When a Firewall Learns to Run Your Code
For nearly three decades, the logic inside a corporate secure web gateway has barely changed: a request comes in, it’s checked against a rule, and the gateway spits out one of four verdicts — allow, block, isolate, or log. That simplicity is also the ceiling. The moment a security team needs something slightly more specific — read a token, call an internal database, send a real-time alert — the gateway shrugs, and the team goes off to build another piece of infrastructure to compensate. Cloudflare’s latest announcement is interesting less because it adds a feature, and more because it attacks that ceiling directly, by letting customers run their own code inside the decision itself.