We’re pleased to share our latest monthly update newsletter, which summarizes the key international feature updates for Alibaba Cloud Security products in April 2026. The highlights include:
● Cloud Firewall adds AI-powered traffic analysis;
● Releases ATO features addressing overseas account security needs;
● VPC firewalls now available in US (Silicon Valley).
● Feature:Anti-DDoS Origin 2.0 (Subscription) supports Anti-DDoS EIP (Apr. 15, 2026)
Customer Value: Supports adding Anti-DDoS EIP assets to Anti-DDoS Origin 2.0 (Subscription) instances and enables quick migration of IP assets between Anti-DDoS Origin 2.0 instances.Please refer to Official Documentation for more details. 
● Feature: Cloud Firewall - Agentic NDR Detection Capabilities Now Available (Apr. 20, 2026)
Customer Value: Ideal for complex scenarios such as APT attacks, major event protection, and sensitive data protection. It leverages capabilities like security events, security alerts, and the ATT&CK matrix to enable real-time threat detection and analysis, as well as post-incident forensics and response.Please refer to Official Documentation for more details.
● Feature: Cloud Firewall - Agentic NDR Adds Sensitive Data Risk Identification Capabilities (Apr. 20, 2026)
Customer Value: Leverages capabilities such as login behavior analysis, sensitive data inspection, high-risk service monitoring, and database behavior analysis to enable pre-emptive risk detection, vulnerability management, and attack surface reduction.Please refer to Official Documentation for more details.
● Feature: Cloud Firewall - Agentic NDR Updates Tracing Analysis Capabilities (Apr. 20, 2026)
Customer Value: Performs full packet capture for attack traffic and core asset traffic. It supports scenario-based retention of attack events and context, while allowing custom filtering rules to meet specific raw traffic retention requirements.Please refer to Official Documentation for more details.
● Feature: NDR natively integrates with Cloud Firewall to block attack source IPs using ACLs (Apr. 30, 2026)
Customer Value: For enterprises requiring IP blocking, the NDR console allows you to issue Cloud Firewall ACL policies to block attacker IPs identified in threat alerts. Currently available regions: Malaysia (Kuala Lumpur), China (Hong Kong), and Singapore.
● Feature: Cloud Firewall - Adds AI-Powered Traffic Analysis (Apr. 20, 2026)
Customer Value: Provides traffic monitoring and analysis capabilities for active outbound connections to AI services, offering multi-dimensional insights across visualization, external services, and assets. Please refer to Official Documentation for more details. 
● Feature: Cloud Firewall - Detection and Response Optimization (Apr. 20, 2026)
Customer Value: Cloud Firewall adds multiple detection and response capabilities, including TLS inspection, Intrusion Prevention System (IPS), vulnerability protection, compromise awareness, data leak detection, and protection configuration management, comprehensively enhancing the level of proactive defense. Please refer to Official Documentation for more details.
● Feature: Cloud Firewall - VPC Firewalls Now Available in US (Silicon Valley) (Apr. 27, 2026)
Customer Value: In the US (Silicon Valley) region, traffic between VPCs connected via VPC peering can be redirected to Cloud Firewall for access control and isolation. Additionally, this capability is supported for traffic between VPCs interconnected using Cloud Enterprise Network (CEN) Basic or Enterprise Edition.
● Feature: Releases ATO Features Addressing Overseas Account Security Needs (Apr. 20, 2026)
Customer Value: The Webpage Tamper-proofing and Core File Monitoring features have been merged. This upgrade introduces new capabilities, including support for configuration file operation types and username whitelisting. Please refer to Official Documentation for more details.
● Feature: Webpage Tamper-proofing and Core File Monitoring Merger and Upgrade (Apr. 21, 2026)
Customer Value: Attack Surface Management is a proactive defense capability provided by Security Center. It automatically and continuously inventories all your internet-facing assets on Alibaba Cloud—including known assets and unknown "shadow assets"—and simulates potential attack paths based on asset risks and network reachability. This feature is now available for public preview, free of charge, for Security Center Enterprise and Ultimate edition customers.Please refer to Official Documentation for more details. 
● Feature: User SSO and Cloud SSO Support Intelligent Configuration (Apr. 16, 2026)
Customer Value: Phase 1 of IDaaS and RAM Ecosystem Collaboration: Supports Intelligent Configuration of Current Account Information for User SSO and Cloud SSO Applications.Please refer to Official Documentation 1 and Official Documentation 2 for more details.
● Feature: Supports Binding Identity Providers Using the SAML Protocol to IDaaS. (Apr. 17, 2026)
Customer Value: For customers requiring Okta, Azure AD (Entra ID), or self-developed 4A systems to log on to IDaaS and related applications, support is now provided for logging on to IDaaS via the SAML protocol.
● Feature: IDaaS - EIAM Releases Agent Identity Security Capabilities (Apr. 2, 2026)
Customer Value: A unified Identity and Access Management (IAM) system built specifically for AI Agents, designed to achieve full lifecycle security governance for intelligent agents.Acting as the "Digital ID" and "Permission Hub" for Agents within enterprise cloud environments, it connects the entire access path from users to Agents and then to downstream services.Please refer to Official Documentation for more details. 
● Feature: Now available in the Japan Region, with support for automated identification of SLS logs (Apr. 28, 2026)
Customer Value: Data Security Center is now available in the Japan Region and supports automated data classification and grading capabilities.
We welcome you to read the full article for more details. Should you have any questions or need further information, please don’t hesitate to reach out.
For more details about Alibaba Cloud security products and solutions, please visit the official website: https://www.alibabacloud.com/product/security?_p_lc=1&source=blog_new_April#/overview/
Alibaba Cloud Releases Agentic NDR,Ushering Threat Detection and Response into the Age of Agents
23 posts | 1 followers
FollowAlibaba Cloud Big Data and AI - May 15, 2026
Alibaba Cloud Community - April 22, 2026
Alibaba Cloud Community - April 24, 2026
Academy Insights - December 25, 2025
Sagar Thapa - May 9, 2026
CloudSecurity - February 11, 2026
23 posts | 1 followers
Follow
Security Center
A unified security management system that identifies, analyzes, and notifies you of security threats in real time
Learn More
Security Solution
Alibaba Cloud is committed to safeguarding the cloud security for every business.
Learn More
Security Overview
Simple, secure, and intelligent services.
Learn More
Database Security Solutions
Protect, backup, and restore your data assets on the cloud with Alibaba Cloud database services.
Learn MoreMore Posts by CloudSecurity
