Why Cloudflare Proxying Alone Isn't Enough
Most organizations assume Cloudflare handles all security. We found that CF IP whitelisting means "trust all CF customers" — not just your zone. Here's how attackers bypass your WAF entirely.
cloudflarewaf-bypassorigin-securityzero-trust