Skip to content

Analyze profile detections

Last updated View as MarkdownAgent setup

Use Profile Analysis in Security Analytics to investigate profile detections.

Understand request statuses

Profile Analysis classifies requests with these statuses:

  • Conforms: The evaluated request matched its applicable profile.
  • Violates: The evaluated request did not match its applicable profile.
  • Not evaluated: No applicable profile is available, or the profile does not apply.

Review detections

  1. In the Cloudflare dashboard, go to Security > Analytics.

    Go to Analytics ↗
  2. Open Profile Analysis and select a profile.

  3. Review conformance trends over your selected time range.

  4. Inspect sampled violations for the request component and affected field.

  5. Review each sampled violation reason before configuring mitigation.

  6. Filter by cf.schema_validation.learned.violated or cf.schema_validation.uploaded.violated to inspect the corresponding source.

Interpret violations

A non-conforming request is not necessarily malicious. Releases, new clients, and valid edge cases can produce violations.

Cloudflare runs an always-on detection after a profile becomes available. Detection does not block requests by itself.

After reviewing representative traffic, refer to Enforce profiles with Custom Rules.

Was this helpful?