiles. Findings are meant to include richer context, such as file references and interaction metadata, so teams can investigate faster.
For enterprises, that matters because the risk is no longer just a file leaving a SaaS app. Sensitive information can be copied locally and pasted into an AI assistant in seconds. Cloudflare’s update is essentially an argument that prompt security, clipboard security, SaaS visibility, and remote-access controls need to be managed as one continuous policy layer as generative AI becomes part of everyday work.
Sources: Cloudflare X post, Cloudflare Blog
Related Articles
GitHub code scanning can now show AI-powered security detections directly on pull requests. The preview extends coverage beyond languages and frameworks supported by CodeQL, while requiring GitHub Code Security, a Copilot license, and AI credits.
GitHub’s security cleanup shows that the hard part is not finding secrets, but routing real risk to the right owners. The company says it cleared 20,000-plus alerts across 15,000 repositories in nine months.
Cloudflare tested Anthropic's security-specialized Mythos Preview model against their own infrastructure under Project Glasswing. Mythos can chain low-severity bugs into working exploits, demonstrating reasoning comparable to senior security researchers — but with inconsistent safeguards and significant triage overhead.