> ## Content Index
> Fetch the complete content index at: https://zipmex.com/llms.txt
> Use this file to discover other available public pages before exploring further.

# Cloudflare Managed Defense beta: how AI alert reviews work
- URL: https://zipmex.com/blog/cloudflare-managed-defense-beta-how-ai-alert-reviews-work/
- Published: 2026-10-09T07:56:53.000Z
- Updated: 2026-10-09T14:06:02.000Z
- Description: How Cloudflare says Managed Defense uses scoped evidence, specialist agents and analyst review for eligible application-security alerts and cases.
- Author: ZIPMEX
- Tags: AI, #zipmex-newsroom

## What Cloudflare says is new

Cloudflare on Oct. 7, 2026, described [an early beta of AI alert reviews](https://blog.cloudflare.com/agentic-security-operations/?ref=zipmex.com) in its Managed Defense service. The beta covers eligible application-security alerts and cases. Fixed workflows gather evidence before any AI model analyzes an alert. Four specialist agents handle alerts that need deeper review. Managed Defense Analysts remain responsible for decisions and mitigation.

**Key facts from Cloudflare’s post**

- **Beta scope:** Eligible application-security alerts and cases in Managed Defense.
- **Before inference:** Deterministic code runs fixed reconnaissance workflows with versioned API calls.
- **Deeper review:** A coordinator runs four specialist AI agents in parallel.
- **Evidence checks:** Specialists cite a versioned evidence package. Code checks that each citation belongs to the investigation and supports the claim.
- **Responsibility:** The Managed Defense Analyst remains responsible for the decision and any mitigation.

## Evidence comes first

Cloudflare describes reconnaissance as the first step. Here, reconnaissance means fixed workflows that deterministic code runs before model inference. The workflows use versioned API calls. They collect the customer’s identity and detection history. They also gather the traffic baseline, the enforcement outcome, and network observations. Each piece of data is stored with its source, version, and timestamp. That gives an investigation a record of where each item came from and when. Analysts get a quick, consolidated view of related alerts. The view also shows admitted evidence, visible gaps, and recommended next steps.

## Four specialist roles

For alerts that need deeper review, Cloudflare says a coordinator runs four specialist AI agents in parallel. Traffic analysis covers request behavior, historical changes, and enforcement. Customer context covers earlier alerts, dispositions, and analysts’ decisions. Global telemetry compares activity with privacy-preserving Internet-wide signals. Threat intelligence checks indicators already admitted to the alert or case. Each role matches one evidence area. An analyst can match a question to a role by its subject.

## Cloudflare’s named specialist roles

Which investigation area matches the alert evidence you are reviewing?

1. Is the question about request behavior, historical changes, or enforcement?

  - Yes → [Traffic analysis](#ix-out%5Ftraffic)
  - No → [next question](#ix-customer)  
Source: [Cloudflare, Oct 7, 2026](https://blog.cloudflare.com/agentic-security-operations/?ref=zipmex.com)
2. Is it about earlier alerts, dispositions, or Managed Defense Analysts’ decisions?

  - Yes → [Customer context](#ix-out%5Fcustomer)
  - No → [next question](#ix-global)  
Source: [Cloudflare, Oct 7, 2026](https://blog.cloudflare.com/agentic-security-operations/?ref=zipmex.com)
3. Is it about comparing activity with privacy-preserving Internet-wide signals?

  - Yes → [Global telemetry](#ix-out%5Fglobal)
  - No → [next question](#ix-threat)  
Source: [Cloudflare, Oct 7, 2026](https://blog.cloudflare.com/agentic-security-operations/?ref=zipmex.com)
4. Is it about indicators already admitted to the alert or case?

  - Yes → [Threat intelligence](#ix-out%5Fthreat)
  - No → [No listed match](#ix-out%5Fother)  
Source: [Cloudflare, Oct 7, 2026](https://blog.cloudflare.com/agentic-security-operations/?ref=zipmex.com)

**Traffic analysis**

Reviews request behavior, historical changes, and enforcement.

Source: [Cloudflare, Oct 7, 2026](https://blog.cloudflare.com/agentic-security-operations/?ref=zipmex.com)

**Customer context**

Reviews earlier alerts, dispositions, and Managed Defense Analysts’ decisions.

Source: [Cloudflare, Oct 7, 2026](https://blog.cloudflare.com/agentic-security-operations/?ref=zipmex.com)

**Global telemetry**

Compares activity with privacy-preserving Internet-wide signals. The specialist works only with aggregates and never receives another customer’s individual records or identity.

Source: [Cloudflare, Oct 7, 2026](https://blog.cloudflare.com/agentic-security-operations/?ref=zipmex.com)

**Threat intelligence**

Checks indicators already admitted to the alert or case.

Source: [Cloudflare, Oct 7, 2026](https://blog.cloudflare.com/agentic-security-operations/?ref=zipmex.com)

**No listed match**

The task does not match a review area in Cloudflare’s stated specialist-role descriptions.

Source: [Cloudflare, Oct 7, 2026](https://blog.cloudflare.com/agentic-security-operations/?ref=zipmex.com)

This maps Cloudflare’s listed roles; it does not rank them or show how often each handles an alert.

## Filtering and scoring

Cloudflare describes triage and evidence scoring as separate steps. In triage, alerts with a high likelihood of being false positives skip the specialist agents. In scoring, Clef rates the collected evidence. It then picks from a deterministically reduced list of attack classifications and dispositions. When the evidence is insufficient, the system makes no classification or disposition recommendation. That gives uncertainty a defined outcome in the workflow.

## How the advisory is bounded

Before analysis, Cloudflare’s system builds a versioned evidence package. It holds the investigation’s subject, scope, and time anchor. It also lists admitted evidence, policy versions, sources, and coverage gaps. Specialists must cite items in that package. Application code checks that each citation exists. It also checks that the citation belongs to the investigation and supports the attached claim. A synthesis agent then merges the typed findings into one advisory. It cannot fetch new evidence. It also cannot pick a classification outside the approved vocabulary. The evidence scope is fixed before synthesis begins.

How Cloudflare reviews deeper alerts/ HOW IT WORKSHow Cloudflare reviews deeper alerts1EvidencepackageCloudflarepackagesevidence beforeanalysis.2CustomercontextCloudflaregathers customerand networkdata.3Deeper reviewalertsCloudflare usesfour agents inparallel.4AdvisoryCloudflarecombinesfindings in oneadvisory.5Decision &mitigationCloudflare saysthe analyststaysresponsible.Alert reviewSource: Cloudflare, Oct 7, 2026

![Cloudflare’s steps: it packages evidence before analysis, gathers customer and network data, uses four agents in parallel for deeper review alerts, combines findings in one advisory, and says the analyst stays responsible.](https://storage.ghost.io/c/d4/f3/d4f34881-0300-4bbe-b8df-78a26d28be4d/content/images/2026/10/zipmex-f5edc89db2230c30.png)

Cloudflare describes a flow from evidence packaging and context gathering through agent review and synthesis, with the analyst responsible. data: Cloudflare blog, 7 October 2026 · ZIPMEX diagram; data: blog.cloudflare.com

## The global view

Cloudflare says its global telemetry specialist compares activity with privacy-preserving Internet-wide signals. The specialist works only with aggregates. It never receives another customer’s individual records or identity.

## Recommendations and responsibility

Cloudflare says recommendations follow different paths depending on the customer arrangement. For fully managed customers, Managed Defense Analysts can apply suggested rules. Other customers receive recommendations in the dashboard. They also get them through their chosen alert path. In every case, the Managed Defense Analyst remains responsible for the decision and any mitigation. The agents supply evidence and advice. The decision stays with the analyst.

## Analysis: traceability, advice, and authority

The design Cloudflare describes separates three things: traceability, advice, and authority. Evidence packaging and citation checks address traceability. They test whether a finding points to material admitted for the investigation. The synthesis limits address advice. They restrict what evidence the agent can add and which classifications it can choose. The analyst’s responsibility addresses authority. Teams weighing a similar tool could ask three separate questions. Can they inspect the evidence path? Do they understand the advisory’s limits? Who approves an action? Taking these one at a time is clearer than treating AI review as a single step.

## Limitations

Cloudflare’s Oct. 7 post gives no outside test results, pricing, customer numbers, or performance figures for the beta.

## Eligibility and access

Cloudflare directs customers who already use a supported Cloudflare product to [their enterprise account team](https://blog.cloudflare.com/agentic-security-operations/?ref=zipmex.com). Those customers can ask that team about adding Managed Defense. The beta covers eligible application-security alerts and cases. The full post sets out the workflow and evidence checks in more detail.

Sources: [Cloudflare, Oct 7, 2026](https://blog.cloudflare.com/agentic-security-operations/?ref=zipmex.com)

Promotion · ZIPMEX

Trade perpetual futures on ZIPMEX

Crypto, stocks, indices, gold, oil and currencies on trade.zipmex.com.

[See all markets](https://trade.zipmex.com/perps/markets?utm%5Fsource=zipmex-news&utm%5Fcampaign=perps&utm%5Fmedium=article&utm%5Fcontent=story-151836)

Perpetual futures are leveraged derivatives. Prices can move fast and you can lose all of your margin. Not available in every jurisdiction. Not investment advice.

ZIPMEX promotes trading on trade.zipmex.com. Promotions are labelled and kept separate from news coverage, which is selected and checked without regard to them. Perpetual futures are leveraged derivatives. Prices can move fast and you can lose all of your margin. Not available in every jurisdiction. Not investment advice.