Skip to content

Commit 3e478cc

Browse files
revision
1 parent 7def1e2 commit 3e478cc

File tree

1 file changed

+56
-38
lines changed

1 file changed

+56
-38
lines changed

src/content/docs/security-center/app-security-reports.mdx

Lines changed: 56 additions & 38 deletions
Original file line numberDiff line numberDiff line change
@@ -17,23 +17,47 @@ Application Security Reports provide visibility into cyber attacks that targeted
1717

1818
The reports are automatically generated on a monthly basis, and summarize the cyber attack insights and trends for all of the Enterprise zones in your account.
1919

20-
You can access reports by going to the **Security Reports** page or via the API. You can view reports from previous months by selecting the date from the dropdown.
20+
You can access reports by going to the **Security Reports** page or via the [API](#api). You can view reports from previous months by selecting the date from the dropdown.
21+
22+
<DashButton url="/?to=/:account/security-center/reports" />
23+
24+
To download the report, select **Print report**.
2125

2226
Reports from before April 2025 can be accessed through **Security Reports** > **Legacy reports**.
2327

28+
The current reports are curated by Cloudflare and will be expanded to include more insights. The option to create custom reports, filter by various fields, and schedule reports will be added in upcoming improvements.
29+
30+
---
31+
32+
## Report types
33+
34+
Currently, only Application Security Reports are available. They cover the entire suite of products such as [HTTP DDoS Protection](/ddos-protection/managed-rulesets/http/), [WAF](/waf/), and [Bot Management](/bots/).
35+
36+
Reports for Application Performance, Cloudflare One, and Network Services, such as [Magic Transit](/magic-transit/) and [Zero Trust](/cloudflare-one/), will be made available in future improvements.
37+
38+
---
39+
2440
## Report layout
2541

2642
Each report includes the following sections:
2743

2844
- Executive summary
2945
- Distribution of allowed and mitigated requests
30-
- Industry benchmarks - how you compare to your peers by selecting your industry
46+
- [Industry benchmarks](#industry-benchmarks) that show how you compare to your peers by selecting your industry
3147
- Top five source countries of allowed traffic and mitigated traffic including a map visualization
3248
- Top five most targeted hostnames
3349
- Top five most effective mitigation rules
3450

3551
To view more details, apply filters, analyze the data, and generate ad-hoc reports, use the [Security Analytics dashboard](/waf/analytics/security-analytics/) or [Log Explorer](/log-explorer/).
3652

53+
### Industry benchmarks
54+
55+
If your account is not assigned an industry or if the shown industry is incorrect, use the link within the report to select the correct industry.
56+
57+
It may take a while for your new selection to take effect, and it may only be applied to future reports.
58+
59+
If you have multiple Cloudflare accounts, select the industry that is most relevant for the specific account.
60+
3761
---
3862

3963
## Prerequisites
@@ -51,47 +75,41 @@ A Cloudflare user must have one of the following [roles](/fundamentals/manage-me
5175

5276
---
5377

54-
## Download a report
55-
56-
You can download the application security report via the Cloudflare dashboard or the API.
57-
58-
<Tabs>
59-
<TabItem label="Dashboard">
60-
1. In the Cloudflare dashboard, go to the **Security Reports** page.
61-
62-
<DashButton url="/?to=/:account/security-center/reports" />
63-
2. For a given month and year, select **Download** to download the report for that particular month.
64-
</TabItem>
65-
<TabItem label="API">
66-
```txt
67-
68-
```
69-
<Details header="Data returned by the API">
70-
- Account ID
71-
- Account Name
72-
- Account Industry
73-
- Time range
74-
- Total zones
75-
- Total zones analyzed
76-
- Industry percentile (nullable float)
77-
- Total requests (count, percentage)
78-
- Total mitigated requests (count, percentage)
79-
- Total served requests (count, percentage)
80-
- Top 5 hostnames by mitigated requests (hostname, count)
81-
- Top 5 source countries by served requests (country, count)
82-
- Top 5 source countries by mitigated requests (country, count)
83-
- Top 5 rules by mitigated requests (rule name, rule type, count)
84-
</Details>
85-
</TabItem>
86-
</Tabs>
78+
## API
79+
80+
```txt
81+
82+
```
83+
84+
<Details header="Data returned by the API">
85+
- Account ID
86+
- Account Name
87+
- Account Industry
88+
- Time range
89+
- Total zones
90+
- Total zones analyzed
91+
- Industry percentile (nullable float)
92+
- Total requests (count, percentage)
93+
- Total mitigated requests (count, percentage)
94+
- Total served requests (count, percentage)
95+
- Top 5 hostnames by mitigated requests (hostname, count)
96+
- Top 5 source countries by served requests (country, count)
97+
- Top 5 source countries by mitigated requests (country, count)
98+
- Top 5 rules by mitigated requests (rule name, rule type, count)
99+
</Details>
100+
101+
### Cross-account reports
87102

103+
Each report is generated per account. You can use the [API](#api) to retrieve the reports for all of your accounts and aggregate the data.
88104

89-
### Cross-account reports
105+
---
106+
107+
## Limitations
90108

91-
If you have more than one Cloudflare account with Enterprise zones, you can use the API to retrieve and combine the reports from your accounts.
109+
The security reports currently only support US Customer Metadata Boundary (CMB). They do not support the EU CMB yet.
92110

93111
---
94112

95113
## Availability
96114

97-
Currently, this feature is only available in closed beta to Enterprise customers.
115+
This feature is available in closed beta to Enterprise customers.

0 commit comments

Comments
 (0)