Cloudflare ranks code vulnerabilities by live traffic using OpenAI's GPT-5.6 Cyber
Cloudflare's Managed Defense now pairs OpenAI's GPT-5.6 Cyber with its own network data — live routes, traffic volume, recent attack activity, existing WAF rules — to rank code findings by real production exposure. Prioritization is the product: each finding ships with a proposed patch and a scoped WAF rule, though access is invitation-only and capped at one authorized application per engagement.
Source: blog.cloudflare.com ↗
With our global network, we can see which routes are active, how much traffic they carry, and what security events surround them.
Cloudflare
Why this matters
- → Real production traffic now ranks which vulnerabilities matter most, cutting triage time.
- → Automated patch proposals and scoped WAF rules reduce mean time to remediation.
- → Model output is adversarially validated before reaching humans — no blindly-trusted AI suggestions.
Traffic-aware AI vulnerability triage