Cloudflare Docs
Cloudflare Zero Trust
Visit Cloudflare Zero Trust on GitHub
Set theme to dark (⇧+D)

Predefined profiles

Cloudflare Zero Trust provides predefined DLP profiles for common types of sensitive data. Some profiles include built-in validation checks to increase detection granularity. Additionally, you can configure advanced settings for predefined profiles.

​​ Financial information

Credit card numbers begin with a six or eight-digit Issuer Identification Number (IIN) and are followed by up to 23 additional digits. CVVs are not validated.

Detection entry Notes
American Express Card Number Validated using Luhn’s algorithm.
American Express Text Text matching amex or american express.
Diners Club Card Number Validated using Luhn’s algorithm.
Generic CVV Card Number Validated with regex.
Mastercard Card Number Validated using Luhn’s algorithm.
Mastercard Text Text matching mastercard.
Union Pay Card Number Validated using Luhn’s algorithm.
Union Pay Text Text matching union pay.
Visa Card Number Validated using Luhn’s algorithm.
Visa Text Text matching visa.
United States ABA Routing Number Validated algorithmically with checksum.
IBAN Validated with checksum.

​​ National identifiers

Detections are validated algorithmically when possible.

Detection entry Notes
United States SSN Numeric Detection Commonly used separators are required to match the detection entry. For example, 000-00-0000 matches but 000000000 does not. Social security numbers do not adhere to algorithmic validation.
Social Security Number Text Text matching ssn or social security.
Australia Tax File Number Validated with checksum.
Canada Social Insurance Number Validated using Luhn’s algorithm.
France Social Security Number Validated with regex.
Singapore National Registration Identity Card Number Validated with checksum.
Taiwan National Identification Number Validated with checksum.
United Kingdom NHS Number Validated with checksum.
United Kingdom National Insurance Number Validated with regex.

​​ Credentials and secrets

The following secrets are validated with regex.

  • Google Cloud Platform keys
  • AWS keys
  • Azure API keys
  • SSH keys

​​ Source code

The following programming languages are validated with natural language processing (NLP).

  • C
  • C++
  • C#
  • Go
  • Haskell
  • Java
  • JavaScript
  • Lua
  • Python
  • R
  • Rust
  • Swift