---
title: SoFi 
description: Learn how SoFi blocks malicious traffic attacking its website using Cloudflare
image: https://www.cloudflare.com/preview.png
---

# SoFi 

> #### “ Cloudflare WAF was so easy and intuitive to use. It took our engineers almost no time to get up to speed. We’ve now expanded our usage of Cloudflare’s suite of products. Integrating with any Cloudflare solution has been just so smooth and painless. ” 

## **SoFi Overcomes Malicious Traffic with Cloudflare**

In the age of the digital economy, traditional brick and mortar banks are giving way to a new breed of online-only financial institutions. The task at hand for these fully digitized financial institutions is not easy: they need to deliver a smooth, secure, and flexible experience to their customers all over the world. 

With the ever-increasing threat and sophistication of cyber attacks, the emphasis on security has become paramount for these new-age financial institutions. Any breach of security can drastically impact their business and unnerve customers.

**The Challenge**

SoFi, based out of San Francisco, is a well-known name in the world of online-first financial institutions. Started in 2011, they have revolutionized the way people borrow, spend, earn, and invest money. They have over 800,000 members and have funded over $40 billion in loans.

Facing a constant threat from cyber attacks, SoFi’s security team started looking for a Web Application Firewall (WAF) in 2018\. They wanted an easy-to-use solution that not only blocked nefarious traffic but also became intelligent over time as new threats emerged. In the beginning, they tried some of the WAF solutions that their cloud providers offered; however, none of them were up to the task. Some lacked comprehensive features and rulesets, while others required a great deal of engineering effort to set up and maintain.

**“We tried a couple of different WAFs offered by major cloud providers, but they involved too much effort to maintain and involved a steep learning curve for our engineers. Some of them just didn’t offer most of the features or rules we needed. It was almost like building a WAF from the ground up.”**

— Peter Wolf 

Security Engineering Manager, SoFi

**The Cloudflare Solution**

Cloudflare emerged as the answer SoFi was looking for — an easy-to-use WAF solution that offers comprehensive rulesets to stop emerging and sophisticated threats. Cloudflare’s network across %{GlobalWebsiteCountWords} million internet properties acts as an immune system for the internet — learning from any attack on one property to better protect them all. With Cloudflare, SoFi is constantly protected against any new vulnerabilities that crop up on the Internet. 

Using Cloudflare WAF, SoFi’s engineers took almost no time to build and deploy granular rule sets and were able to reduce malicious traffic by over 60%, with a significantly low false-positive rate.

SoFi was also able to add an additional layer of authentication for its international visitors by leveraging Cloudflare Workers, Cloudflare’s serverless development platform. Deploying a mobile validation solution at the network edge using Cloudflare Workers enabled SoFi to filter out malicious traffic that was spoofing their real users — without any compromise to performance. 

**“What surprised us the most was that Cloudflare WAF was so easy and intuitive to use. It took our engineers almost no time to get up to speed. The issues that took days to get resolved with other cloud providers only take a few hours with Cloudflare. We’ve now expanded our usage of Cloudflare’s suite of products. Integrating with any Cloudflare solution has been just so smooth and painless.”**

_— Paul Shope_ 

_Security Engineer, SoFi_

![SoFi  logo](https://images.ctfassets.net/slt3lc6tev37/Io2sEasZz5CNl8YHlzsPf/66edb61eb3632ed0c705a5b6017496a2/Sofi.png) 

Learn how SoFi blocks malicious traffic attacking its website using Cloudflare

 Cloudflare Products 
* [  Bot Management ](/application-services/products/bot-management/)
* [  DDoS Mitigation ](/ddos/)
* [  Web Application Firewall (WAF) ](/application-services/products/waf/)
* [  Workers ](https://workers.cloudflare.com/)

 Products Used 

WAF 

 Details 

 Industry 

Financial Services 

 Region 

North America 

Build section video off in Low preview — use High mode and refresh for full motion. 

# Build without boundaries

 Join thousands of developers who've eliminated infrastructure complexity and deployed globally with Cloudflare. Start building for free — no credit card required. 

[  Start building for free ](https://dash.cloudflare.com/sign-up) [  View docs ](https://developers.cloudflare.com/) 

 No cold starts or region complexity  SASE and Zero Trust without the complexity  Deploy to 330+ cities instantly  Defend against the Internet's biggest DDoS attacks  Predictable pricing without surprises  Identity-aware Zero Trust access that retires your VPN  Battle-tested infrastructure powering millions  CDN, WAF, and DNS faster than the public Internet  No cold starts or region complexity  SASE and Zero Trust without the complexity  Deploy to 330+ cities instantly  Defend against the Internet's biggest DDoS attacks  Predictable pricing without surprises  Identity-aware Zero Trust access that retires your VPN  Battle-tested infrastructure powering millions  CDN, WAF, and DNS faster than the public Internet 

```json
{"@context":"https://schema.org","@type":"Organization","name":"Cloudflare","url":"https://www.cloudflare.com","logo":"https://www.cloudflare.com/logo.svg","sameAs":["https://github.com/cloudflare","https://www.linkedin.com/company/cloudflare","https://x.com/cloudflare"]}
{"@context":"https://schema.org","@type":"WebSite","name":"Cloudflare","url":"https://www.cloudflare.com","inLanguage":"en","potentialAction":{"@type":"SearchAction","target":"https://www.cloudflare.com/search?q={search_term_string}","query-input":"required name=search_term_string"}}
{"@context":"https://schema.org","@type":"WebPage","name":"SoFi ","description":"Learn how SoFi blocks malicious traffic attacking its website using Cloudflare","url":"https://www.cloudflare.com/case-studies/sofi-overcomes-malicious-traffic-with-cloudflare/","inLanguage":"en"}
```
