Highlights | Security New Features in October-December 2025

Anti-DDoS

● Feature: Anti-DDoS Proxy (Outside Mainland China) Launches Cross-border Security Protection(Nov. 25, 2025)

● Customer Value: Mainly targeted at enterprises or institutions with cross-border acceleration and DDoS protection needs in mainland China and overseas origin sites, industries include cross-border e-commerce, overseas gaming, fintech, etc., supporting cross-border security protection and meeting acceleration and DDoS protection needs. New Security Acceleration Line 2.0 Protection Package has been added, allowing customers to choose different numbers of full-scale protection instances based on their needs. Options for 0 and 1 instance of additional protection have been added, lowering the entry price to $1,548/month. This addresses channel partners' needs to expand coverage to more mid- and long-tail EU customers with non-frequent DDoS attack protection requirements. During an attack, protection capacity can be upgraded instantly without changing the instance IP. At the same time, we provide higher standard business bandwidth and QPS sales options to fully support the overseas business expansion needs of high traffic users. Effectively ensure business stability and access experience. Please refer to Official Documentation for more details.

Web Application Firewall

● Feature: WAF Threat Intelligence Module Now Available – Free for Enterprise and Premium Editions(Dec. 26, 2025)

● Customer Value:The WAF Threat Intelligence module is now available as a standalone feature—free for Enterprise and Premium edition users, and available as a paid add-on for pay-as-you-go users. Powered by global real-time monitoring and big data analytics, it aggregates massive volumes of malicious IP intelligence to help users accurately detect and defend against web-based attacks.Please refer to Official Documentation for more details.

● Feature: WAF Now Supports IP Address Book(Dec. 16, 2025)

● Customer Value: You can centrally manage IP addresses in the IP Address Book and directly reference it in modules such as allowlists, custom rules, and bot protection. Please refer to Official Documentation for more details.

● Feature: WAF Supports Customizing Response Pages at the Rule Level and Customizing CAPTCHA Challenge Styles(Dec. 18, 2025)

● Customer Value: By using the custom response feature, you can configure the response pages returned when client requests are blocked or trigger a CAPTCHA challenge. This allows you to match your business interface style and improve user experience.Please refer to Official Documentation for more details.

● Feature: WAF3.0 Supports Smooth Conversion From Pay-as-you-go To Subscription Plans (Dec. 08, 2025)

● Customer Value: Users can now convert their pay-as-you-go WAF instances to monthly or yearly subscriptions with one click. This enables a "lightweight start with low-cost trial"followed by a"seamless upgrade for long-term savings"—a truly user-centric design.

● Feature: WAF Pay-as-you-go Launches SeCU Cost Estimator (Oct. 14, 2025)

● Customer Value: For customers who plan to purchase the Web Application Firewall but cannot estimate their bill amount, we support online estimation at the time of purchase. Support the use of both Chinese and international websites. Cost Estimator Page Cost Estimator.

● Feature: API Security Supports Account Resolution And Account Dimension Threat Analysis (Nov. 25, 2025)

● Customer Value: API Security now provides account-dimension data statistics. On the Security Events page, go to the Account Security Events tab to view statistics about API attack events and search for events based on specific conditions. This tab contains three main modules: Attack Impact Statistics, the event type list on the left, and API Security Event Details. Enhanced monitoring of abnormal API calls and attack behaviors enables the evolution from network-layer defense to business-layer protection. Please refer to Official Documentation for more details.

Security Center

● Feature: Security Center – Vulnerability Management Now Supports Automated System Vulnerability Remediation(Dec. 16, 2025)

● Customer Value: Security Center now supports configuring automated vulnerability remediation tasks on a one-time, daily, or weekly basis. You can specify the severity levels of vulnerabilities to be automatically fixed and enable automatic snapshot creation for data backup before remediation. Please refer to Official Documentation for more details.

● Feature: Optimize The Ability To Handle Security Alerts(Nov. 25, 2025)

● Customer Value: The Security Center enhances the security alarm capability for users of the free version, including the two alarm detection items of ECS instance logon over SSH before suspicious command sequence execution and ECS instance compromised due to brute-force attacks on RDP. To assist the majority of free version of the user to enhance the safety level, enhance the sense of security. Please refer to Official Documentation for more details.

Cloud Firewall

● Feature: Cloud Firewall – NDR Now Supports Pay-as-you-go and Is Available on the International Site(Dec. 1, 2025)

● Customer Value: NDR is now available for International Site users to purchase on a subscription (annual or monthly) basis, while the pay-as-you-go version is open to both China Site and International Site users. This enhancement addresses global customers'demand for full-traffic threat detection and response (NDR), supports flexible billing scenarios, and improves product usability and deployment agility. Please refer to Official Documentation for more details.

● Feature: Internet Firewall Now Available In Thailand (Bangkok) Region. (Nov. 28, 2025)

● Customer Value: For enterprises and institutions in Thailand (Bangkok) region with public network assets that need to be protected, support the access of public network assets to cloud firewall protection. Please refer to Official Documentation for more details.

ID Verification

● Feature: ID Verification Now Available in the Germany Region (Dec. 9, 2025)

● Customer Value: ID Verification now processes and stores data within the Germany region, enabling customers to better comply with local KYC requirements and mitigate data security challenges associated with cross-border data transfers. For details, please refer to the Official Documentation.

● Feature: ID Verification Introduces Asynchronous API Invocation for Credential Recognition, Enriching Integration Options (Nov. 21, 2025)

● Customer Value: This addresses issues where synchronous calls cannot respond in real time, negatively impacting end-user verification experiences. By creating asynchronous tasks, customers can provide more flexible presentation of verification results to end users, eliminating long wait times. For details, please refer to the Official Documentation.

● Feature: ID Verification Adds Standardized Field Output Functionality to Establish Consistent Credential Information Formats (Dec. 9, 2025)

● Customer Value: In eKYC or OCR product scenarios—whether via API or client-side integration—customers can optionally configure the service to return standardized fields containing Latin-script first and last names. This helps global or Web3-focused customers build uniformly formatted Latin-name data, supporting compliance with trueRule Anti-money Laundering (AML) obligations. For details, please refer to the Official Documentation.

Identity as a Service

● Feature: Identity as a Service (IDaaS) – GDPR Consent Clause Records Added to Event Logs(Dec. 4, 2025)

● Customer Value: A new GDPR-compliant logging feature has been added. When users log in, the system automatically records details of their consent to terms, including the timestamp of consent, the user identity, and the specific clauses agreed to. This enhancement fully supports international customers' data privacy compliance requirements and helps enterprises confidently expand into overseas markets or serve users outside China.Please refer to Official Documentation for more details.

● Feature: IDaaS – SCIM Sync Now Supports Custom Field Synchronization.(Dec. 11, 2025)

● Customer Value: When synchronizing user data via the SCIM protocol, OIDC applications now support mapping custom attributes from external identity providers—such as Entra ID and Okta—to IDaaS extension fields, significantly enhancing the flexibility and completeness of user data synchronization.

● Feature: IDaaS Now Supports Outbound Binding With LDAP/AD(Nov. 24, 2025)

● Customer Value: Enterprise customers who use LDAP/AD as their identity source, especially organizations such as finance, government, and large enterprises that require IDaaS to synchronize data and authenticate with LDAP/AD, have added data synchronization functionality from IDAAS to LDAP/AD to meet their flexible docking needs in a hybrid identity architecture.This feature supports synchronizing identity data from the cloud to the local LDAP/AD system and achieving unified authentication, expanding the usage scenarios of LDAP/AD as the identity source. Suitable for customers who need to retain local directory services while enjoying cloud identity management capabilities, improving the compatibility and operational efficiency of identity infrastructure.Please refer to Official Documentation for more details.

● Feature: IDaaS Supports Customers To Customize login UI.(Oct. 15, 2025)

● Customer Value: Customers who have customized requirements for IDaaS login pages are supported to customize the login page UI, helping customers achieve personalized and branded configurations. Including background, icons, text, and other elements, it is convenient for customers to independently design a login interface that conforms to the brand style.Please refer to Official Documentation for more details.

Community

Highlights | Security New Features in October-December 2025

Anti-DDoS

Web Application Firewall

Security Center

Cloud Firewall

ID Verification

Identity as a Service

Read previous post:

CloudSecurity

You may also like

Comments

CloudSecurity

Related Products

WAF(Web Application Firewall)

Security Center

Web Hosting Solution

Security Solution