What Cloudflare shipped in February 2026

Key Transparency

The webpage discusses Key Transparency, a feature that allows users to verify the authenticity of certificates. This change affects users who rely on certificate verification for security purposes. It…

Cloudflare Adds Post-Quantum Cryptography Support

Cloudflare has deployed post-quantum cryptography (PQC) support, specifically hybrid key agreements, across various software platforms. This change affects users of Firefox, Chrome, Safari, Edge, and …

Toxic combinations: when small signals add up to a security incident

Cloudflare has identified and analyzed a critical security threat known as "toxic combinations," where minor misconfigurations and overlooked anomalies can converge to create significant security vuln…

We deserve a better streams API for JavaScript

The article discusses the limitations and performance issues of the WHATWG Streams Standard, also known as Web streams, which is used for handling data streams in applications. The author, who has ext…

The most-seen UI on the Internet? Redesigning Turnstile and Challenge Pages

Cloudflare has redesigned its Turnstile widget and Challenge Pages, which are seen 7.67 billion times daily. The redesign was driven by the need to improve user experience amid a significant increase …

Bringing more transparency to post-quantum usage, encrypted messaging, and routing security

Cloudflare has expanded its security insights on Cloudflare Radar with several new data sets and tools. The company has extended its post-quantum (PQ) monitoring to include origin-facing connections a…

Post-Quantum EncryptionWorldwide

Cloudflare has enhanced its Cloudflare One product to support post-quantum encryption by implementing the latest IETF drafts for hybrid ML-KEM. This upgrade extends post-quantum encryption across all …

ASPA: making Internet routing more secure

Cloudflare has introduced a new feature in Cloudflare Radar to monitor the deployment of ASPA (Autonomous System Provider Authorization), a cryptographic standard designed to validate the entire path …

Cloudflare Introduces Streams for Reliable Data Ingestion

Cloudflare has introduced Streams, a feature within Cloudflare Pipelines that provides durable, buffered queues for receiving and storing events. Streams ensure reliable data ingestion via HTTP endpoi…

Cloudflare Stream

Cloudflare Stream is a serverless video streaming service that allows users to upload, store, encode, and deliver live and on-demand video through a single API, without the need for infrastructure con…

Cloudflare Introduces Backup and Restore Feature for Sandbox

Cloudflare has introduced a backup and restore feature for its Sandbox environment, allowing users to create point-in-time snapshots of sandbox directories and restore them using copy-on-write overlay…

Cloudflare Introduces Backup and Restore Feature for Sandbox Environment

Cloudflare has introduced a new backup and restore feature for its Sandbox environment, allowing users to create point-in-time snapshots of sandbox directories and restore them using copy-on-write ove…

Cloudflare Introduces Security Center

Cloudflare has introduced the Security Center, a unified security intelligence solution that consolidates their suite of security products, expertise, and Internet intelligence. This platform helps us…

Cloudflare Introduces Post-Quantum Encryption and Key Transparency on Radar

Cloudflare has introduced several significant updates to its Radar platform, focusing on post-quantum encryption and key transparency. The new Post-Quantum Encryption feature allows users to track the…

Cloudflare Introduces New Features and Updates

Cloudflare has introduced several updates to its Radar service, including post-quantum encryption support and a Key Transparency dashboard. The post-quantum encryption feature allows users to track th…

Cloudflare Changelog Updates

Cloudflare has introduced several updates across its platform. The most significant change is the addition of post-quantum encryption support and Key Transparency on Cloudflare Radar. Post-quantum enc…

Cloudflare Introduces New Features and Improvements to Radar Service

Cloudflare has introduced several new features and improvements to its Radar service. The most significant change is the addition of post-quantum encryption support and a Key Transparency dashboard. T…

New protocols added for Gateway Protocol Detection (Beta)

Cloudflare has expanded its Gateway Protocol Detection feature in beta to include support for seven additional protocols: IMAP, POP3, SMTP, MYSQL, RSYNC-DAEMON, LDAP, and NTP. This update allows users…

Radar - Post-Quantum Encryption and Key Transparency on Cloudflare Radar

Cloudflare has introduced new features to track post-quantum encryption support and monitor end-to-end encrypted messaging audit logs. The new Post-Quantum API provides endpoints to track the share of…

SQLite-backed Durable Objects Now Generally Available on Cloudflare Workers Free Plan

Cloudflare has announced that SQLite-backed Durable Objects are now generally available on the Workers Free plan, with specific limits. Durable Objects are a special type of Cloudflare Worker that com…

Cloudflare Launches Pipelines in Open Beta

Cloudflare has launched Pipelines, a new feature in open beta that allows developers to ingest, transform, and load streaming data into Apache Iceberg or Parquet in R2. This service is available to us…

Cloudflare Introduces Sandbox SDK in Beta

Cloudflare has introduced the Sandbox SDK in beta, a tool that allows developers to run untrusted code securely in isolated environments. Built on Containers, the Sandbox SDK provides a simple API for…

Cloudflare Expands CASB Integrations

Cloudflare has expanded its Cloudflare CASB (Cloud Access Security Broker) integrations to include a wide range of cloud environments and SaaS applications. This update allows users to integrate and m…

Cloudflare WARP is a client that securely routes device traffic through Cloudflare's global network, enabling advanced web filtering and device posture checks. It supports major operating systems and …

Cloudflare WARP Supports Multiple Users on Windows Devices

Cloudflare WARP now supports multiple users on a single Windows device, allowing each user to have their own device registration. This feature automatically switches registrations when a user logs in,…

Cloudflare has introduced several updates across its platform. The most significant change is the asynchronous stale-while-revalidate feature for its caching mechanism. This update allows Cloudflare t

Markdown responses for Cloudflare 1xxx errors

Cloudflare has introduced structured Markdown responses for Cloudflare-generated 1xxx errors, which are now returned when clients request them with the `Accept: text/markdown` header. This change incl…

Cache - Asynchronous stale-while-revalidate

Cloudflare has updated its stale-while-revalidate support to be fully asynchronous. This means that revalidation of cached content now begins at the time of expiry, rather than waiting for the next vi…

Cloudflare has introduced several updates across its platform. The most significant change is the asynchronous stale-while-revalidate feature for caching, which reduces latency and improves the consis

Cloudflare Introduces Codemode for LLM Tool Orchestration

Cloudflare has introduced Codemode, a beta feature that allows large language models (LLMs) to write and execute code to orchestrate tools, rather than making individual tool calls. This approach is i…

Cloudflare Introduces Dynamic Routing for AI Gateway

Cloudflare has introduced Dynamic Routing for its AI Gateway, allowing users to create request routing flows through a visual interface or JSON-based configuration. This feature enables users to evalu…

Cloudflare Introduces Clientless Web Isolation

Cloudflare has introduced Clientless Web Isolation, a feature that allows users to securely browse high-risk or sensitive websites in a remote browser without installing the Cloudflare WARP client on …

Agents, Workers - Agents SDK v0.6.0: RPC transport for MCP, optional OAuth, hardened schema conversion, and @cloudflare/ai-chat fixes

The latest release of the Agents SDK by Cloudflare introduces several updates. Most notably, it allows defining an Agent and an McpAgent in the same Worker, connecting them over RPC without HTTP or ne…

Cloudflare has released several updates across its platform. The Agents SDK v0.6.0 introduces RPC transport for MCP, allowing Agents and McpAgents to connect within the same Worker without HTTP or net

Cloudflare Introduces Query Language for Workers Observability

Cloudflare has introduced a query language for Workers Observability, allowing users to write structured queries directly in the search bar to filter logs and traces. This feature supports free text s…

No config? No problem. Just `wrangler deploy`

Cloudflare has made automatic project configuration the default behavior for `wrangler deploy` starting with Wrangler version 4.68.0. This update allows developers to deploy any existing project to Cl…

Cloudflare has released several updates across its platform. The Agents SDK v0.6.0 introduces RPC transport for MCP, making it possible to connect an Agent to an McpAgent within the same Worker withou

RPKI ASPA Deployment Insights on Cloudflare Radar

Cloudflare has added Autonomous System Provider Authorization (ASPA) deployment insights to its Radar service, providing visibility into the adoption and verification of ASPA objects across the global…

Containers - Run 15x more Containers with higher resource limits

Cloudflare has increased the resource limits for its Containers service, allowing users to run significantly more containers concurrently. The limits for memory, vCPU, and disk have been raised, enabl…

WAF - WAF Release - Scheduled changes for 2026-03-02

Cloudflare has announced a scheduled Web Application Firewall (WAF) release that introduces three new detections. The first two are new detections for vulnerabilities in SmarterMail, specifically an a…

Workers - Better Windows support for Python Workers

Cloudflare has expanded the compatibility of Pywrangler, its CLI tool for managing Python Workers and packages, to include Windows. Previously, Pywrangler was only available on macOS and Linux. This u…

How we rebuilt Next.js with AI in one week

Cloudflare has introduced vinext, a drop-in replacement for Next.js built on Vite, which deploys to Cloudflare Workers with a single command. This new framework aims to address the deployment challeng…

wrangler@4.68.1

The recent update to the Cloudflare Workers SDK's Wrangler tool includes two significant fixes. First, it addresses an issue with Angular scaffolding that prevented localhost server-side rendering (SS…

@cloudflare/local-explorer-ui@0.6.0

The Cloudflare Workers SDK has introduced a minor update to the local explorer UI, specifically adding a tab definition for the table explorer. This change is part of an ongoing effort to integrate a …

@cloudflare/workers-utils@0.11.2

The Cloudflare Workers SDK has introduced new helper functions, removeDir and removeDirSync, which include automatic retry logic to handle Windows EBUSY errors. These helpers wrap existing file system…

create-cloudflare@2.64.4

The Cloudflare Workers SDK has released version 2.64.4, which includes two main updates. First, dependencies for 'create-cloudflare' have been updated, with thanks to contributor Dario Piotrowicz. Sec…

@cloudflare/vitest-pool-workers@0.12.17

The content describes a patch change for the Cloudflare Workers SDK, specifically for the @cloudflare/vitest-pool-workers package, version 0.12.17. This update likely includes bug fixes or minor impro…

@cloudflare/vite-plugin@1.25.5

The Cloudflare Workers SDK has released version 1.25.5 of the Vite plugin, which includes a patch change that preserves existing .assetsignore files in a project's PUBLIC_DIR during build output. Prev…

Zero Trust WARP Client - WARP client for Windows (version 2026.1.150.0)

Cloudflare has released a general availability (GA) update for the Windows WARP client, which includes minor fixes, improvements, and new features. The update addresses known issues, such as performan…

Zero Trust WARP Client - WARP client for macOS (version 2026.1.150.0)

Cloudflare has released a new general availability (GA) version of its macOS WARP client. This update includes minor fixes and improvements. The release is now available on the stable releases downloa…

Zero Trust WARP Client - WARP client for Linux (version 2026.1.150.0)

Cloudflare has released a new general availability (GA) version of its Linux WARP client, version 2025.8.779.0. This update includes minor fixes and improvements. Notably, the release introduces an up…

Stream - Stream live inputs can now be disabled and enabled

Cloudflare has introduced a new feature that allows users to disable live inputs, which will reject incoming RTMPS and SRT connections. This change provides users with more control over their live inp…

Durable Objects, Workers - deleteAll() now deletes Durable Object alarm

Cloudflare has updated the deleteAll() function for Durable Objects, now allowing it to delete alarms in addition to stored data for Workers with a compatibility date of 2026-02-24 or later. This chan…

Pipelines, Workers - Dropped event metrics, typed Pipelines bindings, and improved setup

Cloudflare has introduced three improvements to its Pipelines service. First, it has added a new dashboard and metrics to help users identify why streaming events get dropped, with detailed error mess…

Cloudflare has introduced several updates to its Pipelines, Stream, Sandbox SDK, Hyperdrive, Threat Events, and Code Mode products. The most significant change is the introduction of dropped event met

wrangler@4.68.0

The latest release of the Cloudflare Workers SDK, version 4.68.0, introduces two minor changes. First, it enables autoconfig for the wrangler deploy command by default, allowing users to disable it if…

create-cloudflare@2.64.3

The Cloudflare Workers SDK version 2.64.3 has been released with several dependency updates and minor improvements. Notably, a bug fix addresses an issue where the --variant flag was being ignored dur…

miniflare@4.20260302.0

The latest release of the Cloudflare Workers SDK includes several updates and optimizations. Notably, it refactors internal code to leverage capnweb's native ReadableStream support for remote Media an…

wrangler@4.67.1

The latest release of the Cloudflare Workers SDK, version 4.67.1, introduces several updates and optimizations. Notably, it adds a warning about limited support for projects inside workspaces, refacto…

Cloudflare One is the first SASE offering modern post-quantum encryption across the full platform

Cloudflare has launched the industry's first cloud-native post-quantum Secure Web Gateway (SWG) and Zero Trust solution as part of its Cloudflare One SASE platform. This update includes support for po…

Saved views for Threat Events

Cloudflare has introduced a new feature called 'Saved views for Threat Events,' which allows users to create, save, and share custom filtered views of the threat landscape. This update is designed to …

Hyperdrive no longer caches queries using STABLE PostgreSQL functions

Cloudflare's Hyperdrive has updated its caching behavior to treat queries containing PostgreSQL STABLE functions as uncacheable, in addition to VOLATILE functions. Previously, STABLE functions like NO…

Cloudflare Becomes the First and Only SASE Platform to Support Modern Post-Quantum Encryption

Cloudflare has become the first and only Secure Access Service Edge (SASE) platform to integrate modern post-quantum (PQ) encryption across its entire ecosystem, including Zero Trust access, Wide-Area…

Backup and restore API for Sandbox SDK

Cloudflare introduced a new Backup and Restore API for its Sandbox SDK, enabling developers to create and restore point-in-time snapshots of directories in seconds. The `createBackup()` and `restoreBa…

Cloudflare outage on February 20, 2026

On February 20, 2026, Cloudflare experienced a service outage affecting customers using its Bring Your Own IP (BYOIP) service. The outage, lasting 6 hours and 7 minutes, was caused by an unintentional…

Code Mode: give agents an entire API in 1,000 tokens

Cloudflare has introduced a new Model Context Protocol (MCP) server for its entire API, leveraging a technique called Code Mode to significantly reduce the number of tokens used in AI agent interactio…

@cloudflare/codemode v0.1.0: a new runtime agnostic modular architecture

Cloudflare has rewritten its Code Mode SDK into a modular, runtime-agnostic architecture with the release of @cloudflare/codemode v0.1.0. The update introduces a new Executor interface and a prebuilt …

Manage Cloudflare Tunnel directly from the main Cloudflare Dashboard

Cloudflare has integrated Cloudflare Tunnel management into its main Cloudflare Dashboard, allowing developers to create, configure, and monitor Tunnels for public applications, Workers VPC, and Load …

DEX Supports EU Customer Metadata Boundary

Cloudflare's Digital Experience Monitoring (DEX) now fully supports the EU Customer Metadata Boundary (CMB). This update ensures that DEX logs are not stored outside the EU when the CMB setting is con…

Cloudflare and Mastercard Partner to Extend Comprehensive Cyber Defense Across Critical Infrastructure and Small Businesses

Cloudflare and Mastercard announced a strategic partnership on February 17, 2026, to develop integrated cybersecurity tools aimed at protecting small businesses, critical infrastructure, and governmen…

Shedding old code with ecdysis: graceful restarts for Rust services at Cloudflare

Cloudflare has open-sourced ecdysis, a Rust library designed for graceful process restarts that ensures zero-downtime upgrades across critical Rust infrastructure. This library has been in production …

Introducing Markdown for Agents

Cloudflare has introduced a new feature called 'Markdown for Agents' that allows AI systems to request and receive content in Markdown format directly from the source, bypassing the need for HTML to M…

Interactive browser terminals in Sandboxes

Cloudflare has introduced PTY (pseudo-terminal) support in its Sandbox SDK, enabling browser-based terminal interfaces for sandboxed environments. The update allows WebSocket connections to container …

2025 Q4 DDoS threat report: A record-setting 31.4 Tbps attack caps a year of massive DDoS assaults

The fourth quarter of 2025 saw an unprecedented surge in DDoS attacks, with the Aisuru-Kimwolf botnet launching hyper-volumetric HTTP DDoS attacks exceeding 200 million requests per second, targeting …

Overview forEastern Asia

Cloudflare Radar has introduced new tools for monitoring the adoption of post-quantum (PQ) encryption, KT logs for messaging, and ASPA routing records. These tools aim to track the internet's shift to…

Overview forAfrican Union

Cloudflare Radar has introduced new tools to monitor the adoption of post-quantum (PQ) encryption, keep track of key transparency (KT) logs for messaging, and analyze Autonomous System Provider Author…

Overview forEuropean Union

Cloudflare Radar has introduced new tools to monitor the adoption of post-quantum (PQ) encryption, keep track of KT logs for messaging, and observe ASPA routing records. These tools are designed to he…

Overview forMiddle East

Cloudflare Radar has introduced new tools for monitoring the adoption of post-quantum (PQ) encryption, KT logs for messaging, and ASPA routing records. These tools are designed to track the internet's…

Improve global upload performance with R2 Local Uploads

Cloudflare has launched Local Uploads for R2 in open beta, a feature designed to significantly improve upload speeds and global data accessibility. Local Uploads writes object data to a storage locati…

Cloudflare Radar Adds Tools for Monitoring Post-Quantum Adoption and Routing Security

Cloudflare Radar has introduced new monitoring tools to track the internet’s transition toward enhanced security standards, specifically focusing on post-quantum (PQ) cryptography adoption, Key Transp…