Cloudflare extends Cloudflare One data security from endpoints to AI prompts
Original: Cloudflare One unifies data security from endpoint to prompt: RDP clipboard controls, operation-mapped logs, on-device DLP, and Microsoft 365 Copilot scanning via API CASB. View original →
What Cloudflare announced
On March 6, 2026, Cloudflare said Cloudflare One was extending unified data security from the endpoint to the prompt. The X post highlighted browser-based RDP clipboard controls, operation-mapped logs, on-device DLP, and Microsoft 365 Copilot scanning through API CASB. Taken together, the message is that Cloudflare is treating the full path from remote access to AI interaction as one security surface rather than a set of separate product modules.
What the blog post adds
Cloudflare frames the update around the idea that data security is enterprise security. The new browser-based RDP controls let administrators restrict copy-and-paste direction between the local device and a remote session. The company also says it has extended operation mapping into logs, so security teams can see specific actions such as SendPrompt for ChatGPT instead of working only from raw HTTP events. On top of that, Endpoint DLP is being pushed into clipboard workflows through the Cloudflare One Client, so protection does not stop when data leaves a browser tab.
Why the AI angle matters
The most important change is that AI prompts are now being treated as a first-class data movement problem. Cloudflare says customers using API CASB can now analyze Microsoft 365 Copilot activity for data security issues, including chats and uploads that match DLP detection profiles. Findings are meant to include richer context, such as file references and interaction metadata, so teams can investigate faster.
For enterprises, that matters because the risk is no longer just a file leaving a SaaS app. Sensitive information can be copied locally and pasted into an AI assistant in seconds. Cloudflare’s update is essentially an argument that prompt security, clipboard security, SaaS visibility, and remote-access controls need to be managed as one continuous policy layer as generative AI becomes part of everyday work.
Sources: Cloudflare X post, Cloudflare Blog
Related Articles
Cloudflare tested Anthropic's security-specialized Mythos Preview model against their own infrastructure under Project Glasswing. Mythos can chain low-severity bugs into working exploits, demonstrating reasoning comparable to senior security researchers — but with inconsistent safeguards and significant triage overhead.
On May 11, 2026, an attacker chained three GitHub Actions vulnerabilities to publish 84 malicious versions across 42 @tanstack/* npm packages. Developers who installed affected versions must immediately rotate all credentials.
Google's Threat Intelligence Group detected the first confirmed AI-authored zero-day exploit in the wild—a Python script bypassing two-factor authentication in a popular open-source web admin tool, intercepted before criminals could launch a mass exploitation campaign.