Cloudflare adds WAF full transaction detections and response rules for all plans

Cloudflare is making full transaction detections and response rules generally available across all plans, including Free. The WAF can now evaluate an HTTP request together with the origin response, then block matching responses before they reach the requester; initial managed protections target the recently disclosed php2shell vulnerability.

For security teams, the reported request-plus-response correlation can reduce the trade-off between broad signatures that risk false positives and narrow rules that miss ambiguous attacks. Builders can use managed response firewall rules for simpler deployment or custom response rules for tailored policies, but Cloudflare notes blocking a response cannot undo actions already performed at the origin.