CASB automatic remediation for Microsoft 365 and Google Workspace
Cloudflare CASB now supports automatic remediation policies that can directly fix security findings in Microsoft 365 and Google Workspace, or send webhooks to external systems like Slack and ServiceNow. Remediation actions execute without manual intervention when policies trigger on file-sharing misconfigurations.
Cloudflare CASB is an API-based (agentless) tool that continuously scans your SaaS and cloud applications for security misconfigurations and data exposure. You can now use CASB remediation policies to automatically fix a finding or send a webhook the moment CASB detects it, without manual triage.
Remediate Microsoft 365 and Google Workspace findings
A policy can perform a first-party remediation action directly against the SaaS integration API. When a policy triggers, Cloudflare revokes the external sharing configuration without human intervention.
Remediation is currently supported for file-sharing findings in Microsoft 365 and Google Workspace. Support for additional finding types and integrations is coming soon. For the full list of supported finding types, refer to Run remediations in the CASB remediation policies documentation.
Send webhooks
A policy can send posture finding data to Slack, ServiceNow, or any other webhook destination. Webhook actions are supported for all posture finding types across CASB integrations.
A single policy can perform both actions: remediate a finding and send a webhook.
Get started
- In Cloudflare One ↗, go to Cloud & SaaS findings > Policies.
- Select Create a policy.
- Under Basic information, enter a Policy name and, optionally, a Description.
- Under Choose how you want to trigger the policy, select a Vendor, Integration, and Finding type.
- Under Define what to do with findings that match your trigger, choose Run Remediation, Send webhooks, or both.
- Under Status, turn on Enable policy.
- Select Create policy.
Learn more
- Learn how to create and manage CASB remediation policies in Cloudflare One.
- Configure CASB webhooks as a policy destination.
- Learn how to manage findings in Cloudflare One.
CASB remediation policies are now available in Cloudflare One.
Source: original entry ↗
More from Cloudflare
Follow Cloudflare to get its new changes in your feed and email digest.
DNS - Configure Advanced Custom Nameservers with nameserver sets
Nameserver sets are now available in beta for Enterprise accounts, allowing you to group custom nameserver names with Cloudflare-assigned IP addresses and assign them to multiple zones. This new approach replaces legacy custom_ns sets with reusable, immutable objects that support up to 3 IPv4 and 3 IPv6 addresses per nameserver and can leverage Advanced anycast network groups for improved resiliency.
Cloudflare API MCP server sends Workers Issues as MCP Events
The Cloudflare API MCP server now exposes Workers Issues as MCP Events through webhook subscriptions, allowing agents to receive real-time notifications when production failures are detected without polling. Clients can subscribe to cloudflare.alert.workers_observability_real_time_issue scoped to an account or individual Worker.
Web Analytics: Deeper Core Web Vitals Diagnostics with LCP & INP Sub-Part Metrics
Real User Monitoring in Web Analytics now breaks down Largest Contentful Paint (LCP) and Interaction to Next Paint (INP) into their constituent phases, plus splits connection time into TCP and TLS components. These sub-part metrics are available in the dashboard and queryable through the GraphQL Analytics API to help identify which specific area is impacting page performance.