Using an LLM to turn request logs into Cloudflare WAF rules
· 3 min read
Thirty days of noisy request logs from an outside project, an LLM as analyst, and a small Cloudflare WAF — scanner garbage at the origin went from dozens a day to zero.
Hardening decisions I have made, and the trade-offs each one carried in the end.