Skip to content

Commit 9141720

Browse files
[API Shield] update BOLA availability (#26375)
* update bola availability * update feature availability language
1 parent e9c82be commit 9141720

File tree

4 files changed

+6
-12
lines changed

4 files changed

+6
-12
lines changed

src/content/docs/api-shield/security/api-discovery.mdx

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -105,4 +105,4 @@ Endpoints discovered using session identifiers will be labeled as such in the Cl
105105

106106
## Availability
107107

108-
API Discovery is only available for Enterprise customers. If you are an Enterprise customer and interested in this product, contact your account team.
108+
API Discovery is only available for Enterprise customers. If you are an Enterprise customer interested in this product, contact your account team.

src/content/docs/api-shield/security/authentication-posture.mdx

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -62,4 +62,4 @@ Authentication Posture can only apply when customers accurately set up session i
6262

6363
## Availability
6464

65-
Authentication Posture is available for all Enterprise subscriptions with API Shield.
65+
Authentication Posture is available for all Enterprise customers with an API Shield subscription.

src/content/docs/api-shield/security/bola-vulnerability-detection.mdx

Lines changed: 3 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -3,8 +3,6 @@ pcx_content_type: concept
33

44
title: Broken Object Level Authorization vulnerability detection
55
sidebar:
6-
badge:
7-
text: Beta
86
order: 10
97
label: BOLA vulnerability detection
108
---
@@ -63,7 +61,7 @@ API Shield searches for and highlights BOLA attacks on your APIs. Cloudflare lea
6361

6462
If you see one of these labels on your API endpoints, check its authorization policy with your developer team to find any authorization bugs. Additionally, you can reach out to Cloudflare for a customized report about the behavior, including attacker identifiers that you can use to confirm attack reach and impact.
6563

66-
BOLA attack information can be found in your [Security Overview](#security-overview) and [Endpoint details](#endpoint-details). Closed beta customers can find BOLA attack information in [Security Analytics](#security-analytics) as well.
64+
BOLA attack information can be found in your [Security Overview](#security-overview), [Security Analytics](#security-analytics), and [Endpoint details](#endpoint-details).
6765

6866
### Security Overview
6967

@@ -98,10 +96,6 @@ Review the top statistics and details of managed API endpoints, paths and values
9896

9997
Cloudflare recommends that you observe your traffic profile for any anomalies in its normal behavior.
10098

101-
:::note[Availability]
102-
BOLA attacks in Security Analytics is currently available in closed beta.
103-
:::
104-
10599
### Endpoint details
106100

107101
You can expand the endpoint details in Web Assets to access information on suspicious sessions' activity on the endpoint, including both enumeration attack and parameter pollution attack details.
@@ -120,7 +114,7 @@ The details specify the parameter that was affected, the number of sessions invo
120114

121115
If unauthorized access to the parameter was obtained, consider the potential impact to your application, users, and data. As a best practice, consult with your application and API developers to confirm unauthorized access by reviewing your API origin logs for the IP address and JA4 fingerprint of the abusive sessions.
122116

123-
Closed beta customers can view attack data in [Security Analytics](#security-analytics).
117+
You can view attack data in [Security Analytics](#security-analytics).
124118

125119
<DashButton url="/?to=/:account/:zone/security/analytics" />
126120

@@ -130,4 +124,4 @@ The managed endpoint will be automatically filtered in the request activity from
130124

131125
## Availability
132126

133-
Details of BOLA attacks visible in Security Analytics are only available for customers in the closed beta.
127+
Broken Object Level Authorization vulnerability detection is only available for Enterprise customers. If you are an Enterprise customer interested in this product, contact your account team.

src/content/docs/api-shield/security/volumetric-abuse-detection.mdx

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -85,4 +85,4 @@ API Shield will always calculate recommendations when session identifiers are co
8585

8686
## Availability
8787

88-
Volumetric Abuse Detection is only available for Enterprise customers. If you are an Enterprise customer and interested in this product, contact your account team.
88+
Volumetric Abuse Detection is only available for Enterprise customers. If you are an Enterprise customer interested in this product, contact your account team.

0 commit comments

Comments
 (0)