Automatically remediate Microsoft 365 and Google Workspace findings with API-based CASB remediation policies
Cloudflare CASB is an API-based (agentless) tool that continuously scans your SaaS and cloud applications for security misconfigurations and data exposure. You can now use CASB remediation policies to automatically fix a finding or send a webhook the moment CASB detects it, without manual triage.
A policy can perform a first-party remediation action directly against the SaaS integration API. When a policy triggers, Cloudflare revokes the external sharing configuration without human intervention.
Remediation is currently supported for file-sharing findings in Microsoft 365 and Google Workspace. Support for additional finding types and integrations is coming soon. For the full list of supported finding types, refer to Run remediations in the CASB remediation policies documentation.
A policy can send posture finding data to Slack, ServiceNow, or any other webhook destination. Webhook actions are supported for all posture finding types across CASB integrations.
A single policy can perform both actions: remediate a finding and send a webhook.
- In Cloudflare One ↗, go to Cloud & SaaS findings > Policies.
- Select Create a policy.
- Under Basic information, enter a Policy name and, optionally, a Description.
- Under Choose how you want to trigger the policy, select a Vendor, Integration, and Finding type.
- Under Define what to do with findings that match your trigger, choose Run Remediation, Send webhooks, or both.
- Under Status, turn on Enable policy.
- Select Create policy.
- Learn how to create and manage CASB remediation policies in Cloudflare One.
- Configure CASB webhooks as a policy destination.
- Learn how to manage findings in Cloudflare One.
CASB remediation policies are now available in Cloudflare One.