Cloudflare, Inc. has introduced a new AI-powered defense service built to find, block, and fix software vulnerabilities, often before security teams even know a problem exists.

The new offering, called Vulnerability Discovery and Remediation, is now available in early access through Cloudflare Managed Defense. It runs through the OpenAI Daybreak Defense Network and combines deep code investigation with automated patch generation using OpenAI Daybreak models, including GPT-5.6 Cyber. This is paired with real-time traffic and security context drawn from Cloudflare’s global network. As a result, organizations can now pinpoint high-risk vulnerabilities and automatically block attacks at the edge before they are exploited.

Software vulnerabilities are being discovered at a record pace, and conventional security tools have struggled to keep up. By September 2026, the National Vulnerability Database (NVD) had already logged 60,475 vulnerabilities, surpassing the 48,185 recorded across all of 2025. Meanwhile, traditional vulnerability scanners often surface thousands of findings without enough production context to indicate which ones deserve attention first. Without that context, teams risk spending time sorting through noise while real threats slip through unaddressed. Consequently, the window between when a vulnerability is discovered and when it gets fixed has become one of the most dangerous gaps in enterprise security.

Cloudflare operates a large global network, processing trillions of requests per day across millions of web assets. While traditional security vendors often rely on isolated code scanning or static network telemetry, Cloudflare says it can use its footprint to detect signals and patterns in real time. This, in turn, gives its threat intelligence team the ability to spot emerging weaknesses and neutralize zero-day exploits before they spread across the wider web.

“If your security team is manually fighting AI-driven attacks, you’re not just burning them out, you’re losing. Now, we’re shifting the defense strategy away from chasing patches one vulnerability at a time to an automated approach,” said Matthew Prince, co-founder and CEO of Cloudflare. “We built Cloudflare’s global network to analyze what’s happening across the Internet in real time. Pair that with the power of OpenAI GPT-5.6 Cyber, and you’re not just reacting to attacks anymore, you’re stopping them before they land.”

By integrating AI code analysis across its platform, spanning Web Assets, WAF, and Workers Observability, Cloudflare aims to help organizations move from isolated vulnerability findings toward context-aware prioritization and remediation. As part of this AI-powered defense approach, eligible customers can now do the following:

Triage what’s actively under fire: Cloudflare correlates live Internet traffic with code vulnerability scans to surface high-priority issues quickly, rather than leaving quiet vulnerabilities unnoticed.

Buy time with instant edge protection: customers can instruct Cloudflare to deploy custom WAF rules tailored to specific attack vectors, patching vulnerabilities at the edge before developers write a single line of code.

Ship verified fixes faster: OpenAI Daybreak models, including GPT-5.6 Cyber, help generate code patches that developers can review and implement, saving engineering teams time and effort. Notably, no code fix or edge rule takes effect without explicit human approval.

“Our goal through the OpenAI Daybreak Defense Network is to give defenders the advantage of frontier AI, safely,” said McCall McIntyre, Head of Global Cyber Partnerships at OpenAI. “We are excited to team up with Cloudflare to put proactive, AI-driven security directly into the hands of enterprise defenders.”

Overall, the partnership reflects a broader shift in cybersecurity, where AI-powered defense is increasingly positioned as a way to close the gap between vulnerability discovery and remediation, before attackers get the chance to act.

Related post

View all