Cloudflare extends Cloudflare One data security from endpoints to AI prompts
Original: Cloudflare One unifies data security from endpoint to prompt: RDP clipboard controls, operation-mapped logs, on-device DLP, and Microsoft 365 Copilot scanning via API CASB. View original →
What Cloudflare announced
On March 6, 2026, Cloudflare said Cloudflare One was extending unified data security from the endpoint to the prompt. The X post highlighted browser-based RDP clipboard controls, operation-mapped logs, on-device DLP, and Microsoft 365 Copilot scanning through API CASB. Taken together, the message is that Cloudflare is treating the full path from remote access to AI interaction as one security surface rather than a set of separate product modules.
What the blog post adds
Cloudflare frames the update around the idea that data security is enterprise security. The new browser-based RDP controls let administrators restrict copy-and-paste direction between the local device and a remote session. The company also says it has extended operation mapping into logs, so security teams can see specific actions such as SendPrompt for ChatGPT instead of working only from raw HTTP events. On top of that, Endpoint DLP is being pushed into clipboard workflows through the Cloudflare One Client, so protection does not stop when data leaves a browser tab.
Why the AI angle matters
The most important change is that AI prompts are now being treated as a first-class data movement problem. Cloudflare says customers using API CASB can now analyze Microsoft 365 Copilot activity for data security issues, including chats and uploads that match DLP detection profiles. Findings are meant to include richer context, such as file references and interaction metadata, so teams can investigate faster.
For enterprises, that matters because the risk is no longer just a file leaving a SaaS app. Sensitive information can be copied locally and pasted into an AI assistant in seconds. Cloudflare’s update is essentially an argument that prompt security, clipboard security, SaaS visibility, and remote-access controls need to be managed as one continuous policy layer as generative AI becomes part of everyday work.
Sources: Cloudflare X post, Cloudflare Blog
Related Articles
Anthropic said on March 5, 2026 that it had received a supply-chain risk designation letter from the Department of War. The company says the scope is narrow, plans to challenge the action in court, and will continue transition support for national-security users.
OpenAI announced on X that Codex Security has entered research preview. The company positions it as an application security agent that can detect, validate, and patch complex vulnerabilities with more context and less noise.
OpenAI said on X on March 9 that it plans to acquire Promptfoo, an AI security platform, and keep the project open source. The deal strengthens OpenAI Frontier’s agentic testing and evaluation stack.
Comments (0)
No comments yet. Be the first to comment!