Security Experts:

Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Tracking & Law Enforcement

CloudFlare Releases Transparency Report for First Half of 2015

Web performance and security company CloudFlare has released a report detailing the number of requests it received from government agencies in the first half of 2015.

Web performance and security company CloudFlare has released a report detailing the number of requests it received from government agencies in the first half of 2015.

CloudFlare said it received 12 subpoenas between January 1, 2015 and June 30, 2015, the same number as in the second half of 2014. These subpoenas, ten of which have been answered, affect a total of 12 accounts and 139 domains.

While the number of subpoenas has remained the same, the number of court orders increased considerably. In the first half of 2015, the company was hit with 50 court orders, more than it received in the entire last year. The content delivery network responded to 49 of the court orders, which affect a total of 2,120 domains and 96 accounts.

The transparency report, which is published on a semiannual basis, shows that CloudFlare received three search warrants and one pen register/trap and trace order, and answered all of them. Records show that the company has not received any wiretap orders.

As for National Security Letters (NSLs) and Foreign Intelligence Surveillance Act (FISA) orders, companies are not allowed to disclose the exact number. CloudFlare says it has received between 0 and 249 such national security orders. The firm has pointed out that even if the actual number is 249, only less than 0.005 percent of customer accounts would be impacted.

The CDN has pointed out that one of the requests received in the first half of 2015 came from a foreign law enforcement agency. The request was issued via a United States court through a mutual legal assistance treaty (MLAT). CloudFlare has noted that it is not subject to foreign jurisdictions and it only accepts requests that come through the U.S. court system.

It’s worth noting that the requests detailed in the transparency report are for both CloudFlare and StopTheHacker, the anti-malware firm acquired in February 2014.

The company says it has never handed over SSL keys to anyone, it has never installed law enforcement software or hardware on its network, it has never bowed to political pressure, and it has never provided law enforcement agencies a feed of customer content.

“If CloudFlare were asked to do any of the above, we would exhaust all legal remedies, in order to protect its customers from what we believe are illegal or unconstitutional requests,” the company said.

Related: Amazon Details Government Data Requests in First Transparency Report

Written By

Eduard Kovacs (@EduardKovacs) is a contributing editor at SecurityWeek. He worked as a high school IT teacher for two years before starting a career in journalism as Softpedia’s security news reporter. Eduard holds a bachelor’s degree in industrial informatics and a master’s degree in computer techniques applied in electrical engineering.

Click to comment

Expert Insights

Related Content

Cybercrime

The FBI dismantled the network of the prolific Hive ransomware gang and seized infrastructure in Los Angeles that was used for the operation.

Ransomware

US government reminds the public that a reward of up to $10 million is offered for information on cybercriminals, including members of the Hive...

Ransomware

The Hive ransomware website has been seized as part of an operation that involved law enforcement in 10 countries.

Cybercrime

The owner of China-based cryptocurrency exchange Bitzlato was arrested in Miami along with five associates in Europe

Cyberwarfare

Google Project Zero has disclosed the details of three Samsung phone vulnerabilities that have been exploited by a spyware vendor since when they still...

Cybercrime

A hacker who reportedly posed as the CEO of a financial institution claims to have obtained access to the more than 80,000-member database of...

Application Security

Virtualization technology giant Citrix on Tuesday scrambled out an emergency patch to cover a zero-day flaw in its networking product line and warned that...

Privacy

A top U.S. intelligence official on Thursday urged Congress to renew sweeping powers granted to American spy agencies to surveil and examine communications, saying...