Cloudflare Cloudforce One

https://blog.cloudflare.com/tag/cloudforce-one/

Cloudflare's threat intelligence unit; large-scale internet telemetry. Cadence sparse. 2026-05-08 audit: WebFetch returned 5 dated CF1 articles Aug 2025 - Mar 2026. | 2026-06-20 full audit (v2.62): live=Y, drill=Y. FETCH → webfetch https://blog.cloudflare.com/tag/cloudforce-one/ (listing) then webfetch per-article blog.cloudflare.com/<slug>/ for body. AVOID: Cadence is sparse, do not flag 'no items' as broken; latest CF1-tagged posts may be days/weeks apart. | 2026-07-05 admiralty audit: B, vendor threat-research lab with first-hand internet telemetry, original research; live and drillable, no change (active). | 2026-10-03 S3: `feed https://blog.cloudflare.com/tag/cloudforce-one/rss/ 10` returns dated items; the tag page extract has no dates. (2026-10-03T0404Z-intel) | 2026-10-07 (S3): threat reports such as the EvilTokens disruption live under cloudflare.com/threat-intelligence/research/report/<slug>, not in the blog feed. | 2026-10-11 (S3, main agent verified): the Cloudforce One tag feed https://blog.cloudflare.com/tag/cloudforce-one/rss/ parses with dated items on the direct transport (newest 2026-10-07), so fetch_method moved from webfetch to rss.