2026-06-13 · cloudflare
Cloudflare announced that its Security Insights system now sustains more than 120 scans per second, a more than 10x increase from its prior throughput. The company also enabled automatic scanning for all free accounts and zones, with more frequent scans across plan tiers. The post highlights a core security reality: configuration drift and newly introduced exposure can appear faster than manual review cycles can catch. That makes continuous detection important, but it does not replace isolated recovery copies.
Cloudflare rebuilt parts of its scanning pipeline using batched Kafka processing, fast and slow processing lanes, database query optimization, active-passive API routing, and adaptive scheduling. The result is broader default coverage and higher scan frequency across Cloudflare accounts.
Misconfigurations can expose applications, records, DNS assets, and administrative surfaces long before an incident is visible to business teams. If an attacker uses that window to corrupt or delete synchronized data, live security scanning may detect the problem after the damage is already replicated.
Cold storage complements continuous scanning by preserving a version of critical records outside the active attack surface. Even when cloud configurations, credentials, or web-facing services fail, offline archives provide an independent source of truth for restoration and forensic comparison.
Read Original Post →