Cloud Armor preconfigured rules support ModSecurity Core Rule Set (CRS) 4.22 as a rule source. For more information, see Tuning Google Cloud Armor WAF rules. This feature is available in Preview.

Cloud Armor supports a visual Match Condition Builder that allows you to create complex expressions in Common Expression Language (CEL) without writing raw code. For more information, see Use the Match Condition Builder.

Security fixes and enhancements to Cloud Armor preconfigured WAF canary rulesets for v3.0. For more information, see Tuning Google Cloud Armor WAF rules.

The following rulesets have been updated:

• sqli-canary
• xss-canary
• lfi-canary
• rfi-canary
• rce-canary
• methodenforcement-canary
• scannerdetection-canary
• protocolattack-canary
• php-canary
• sessionfixation-canary

Cloud Armor preconfigured WAF rules support for inspection up to the first 64 kB (either 8 kB, 16 kB, 32 kB, 48 kB, or 64 kB) of the request body content is Generally Available.

Security fixes and enhancements to Cloud Armor preconfigured WAF v33-canary rulesets. For more information, see Tuning Google Cloud Armor WAF rules.

The following rulesets have been updated:

• sqli-v33-canary
• xss-v33-canary
• lfi-v33-canary
• rfi-v33-canary
• rce-v33-canary
• methodenforcement-v33-canary
• scannerdetection-v33-canary
• protocolattack-v33-canary
• php-v33-canary
• sessionfixation-v33-canary
• java-v33-canary
• nodejs-v33-canary

The Cloud Armor cve-canary rules include the google-mrs-v202512-id000002-rce signature to help detect and mitigate CVE-2025-55182. For more information, see Cloud Armor preconfigured WAF rules overview.

The Cloud Armor cve-canary rules include the google-mrs-v202512-id000001-rce signature to help detect and mitigate CVE-2025-55182. For more information, see Cloud Armor preconfigured WAF rules overview.

Cloud Armor preconfigured WAF rules can now inspect up to the first 64 kB (either 8 kB, 16 kB, 32 kB, 48 kB, or 64 kB) of the request body content in Preview.

Cloud Armor support for IP address groups is Generally Available.

Feature

Cloud Armor support for regional internal Application Load Balancers is Generally Available. You can use the regional backend security policy type with this load balancer. For more information, see types of security policies.

Granular models for Cloud Armor Adaptive Protection are now Generally Available. For more information, see the Adaptive Protection overview.