The Cloudflare Blog: Integrating CrowdStrike Falcon Fusion SOAR with Cloudflare’s SASE platform

Sep 15, 2025

—

Source URL: https://blog.cloudflare.com/integrating-crowdstrike-falcon-fusion-soar-with-cloudflares-sase-platform/
Source: The Cloudflare Blog
Title: Integrating CrowdStrike Falcon Fusion SOAR with Cloudflare’s SASE platform

Feedly Summary: Cloudflare and CrowdStrike have partnered to help SOC teams minimize manual bottlenecks. By combining Cloudflare’s SASE platform with CrowdStrike’s Falcon® Fusion SOAR, security teams can now detect

AI Summary and Description: Yes

Summary: The text discusses the integration of Cloudflare’s One platform with CrowdStrike’s Falcon® Fusion SOAR, emphasizing the automation of security workflows to enhance the efficiency of Security Operations Centers (SOCs) in responding to threats. It highlights the advantages of automated responses in mitigating alert fatigue and significantly improving response times to security incidents.

Detailed Description: This text is highly relevant to professionals focused on security in cloud computing, particularly in the context of integrating security operations platforms to automate threat detection and response efforts. Key points include:

– **Challenges with Manual Security Responses**:
– Security teams face significant delays due to cumbersome manual processes in threat detection and remediation.
– High alert volumes contribute to analyst fatigue, preventing focus on critical threats.

– **Introduction of CrowdStrike Falcon® Fusion SOAR**:
– A new integration with Cloudflare’s platform enhances SOC capabilities.
– Automates responses to common threats like phishing and malware, facilitating quicker action with less manual effort.

– **Out-of-the-box Integrations**:
– Pre-built integrations focus on Zero Trust Access and Email Security.
– Features available for rapid deployment include updated policies, management of domains, and lists related to email security and access controls.

– **Automation Features**:
– Falcon Fusion SOAR’s drag-and-drop editor allows for seamless workflow creation, significantly reducing response times.
– Example automated workflows include responding to phishing emails and isolating compromised devices without human intervention.

– **Technical Integration Details**:
– Utilizes webhook and API integrations between Cloudflare and CrowdStrike to facilitate bidirectional communications.
– Both endpoint detection and network monitoring are integrated to ensure comprehensive threat containment.

– **Getting Started with the Integration**:
– Organizations using both platforms can enable the workflows easily via their respective dashboards.
– Offers customization options through APIs and playbooks for tailored responses based on specific organizational needs.

This integration signifies a crucial step toward improving cybersecurity posture through automation, addressing modern challenges faced by security teams in handling sophisticated threats with greater efficiency.

a access access control access controls Act age AI alert fatigue All allow and API APIs art as at ated Auto automated response automated responses automated workflows automation based Bi bidirectional communication board book bot Box built by C capabilities centers challenge challenges CI CIA Cloud cloud computing Cloudflare co communication Communications. compromised Computing containment Context control controls creation critical crowd CrowdStrike CrowdStrike Falcon Fusion custom customization customization options cyber cybersecurit Cybersecurity cybersecurity posture D dashboard dashboards de deployment detection device directional Communication domain domains e efficiency email email security end endpoint endpoint detection endpoint detection and event eventing face feature features focused for g H handling high Highlight HR http HTTPS human improving in incident integration integrations inter io k Key l led Li low M malware man management manual processes media mini ML Mode Modern Monitor monitoring N needs network network monitoring new no o of off on one ons operation operations opt options organization organizations oS out per phi phishing phishing emails platform platforms play playbook playbooks point policies post pre pro process processes professionals ps Q QUIC R rag rapid deployment rate RCE re red remediation response Response Efforts response times responses Ro row Rust s SASE sec security security incident security incidents security operations security operations center Security Operations Centers security posture security team security teams security workflows Sig SoC source specific SSE STAR start T Tails team Teams tech technical ted text the threat threat detection threats Time times to Tor TP trust two UI up update US use V Vantage Ware web Wi workflow workflows x z zero Zero Trust