Cloudflare has partnered with Mastercard to develop tools aimed at protecting small businesses, critical infrastructure and governments from escalating cyber threats.
The partnership is designed to tackle growing “cyber blind spots” that emerge as organisations adopt new technologies, outsource services and integrate legacy systems. As digital environments become more interconnected, security teams can struggle to maintain full visibility of their attack surface. By combining their respective technologies, Cloudflare and Mastercard aim to provide a unified solution that enables organisations to innovate while maintaining robust cyber defences.
Under the collaboration, Mastercard’s Recorded Future and RiskRecon attack surface monitoring capabilities will be integrated with Cloudflare’s Application Security portfolio. The joint solution is intended to allow millions of organisations to map, prioritise and automate the remediation of hidden risks across their internet-facing environments. From a single interface, users will be able to identify previously unknown assets and apply appropriate protections.
Cloudflare delivers a broad Application Security portfolio, including tools such as web application firewalls, encryption and automated defences. These solutions are designed to protect internet-facing assets and ensure performance and resilience across networks. Mastercard, through Recorded Future and RiskRecon, provides cyber threat intelligence and security ratings services, enabling organisations to assess vulnerabilities, authentication weaknesses, exposed infrastructure and third-party risks.
The partnership will focus on eliminating blind spots by enabling organisations to discover internet-facing domains or software stacks running on the web through Recorded Future. Where unprotected assets are identified, users will be able to immediately extend Cloudflare’s Application Security Portfolio to secure those shadow assets. Companies will also gain access to a continuously updated view of their cyber posture, including an “A–F” graded security rating. These insights will appear within Cloudflare’s Security Insights dashboard, prioritised by asset criticality and supported by contextual severity information.
In addition, organisations will be able to translate risk intelligence into direct action by enabling controls such as web application firewalls, encryption and automated protections through the Cloudflare dashboard. The objective is to reduce friction between identifying risk and implementing remediation.
Dan Cimpean, Director of the Romanian National Cyber Security Directorate, said, “Improving critical infrastructure cybersecurity and reducing cyber risk is an ongoing, challenging mission. As society and global economies increasingly rely on digital networks, we must combine our efforts across the public and private sectors, across nations and international organizations, to build resilience and prevent cyber incidents. The protection of critical infrastructure is and must be a joint effort.”
Cloudflare chief strategy officer Stephanie Cohen said, “For small businesses, critical infrastructure, and governments, a cyberattack is more than a technical hurdle. It is an existential threat. Often considered ‘target rich but resource poor,’ these organizations are strategic targets and are often attacked at a greater rate than global enterprise or Fortune 500 organizations. This partnership brings together the best in cyber defense so that these underserved organizations don’t fall victim to the growing number of cyberattacks.”
Mastercard global head of Security Solutions Johan Gerber said, “With small businesses accounting for about half of the world’s GDP, closing the resilience gap is critical to securing the foundation of our global economy. Our collaboration with Cloudflare propels our mission to secure the digital ecosystem in partnership with governments and other key players, empowering businesses to focus on what matters most: their productivity and growth.”
Keep up with all the latest RegTech news here
Copyright © 2026 RegTech Analyst
Copyright © 2018 RegTech Analyst
