Cloudforce One is a threat operations and research team at Cloudflare that focuses on tracking and disrupting threat actors targeting Cloudflare and its customers. They have introduced two new tools, Requests for Information (RFIs) and Priority Intelligence Requirements (PIRs), to help customers get the most out of the service. RFIs streamline the process of accessing critical intelligence, while PIRs help identify intelligence gaps and organize requirements. Cloudforce One uses Cloudflare Workers and Pages platforms to build their internal pipeline for investigations. They have a structured approach to managing formal requests and customer priorities, as well as a case management system for storing notes and data related to attacks. The team leverages Workers AI for indexing case files and implementing AI models for question answering. The goal is to empower organizations with enhanced threat intelligence capabilities to strengthen their cybersecurity posture.