The Web Application Firewall (WAF) is the cornerstone of the CDN security product portfolio. For public CDNs, it’s not just a security product but a significant growth engine impacting both the top and bottom lines. Akamai generates over a billion dollars annually in security sales, Cloudflare brings in hundreds of millions, and Fastly generates $100 million or more. Despite these impressive figures, the approach to WAF development appears stagnant—business as usual. But in a world being reshaped by AI, this complacency is a dangerous gamble.
The AI Revolution: A Tsunami of Change
The advent of AI, particularly in the form of low-cost, highly capable large language models (LLMs) like those pioneered by DeepSeek, has upended traditional business models. Large enterprises are pivoting dramatically to incorporate Agentic AI technologies into their processes, transforming departments and creating entirely new, AI-driven workflows. Bill McDermott, CEO of ServiceNow, captured this sentiment succinctly:
“Every company in the world, and every workflow for every company in every industry, will be reengineered in twenty-four months. This is a tsunami test, a tsunami of change, and only the smart ones are going to recognize it. Whether the story is complete or not, it’s not the issue; the train has moved out. It’s on the fly.”
McDermott, a seasoned leader with stints as president of Gartner and EVP of Siebel (Oracle), emphasized that he has never seen anything like the impact of AI. His observations ring particularly true for the CDN industry, where agility and innovation have historically been key drivers of success.
A Looming Threat: AI-Powered Adversaries
While AI promises unprecedented advancements, it also introduces significant risks. Adversaries could harness AI to create intelligent agents capable of thinking, reasoning, and orchestrating sophisticated attacks that traditional defenses, like legacy WAFs, cannot withstand. The days of static rules and machine-learning-driven bot protection are numbered.
AI-powered attacks could:
- Bypass WAF Rules: Dynamic and context-aware AI agents could adapt in real time to evade static defenses.
- Exploit Zero-Day Vulnerabilities: AI agents might rapidly identify and exploit vulnerabilities before traditional systems can patch them.
- Scale Threats: AI’s ability to operate autonomously allows attackers to scale threats at unprecedented levels.
Preparing for the Future: A Call to Action
Public CDNs must act now to combat these emerging threats. The solution lies in developing native AI agents specifically designed to counter AI-powered attacks. This requires a fundamental shift in how CDNs approach security innovation.
1. Establish Dedicated AI R&D Teams
Creating specialized research and development teams focused on AI-driven security is essential. These teams should:
- Develop proactive AI agents that can predict and counter advanced threats.
- Collaborate with academic institutions and private sector AI labs to stay ahead of adversaries.
2. Embrace Adaptive Defenses
Traditional WAFs must evolve into adaptive systems capable of:
- Real-time learning and decision-making.
- Anticipating attacker strategies using predictive AI models.
- Seamlessly integrating with other security measures to create a multi-layered defense.
3. Educate and Train
AI literacy within CDN organizations is crucial. Training programs should ensure that teams understand the capabilities and risks associated with AI, enabling them to respond effectively to this rapidly changing landscape.
The Stakes Are Higher Than Ever
The CDN industry has always thrived on its ability to adapt to technological shifts, but this time the challenge is unprecedented. The pace of AI innovation is overwhelming, leaving many feeling like they’re drinking from a firehose. Yet, the consequences of inaction are dire. As AI continues to transform the business and threat landscapes, CDNs must rise to the occasion.
The question is no longer whether AI will redefine security but how quickly the CDN industry can adapt to ensure it remains at the forefront of this new era. The time to act is now.