A Fully Programmable Secure Web Gateway
Cloudflare, Thursday, October 15th, 2026
Cloudflare Gateway and DLP gain a Forward action and custom validation functions that run customer code inline in policy evaluation.
Cloudflare argues that secure web gateways have relied for decades on a match-condition-then-terminal-action model that hits a ceiling in complex environments.
It defines true programmability as running a customer's own code inline in the policy evaluation path at the moment of a security decision, and it is integrating Gateway and Data Loss Prevention with its edge computing platform to deliver that.
New capabilities include a Forward Gateway action and custom validation functions.