# WAF Attack Score

Published articles for WAF Attack Score.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## We tested our own WAF with frontier AI models. Here's what we found

DevFeed: [We tested our own WAF with frontier AI models. Here's what we found](<https://devfeed.tech/articles/we-tested-our-own-waf-with-frontier-ai-models-here-s-what-we-found-61624.md>)

Original publisher: [Read original article](<https://blog.cloudflare.com/adaptive-ai-waf-testing/>)

Author: Kuber Nandwani

Published: 2026-09-29T13:00:00Z

Content type: article

Language: en

Sources: [Cloudflare Blog](<https://devfeed.tech/sources/cloudflare-blog.md>)

Topics: [LLM security](<https://devfeed.tech/topics/llm-security.md>), [ai security](<https://devfeed.tech/topics/ai-security.md>), [Frontier AI](<https://devfeed.tech/topics/frontier-ai.md>), [Agentic SOC](<https://devfeed.tech/topics/agentic-soc.md>)

Tags: [ai](<https://devfeed.tech/tags/ai.md>), [ai-waf](<https://devfeed.tech/tags/ai-waf.md>), [application-security](<https://devfeed.tech/tags/application-security.md>), [application-security-testing](<https://devfeed.tech/tags/application-security-testing.md>), [application-services](<https://devfeed.tech/tags/application-services.md>), [birthday-week](<https://devfeed.tech/tags/birthday-week.md>), [cloudflare](<https://devfeed.tech/tags/cloudflare.md>), [deep-dive](<https://devfeed.tech/tags/deep-dive.md>), [detection](<https://devfeed.tech/tags/detection.md>), [frontier-ai](<https://devfeed.tech/tags/frontier-ai.md>), [frontier-ai-models](<https://devfeed.tech/tags/frontier-ai-models.md>), [human-review](<https://devfeed.tech/tags/human-review.md>), [machine-learning](<https://devfeed.tech/tags/machine-learning.md>), [managed-rules](<https://devfeed.tech/tags/managed-rules.md>), [waf](<https://devfeed.tech/tags/waf.md>), [waf-attack-score](<https://devfeed.tech/tags/waf-attack-score.md>)

### AI overview

Cloudflare describes an adaptive tester that used frontier AI models to probe a web application firewall in an authorized staging environment. It varied exploit payloads based on HTTP responses, surfaced possible detection gaps for human review, and informed new WAF detections.

### Source excerpt

We built a WAF tester that adapted each request based on what the WAF blocked or passed. This helped us explore variations that a fixed test might miss. We ran it across six attack categories on an authorized staging environment and discovered detection gaps worth fixing. Here's how the loop worked, what got through, and what we did about it.