> Maybe they have a 100% success rate at blocking actual threats They don’t. There’s a new, working CF WAF bypass published almost every day in the bug bounty

> Maybe they have a 100% success rate at blocking actual threats They don’t. There’s a new, working CF WAF bypass published almost every day in the bug bounty hunter circles.