---
title: cf.waf.auth_detected · Cloudflare Ruleset Engine docs
description: Indicates whether the Cloudflare WAF detected authentication credentials in the request.
source_url:
  html: https://patricia-pcx17119-l7-overrides.preview.developers.cloudflare.com/ruleset-engine/rules-language/fields/reference/cf.waf.auth_detected/index.md
  md: https://patricia-pcx17119-l7-overrides.preview.developers.cloudflare.com/ruleset-engine/rules-language/fields/reference/cf.waf.auth_detected/
---

# cf.waf.auth\_detected

`cf.waf.auth_detected` Boolean

Indicates whether the Cloudflare WAF detected authentication credentials in the request.

Requires a Cloudflare Enterprise plan. You must also enable [leaked credentials detection](https://developers.cloudflare.com/waf/detections/leaked-credentials/).

Categories:

* Request
