Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Tracking & Law Enforcement

CloudFlare Releases Transparency Report for First Half of 2015

Web performance and security company CloudFlare has released a report detailing the number of requests it received from government agencies in the first half of 2015.

Web performance and security company CloudFlare has released a report detailing the number of requests it received from government agencies in the first half of 2015.

CloudFlare said it received 12 subpoenas between January 1, 2015 and June 30, 2015, the same number as in the second half of 2014. These subpoenas, ten of which have been answered, affect a total of 12 accounts and 139 domains.

While the number of subpoenas has remained the same, the number of court orders increased considerably. In the first half of 2015, the company was hit with 50 court orders, more than it received in the entire last year. The content delivery network responded to 49 of the court orders, which affect a total of 2,120 domains and 96 accounts.

The transparency report, which is published on a semiannual basis, shows that CloudFlare received three search warrants and one pen register/trap and trace order, and answered all of them. Records show that the company has not received any wiretap orders.

As for National Security Letters (NSLs) and Foreign Intelligence Surveillance Act (FISA) orders, companies are not allowed to disclose the exact number. CloudFlare says it has received between 0 and 249 such national security orders. The firm has pointed out that even if the actual number is 249, only less than 0.005 percent of customer accounts would be impacted.

The CDN has pointed out that one of the requests received in the first half of 2015 came from a foreign law enforcement agency. The request was issued via a United States court through a mutual legal assistance treaty (MLAT). CloudFlare has noted that it is not subject to foreign jurisdictions and it only accepts requests that come through the U.S. court system.

Advertisement. Scroll to continue reading.

It’s worth noting that the requests detailed in the transparency report are for both CloudFlare and StopTheHacker, the anti-malware firm acquired in February 2014.

The company says it has never handed over SSL keys to anyone, it has never installed law enforcement software or hardware on its network, it has never bowed to political pressure, and it has never provided law enforcement agencies a feed of customer content.

“If CloudFlare were asked to do any of the above, we would exhaust all legal remedies, in order to protect its customers from what we believe are illegal or unconstitutional requests,” the company said.

Related: Amazon Details Government Data Requests in First Transparency Report

Written By

Eduard Kovacs (@EduardKovacs) is senior managing editor at SecurityWeek. He worked as a high school IT teacher before starting a career in journalism in 2011. Eduard holds a bachelor’s degree in industrial informatics and a master’s degree in computer techniques applied in electrical engineering.

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing for the latest cybersecurity threats, trends, and expert insights.

Click to comment

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Join this live webinar as we break down why email-layer defenses alone can't keep pace with the modern phishing ecosystem, how agentic AI is changing the capacity equation for security teams, and more.

Register

This year's summit will help organizations learn how to utilize tools, controls, and design models needed to properly secure cloud environments. Interact with leading solution providers and other end users facing similar challenges in securing a variety of cloud deployments.

Register

People on the Move

Mark Carter has been appointed Chief Information Security Officer at Socure.

Spektrum Labs has named Mark Cravotta Chief Operating Officer.

Philip Martin has joined Uber as Chief Information Security Officer.

More People On The Move

Expert Insights

Four decades of incident response experience suggest that exploits are often the symptom, not the root cause, of today’s cybersecurity failures.

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest cybersecurity news, threats, and expert insights. Unsubscribe at any time.