Build a custom profile
With Cloudflare DLP, you can build custom DLP profiles specific to your data, organization, and risk tolerance.
You can add both custom and existing detection entries to a custom DLP profile. Existing entries include predefined profiles and integration profiles.
Create a custom profile
To define a custom profile:
In Zero Trust, go to Gateway > DLP Profiles.
Select Create Profile.
Enter a name and optional description for the profile.
Add custom or existing detection entries.
Add a custom entry
Select Add custom entry and give it a name.
In Value, enter a regular expression (or regex) that defines the text pattern you want to detect. For example,
test\d\d
will detect the wordtest
followed by 2 digits.- Regexes are written in Rust. We recommend validating your regex with Rustexp.
- Detected text patterns are limited to 1024 bytes in length.
- Regexes with
+
are not supported as they are prone to exceeding the length limit. For examplea+
can detect an infinite number of a’s. We recommend usinga{min,max}
instead, such asa{1,1024}
.
To save the detection entry, select Done.
Add existing entries
- Select Add existing entries. Choose which entries to want to add, then select Confirm.
- To save the detection entry, select Done.
(Optional) Configure Advanced settings for the profile.
Select Save profile.
Next, create a DLP policy to log or block HTTP requests that match this profile.