Summary
On September 14, 2026, Cloudflare added Passive Detection to its Data Loss Prevention product, letting teams learn from Gateway traffic and see where sensitive data actually flows before deciding what to log or block.
What changed
Cloudflare DLP now supports Passive Detection, which observes Gateway traffic and surfaces sensitive-data movement before any logging or blocking policy is enforced.
Why it matters
As employees and agents pipe data into third-party AI tools, security teams need to see real data flows before writing rules that could break workflows. Passive Detection provides an evidence-first path to DLP policy, reducing false positives when governing AI and SaaS usage.
Evidence excerpt
Passive Detection for Cloudflare Data Loss Prevention (DLP) lets you learn from your Gateway traffic before deciding what to log or block.