Brief
Cloudflare makes Threat Signals free for all accounts
The new service automates summarising and extracting indicators from open‑source security reports.
By Felo News Desk · Published
Cloudflare announced that its new Threat Signals service is now available at no cost to every Cloudflare account, launching on 29 September 2026. The platform uses AI‑driven “agentic skills” to turn open‑source security reports into structured threat‑intelligence data that can be applied directly to a customer’s WAF policy.
According to the Cloudflare blog, Threat Signals creates private, account‑scoped datasets from a chosen RSS feed, storing contextualised indicators for up to 30 days. Users also receive API and dashboard access to the Threat Events Platform, which can investigate events, indicators and tags linked to their private dataset.
The blog notes that enterprise customers (Essentials, Advantage, Elite) can extend the offering with additional RSS feeds, proprietary threat‑intelligence datasets, custom agentic skills, larger storage and the ability to generate custom WAF rules. The service builds on Cloudflare’s earlier open‑source CMS EmDash, announced on 28 September 2026 (EmDash 1.0 release).
Key facts
- Threat Signals is free for every Cloudflare account (blog.cloudflare.com)
- The service processes open‑source security reports into actionable indicators (blog.cloudflare.com)
- Datasets are stored privately for up to 30 days (blog.cloudflare.com)
- Enterprise tiers can add more RSS feeds and custom skills (blog.cloudflare.com)
Sources
- [1] blog.cloudflare.com — originally reported as “Introducing Threat Signals: agentic skills for open-source threat intelligence, free for every Cloudflare account”
