Threat Detection

2026-03-24
AI Threat DetectionMachine Learning
Cloudflare

Fight AI With AI

ML models trained on 50M+ data points per second score every request in real time

Session Risk Analysis — User #48291

HIGH RISK
🌐IP: Residential proxy (detected via ASN + behavior)Score: +40
⌨️Typing cadence: Suspiciously uniform, 98ms intervalsScore: +25
🖱️Mouse movement: Follows straight-line trajectoryScore: +20
📱Device fingerprint: Emulated environment detectedScore: +15
🕐Session start time: 03:17 UTC off-peak patternScore: +5
📊Navigation depth: 1 page (anomalous for checkout)Score: +3

Composite threat score

94 / 100

Block requestAutomated action in <1ms

Real-Time Scoring by Request Type

94
Current session — credential stuffing attempt
72
Gift card balance check — velocity anomaly
31
Product page view — human pattern
15
Search query — search crawler (allowed)

Detection Models

Bot Score

Gradient Boosted Trees

Fraud Score

Neural Network

Anomaly Detect

Isolation Forest

Intent Model

Sequence LSTM

Abuse Classify

XGBoost

Continuous Learning

Models update daily on Cloudflare's global network — learning from 50M requests/second across 6M+ protected sites.

Zero-day attack pattern recognition
Cross-customer threat intelligence
Custom model fine-tuning available