What Cloudflare shipped in March 2026

Cloudflare R2

Cloudflare R2 is an object storage solution designed to reduce costs for developers by eliminating egress bandwidth fees, a common expense in traditional cloud storage services. The platform supports …

Introducing Programmable Flow Protection: custom DDoS mitigation logic for Magic Transit customers

Cloudflare has introduced Programmable Flow Protection, a new system enabling Magic Transit Enterprise customers to implement custom DDoS mitigation logic for proprietary UDP-based protocols. This add…

Internal DNS - now in open beta

Cloudflare has announced the open beta release of Internal DNS, a new feature now available to all Enterprise customers using Gateway. The service is bundled with Cloudflare Gateway and accessible to …

Cloudflare Client-Side Security: smarter detection, now open to everyone

Cloudflare has announced significant enhancements to its Client-Side Security offerings, making advanced threat detection accessible to a broader audience without requiring sales engagement. The most …

WAF Release - 2026-03-30

Cloudflare has released a critical update to its Web Application Firewall (WAF) managed rulesets, introducing new detections for high-severity vulnerabilities. The update addresses a critical authenti…

How we use Abstract Syntax Trees (ASTs) to turn Workflows code into visual diagrams

Cloudflare has introduced visual workflow diagrams for its Workflows product, enabling developers to see a graphical representation of their workflows directly in the Cloudflare dashboard. This change…

New RFC 9440 mTLS certificate fields in Workers

Cloudflare has introduced four new fields in the `request.cf.tlsClientAuth` object for Workers to simplify forwarding mutual TLS (mTLS) client certificate data to origins. The new fields—`certRFC9440`…

AI Security for Apps

Cloudflare has introduced AI Security for Apps, a new capability for its Web Application Firewall (WAF) designed to address LLM-specific threats such as prompt injection attacks, PII exposure in promp…

A one-line Kubernetes fix that saved 600 hours a year

Cloudflare resolved a critical performance bottleneck in its Atlantis-based Terraform infrastructure by implementing a one-line Kubernetes configuration change, reclaiming approximately 600 hours of e…

Easily connect Containers and Sandboxes to Workers

Cloudflare has introduced outbound Workers for Containers and Sandboxes, enabling direct HTTP-based communication between these environments and Workers bindings like KV and R2. This change allows dev…

Cloudflare Introduces Major Platform Enhancements Across Workers, Radar, and Security

Cloudflare has introduced several significant updates across its platform, primarily focused on enhancing developer experience, security, and operational flexibility. The most impactful change is the …

Cloudflare Introduces Major Enhancements to Workers, Containers, Security, and Observability

Cloudflare has introduced several significant updates across its platform, primarily focused on enhancing developer experience, security, and operational flexibility. The most impactful change is the …

URL Scanner improvements on Cloudflare Radar

Cloudflare Radar has introduced significant enhancements to its URL Scanner tool, including live screenshots, PDF and JSON export capabilities, and a redesigned summary layout. The updates now provide…

New `secrets` configuration property for Wrangler

Cloudflare has introduced a new `secrets` configuration property for its Wrangler tool, enabling developers to explicitly declare required secrets in their Worker configuration files. This change affe…

Logpush — More granular timestamps

Cloudflare has enhanced its Logpush service by introducing support for millisecond and nanosecond timestamp precision in log output. Users can now configure Logpush jobs to generate timestamps with ei…

New mTLS certificate fields for Transform Rules

Cloudflare has introduced four new fields in its Transform Rules phase to expose client certificate data in RFC 9440 format, simplifying the forwarding of mTLS certificate information to origin server…

Sandboxing AI agents, 100x faster

Cloudflare has launched Dynamic Worker Loader, an open-beta feature enabling developers to instantiate isolated JavaScript sandboxes on-demand for executing AI-generated code. This addresses a critica…

Use Docker Hub images with Containers

Cloudflare has enabled direct integration of Docker Hub images with its Containers service, eliminating the need to first push images to Cloudflare Registry. Users can now reference fully qualified Do…

Cache Response Rules launched by Cloudflare

Cloudflare has introduced Cache Response Rules, a new capability that allows users to modify how origin responses are handled before caching, without altering the origin server. This update enables co…

Gateway - OIDC Claims filtering now available in Gateway Firewall, Resolver, and Egress policies

Cloudflare Gateway has introduced a new capability to filter and apply policies based on OpenID Connect (OIDC) claims from identity providers. This update enables administrators to create fine-grained…

Interconnects moved to Connectors

Cloudflare has reorganized its dashboard navigation by relocating the **Interconnects** feature from a top-level page to the **Connectors > Interconnects** section. This change simplifies the dashboar…

Advanced WAF customization for AI Crawl Control blocks

Cloudflare has introduced advanced customization options for its AI Crawl Control WAF rules, allowing users to extend rules with custom user agents, path-based exceptions, and additional expression cl…

Dynamic Workers Now in Open Beta

Cloudflare has launched Dynamic Workers in open beta for all paid Workers users, enabling developers to spin up Workers at runtime for on-demand, secure, and sandboxed code execution in milliseconds. …

Launching Cloudflare’s Gen 13 servers: trading cache for cores for 2x edge compute performance

Cloudflare has launched its 13th generation server fleet, powered by AMD’s 5th Gen EPYC Turin processors, achieving up to 2x throughput gains compared to its previous Gen 12 servers. The key innovatio…

Inside Gen 13: how we built our most powerful server yet

Cloudflare has unveiled Gen 13, its next-generation server platform, marking a significant upgrade to its hardware infrastructure to support the company’s Rust-based FL2 software stack and meet growin…

@cloudflare/worker-bundler

Cloudflare has released an experimental package, `@cloudflare/worker-bundler`, designed to bundle and serve full-stack applications on Cloudflare’s Worker Loader binding (currently in closed beta). Th…

Cloudflare Agents SDK v0.8.0 Released with Readable State, Idempotent Schedules, and TypeScript Enhancements

Cloudflare has released Agents SDK v0.8.0, introducing several key improvements to its Agents framework for building AI-driven applications. The most significant change is the addition of a readable `…

Cloudflare Introduces Major Updates to AI Search, Agents SDK, and Workflows

Cloudflare has introduced several significant updates across its Workflows, Agents SDK, and AI Search products, all announced on March 23, 2026. The most impactful change is the expansion of AI Search…

Cloudflare Introduces Major AI Search and Developer Tool Updates

Cloudflare has introduced several significant updates across its Workflows, Agents SDK, and AI Search products, all announced on March 23, 2026. The most impactful change is the expansion of AI Search…

Cloudflare Introduces Major Updates to Workers, Agents SDK, and AI Search

Cloudflare has introduced several significant updates across its Workers, Agents SDK, AI Search, and related tooling, all announced on March 23, 2026. The most consequential change is the removal of t…

Cloudflare Introduces AI Search REST API, Agents SDK v0.8.0, and Workflow Lifecycle Methods

Cloudflare has introduced several significant updates to its AI and developer tooling ecosystem, primarily centered around AI Search, Agents SDK, and Workflows. The most impactful change is the launch…

R2 SQL now supports over 190 new functions, expressions, and complex types

Cloudflare has significantly expanded the SQL capabilities of its R2 SQL analytics query engine, now supporting over 190 new functions, expressions, and complex types. The update enables richer analyt…

Workflow instances now support pause(), resume(), restart(), and terminate() methods in local development

Cloudflare has introduced four new instance methods—pause(), resume(), restart(), and terminate()—for Workflow instances in local development via the `wrangler dev` tool. These methods enable develope…

WAF Release - 2026-03-23

Cloudflare has released updates to its Web Application Firewall (WAF) managed rulesets, effective March 23, 2026. The changes include enhancements to existing rules to improve detection resilience aga…

Cloudflare Announces AI Search REST API Updates, Workers AI Model Addition, and Networking Enhancements

Cloudflare has announced a series of updates to its AI Search, Workers AI, and networking products, with the most significant change being the migration recommendation from the existing AutoRAG API to…

Web Assets fields now available in GraphQL Analytics API

Cloudflare has introduced two new fields, `webAssetsOperationId` and `webAssetsLabelsManaged`, to its GraphQL Analytics API datasets `httpRequestsAdaptive` and `httpRequestsAdaptiveGroups`. These fiel…

AI Search UI snippets and MCP support

Cloudflare has introduced public endpoints, UI snippets, and MCP support for its AI Search product, enabling broader accessibility and integration. Public endpoints allow AI Search capabilities to be …

New AI Search REST API endpoints for /search and /chat/completions

Cloudflare has introduced new REST API endpoints for its AI Search product, compatible with OpenAI’s format, enabling developers to use familiar `messages` array structures for search and chat interac…

Cloudflare Introduces Idempotent Scheduling, AI Search REST API, and Workflow Lifecycle Methods

Cloudflare has introduced significant updates across its Workers, Agents SDK, and AI Search platforms, all announced on March 23, 2026. The most impactful change is the introduction of idempotent sche…

Cloudflare Introduces Major Updates to Agents SDK and AI Search Platform

Cloudflare has introduced significant updates across its AI and developer tooling ecosystems, with the most impactful changes centered on the Agents SDK v0.8.0, AI Search REST API enhancements, and ne…

Custom metadata filtering for AI Search

Cloudflare has introduced custom metadata filtering for its AI Search product, enabling users to define up to five custom metadata fields per instance with data types such as text, number, or boolean.…

Cloudflare Introduces Major Updates to Workflows, Agents SDK, and AI Search

Cloudflare has introduced several significant updates across its Workflows, Agents SDK, and AI Search products, all announced on March 23, 2026. The most impactful changes include new lifecycle manage…

Cloudflare Introduces Major AI Search and Developer Tooling Updates

Cloudflare has introduced several significant updates across its AI and developer tooling ecosystem, with the most impactful changes centered on AI Search capabilities, the Agents SDK, and local devel…

Observability for Workers VPC Services

Cloudflare has introduced an observability dashboard for Workers VPC Services, enabling users to monitor private network connections with granular metrics. The new **Metrics** tab provides per-service…

Cloudflare Tunnel, Cloudflare Tunnel for SASE - Stream logs from multiple replicas of Cloudflare Tunnel simultaneously

Cloudflare has enhanced its Tunnel log streaming capabilities in the Cloudflare One dashboard, enabling users to stream logs from multiple replicas of a single Cloudflare Tunnel simultaneously. Previo…

DNS Analytics for Customer Metadata Boundary set to EU region

Cloudflare has expanded DNS Analytics and DNS Firewall Analytics to support customers with the Customer Metadata Boundary (CMB) set to the EU region. This update enables users to query DNS analytics d…

Powering the agents: Workers AI now runs large models, starting with Kimi K2.5

Cloudflare has integrated frontier open-source AI models into its Workers AI platform, marking a significant shift in its AI infrastructure capabilities. The company now offers Moonshot AI’s Kimi K2.5…

Manage Cloudflare Tunnels with Wrangler

Cloudflare has introduced new Wrangler CLI commands enabling developers to manage Cloudflare Tunnels directly from the terminal, eliminating the need to leave their development environment. The update…

Cloudflare Announces Major Platform Updates Across Security, Developer Tools, and Media Processing

Cloudflare has announced several significant updates across its platform, primarily focused on security, developer experience, and new feature capabilities. The most critical change involves the depre…

Cloudflare Fundamentals - Service Key authentication deprecated

Cloudflare is deprecating Service Key authentication for its API, with the change taking effect on September 30, 2026. Users must transition to API Tokens, which offer finer-grained permissions, expir…

Moonshot AI Kimi K2.5 now available on Workers AI

Cloudflare has integrated Moonshot AI’s Kimi K2.5, a frontier-scale open-source model, into its Workers AI platform. The model features a 256k token context window, multi-turn tool calling, vision inp…

Hyperdrive now supports custom TLS/SSL certificates for MySQL

Cloudflare has expanded Hyperdrive’s MySQL support to include custom TLS/SSL certificate configurations, previously available only for PostgreSQL. Users can now enforce server certificate verification…

Cloudflare Introduces Multiple Platform Enhancements Across Security, Developer Tools, and Edge Compute

Cloudflare has introduced several significant updates across its platform, primarily focused on security, developer experience, and enhanced functionality for enterprise and developer users. The most …

Introducing Custom Regions for precision data control

Cloudflare has expanded its Regional Services product to enhance data sovereignty compliance while maintaining global-scale security. The most significant change is the introduction of Custom Regions,…

Worker execution timing field now available in Rules

Cloudflare has introduced a new field, `cf.timings.worker_msec`, in its Ruleset Engine to measure the wall-clock execution time of Cloudflare Workers in milliseconds. This field enables developers to …

Cloudflare Introduces SCIM Audit Logging, Logo Match Preview, and AI Gateway Privacy Controls

Cloudflare has introduced several strategic updates across its platform, primarily focused on enhancing security, developer experience, and AI-driven capabilities. The most significant change is the i…

Media Transformations binding for Workers

Cloudflare has introduced a new Media Transformations binding for Workers, enabling video processing directly within Cloudflare’s serverless environment. This change allows developers to transform vid…

Cloudflare Introduces SCIM Audit Logging, Logo Match Preview, and Media Transformations Binding for Workers

Cloudflare has introduced several significant updates across its product ecosystem, with changes spanning security, AI-driven services, developer tools, and infrastructure optimization. The most impac…

Cloudflare Introduces Custom Sandbox Modules, Media Transformations Binding, and Enhanced Security Features

Cloudflare has introduced several significant updates across its product ecosystem, primarily focused on enhancing developer capabilities, security monitoring, and AI-driven workflows. The most impact…

Cloudflare Introduces Zero-Dependency Main Entry Point and Multiple Feature Updates Across Platform

Cloudflare has introduced several significant updates across its platform, primarily focused on enhancing security, AI-driven workflows, and developer tooling. The most impactful change is the introdu…

Cloudflare Introduces SCIM Audit Logging, Media Transformations Binding, and AI Gateway Enhancements

Cloudflare has introduced several significant updates across its platform, primarily focused on enhancing security, developer experience, and AI-driven capabilities. The most impactful change is the i…

SCIM audit logging Support

Cloudflare has introduced SCIM (System for Cross-domain Identity Management) audit logging support, enabling organizations to track user and group provisioning events initiated by their identity provi…

Cloudflare Introduces SCIM Audit Logging, Real-Time Brand Protection, and Media Transformations for Workers

Cloudflare has introduced several significant updates across its platform, enhancing security, developer tools, and AI-driven capabilities. The most impactful changes include expanded audit logging fo…

Cloudflare Introduces SCIM Audit Logging, Real-Time Logo Match Preview, and Media Transformations Binding for Workers

Cloudflare has introduced several significant updates across its product ecosystem, primarily focused on enhancing security, AI-driven workflows, and developer tooling. The most impactful change is th…

Cloudflare Introduces SCIM Audit Logging, Logo Match Preview, and Media Transformations for Workers

Cloudflare has introduced several strategic updates across its platform, enhancing security, developer tools, and AI-driven capabilities. The most significant changes include expanded audit logging fo…

SCIM provisioning for Authentik is now Generally Available

Cloudflare has announced General Availability (GA) of SCIM (System for Cross-domain Identity Management) provisioning support for Authentik as an identity provider in its Cloudflare Dashboard. This en…

Security Center - Real-time logo match preview

Cloudflare has launched a new feature called Logo Match Preview as part of its Brand Protection dashboard. This tool enables users to preview and fine-tune their brand detection strategies for visual …

New Security Overview UI

Cloudflare has launched a new Security Overview UI for its Application Security customers, significantly enhancing how security insights are presented and prioritized. The update introduces criticalit…

@cloudflare/codemode v0.2.1 introduces MCP integration, zero-dependency entry point, and custom sandbox modules

Cloudflare released version 0.2.1 of its @cloudflare/codemode SDK, introducing three key changes that enhance developer flexibility and reduce dependency overhead. First, a new @cloudflare/codemode/mc…

AI Gateway - Log AI Gateway request metadata without storing payloads

Cloudflare has introduced a new header, `cf-aig-collect-log-payload`, for its AI Gateway product, allowing users to control whether request and response bodies are stored in logs. By default, the head…

Standing up for the open Internet: why we appealed Italy’s "Piracy Shield" fine

Cloudflare has escalated its legal battle against Italy’s Piracy Shield, a controversial regulatory scheme designed to combat copyright infringement by enabling private entities to block websites and …

Introducing The New Cloudflare One Client Interface

Cloudflare has introduced a new client interface for Cloudflare One. This update aims to streamline the user experience and improve accessibility for customers using Cloudflare's suite of security and…

OpenAI compatible API endpoints

Cloudflare's Workers AI now supports OpenAI-compatible API endpoints for text generation and text embedding models. This allows developers to use the same code they would for OpenAI commands but switc…

From legacy architecture to Cloudflare One

Cloudflare and CDW have partnered to address the challenges of migrating from legacy VPNs to a modern SASE (Secure Access Service Edge) architecture. The primary issue is the high risk associated with…

Return up to 50 query results with values or metadata

Cloudflare has increased the `topK` limit for Vectorize queries that return values or full metadata from 20 to 50. This change allows users to retrieve more matches in a single query response without …

The article provides guidance on configuring robots.txt and sitemaps for websites using Cloudflare's Browser Rendering service. It explains how to identify Browser Rendering requests through specific …

Transcription

Cloudflare's RealtimeKit now offers two transcription modes powered by Cloudflare Workers AI. The real-time mode uses Deepgram Nova-3 for live captions during meetings, while the post-meeting mode use…

Cloudflare Introduces SSH Access for Containers

Cloudflare has introduced SSH access for its Container instances, allowing users with write access to connect directly to their running containers using Wrangler. This feature is configured through th…

Cloudflare Radar is a hub that provides insights into global Internet traffic, attacks, and technology trends, powered by data from Cloudflare's global network and its 1.1.1.1 public DNS resolver. The

Configure Vulnerability Scanner via the API

Cloudflare has introduced a Vulnerability Scanner via its API, allowing users to test their API endpoints for vulnerabilities such as Broken Object Level Authorization (BOLA). This guide provides a st…

Announcing Cloudflare Account Abuse Protection: prevent fraudulent attacks from bots and humans

Cloudflare has introduced a new suite of fraud prevention capabilities called Account Abuse Protection, designed to combat account abuse from both automated and human sources. This suite includes feat…

Cloudflare Changelog Updates

Cloudflare has released several updates across its products. The most significant is the emergency WAF release on March 12, 2026, which introduces new detections for vulnerabilities in Ivanti Endpoint…

List Container instances with `wrangler containers instances`

Cloudflare has introduced a new command, `wrangler containers instances`, which allows users to list all instances for a given Container application. This command mirrors the instances view in the Clo…

Retry-After HTTP header for retryable 1xxx errors

Cloudflare has updated its 1xxx error responses to include a standard Retry-After HTTP header for retryable errors. This change affects all zones on all plans and allows HTTP clients to honor the serv…

SSH into running Container instances

Cloudflare has introduced SSH support for running Container instances, allowing users to connect via Wrangler for debugging, inspecting processes, or executing commands. This feature requires enabling…

Cloudflare Releases Emergency WAF Update

Cloudflare has released an emergency update to its Web Application Firewall (WAF) managed rulesets. The update introduces new detections for vulnerabilities in Ivanti Endpoint Manager Mobile, specific…

AI Security for Apps is now generally available

Cloudflare has announced the general availability of its AI Security for Apps, a solution designed to detect and mitigate threats to AI-powered applications. The product now includes new capabilities …

Slashing agent token costs by 98% with RFC 9457-compliant error responses

Cloudflare has introduced RFC 9457-compliant structured Markdown and JSON error payloads for AI agents, replacing traditional HTML error pages. This change affects AI agents navigating the web, making…

Proxy Endpoints Configuration Guide

Cloudflare has introduced proxy endpoints, allowing users to apply Gateway policies without installing a client on their devices. This is achieved by configuring a Proxy Auto-Configuration (PAC) file …

JSON responses and RFC 9457 support for Cloudflare 1xxx errors

Cloudflare has updated its error responses to include structured JSON for 1xxx errors when requested with specific Accept headers. This change follows RFC 9457, making it easier for HTTP clients to pa…

NVIDIA Nemotron 3 Super now available on Workers AI

Cloudflare has partnered with NVIDIA to make the NVIDIA Nemotron 3 Super model available on Workers AI. This hybrid Mixture-of-Experts (MoE) model features a hybrid Mamba-transformer architecture with…

Traffic in US New England | Cloudflare Radar

The webpage provides traffic trends and insights for the US New England region over the last seven days. It focuses on HTTP requests, including bots, offering data on internet activity in this specifi…

Traffic inUS Northeast

The content provided is a static page displaying traffic information for the US Northeast region. There is no article to summarize, and no changes, impacts, or competitive implications to report.

Zero Trust WARP Client - WARP client for macOS (version 2026.3.566.1)

Cloudflare has released a new beta version of its macOS WARP client, featuring a redesigned interface. The update changes the connectivity management from a toggle to a button and introduces a collaps…

Zero Trust WARP Client - WARP client for Windows (version 2026.3.566.1)

Cloudflare has released a new beta version of its Windows WARP client, featuring a redesigned interface. The update changes the connectivity management from a toggle to a button and introduces a colla…

Proxy endpoints

Cloudflare has introduced proxy endpoints, allowing customers to apply Gateway policies without installing a client on their devices. This is achieved by configuring a Proxy Auto-Configuration (PAC) f…

Cloudflare has introduced proxy endpoints, allowing users to apply Gateway policies without installing a client on their devices. This is achieved by configuring a Proxy Auto-Configuration (PAC) file

Cloudflare One

NONE

Building a security overview dashboard for actionable insights

Cloudflare has introduced a revamped Security Overview dashboard designed to help security teams transition from reactive monitoring to proactive control. The new dashboard addresses the challenge of …

Investigating multi-vector attacks in Log Explorer

Cloudflare has enhanced its Log Explorer tool to provide comprehensive security forensics by integrating 14 new datasets, offering 360-degree visibility into multi-vector attacks. This update includes…

User-side certificates update

Cloudflare has announced that the default user-side certificate for its Zero Trust platform will expire on February 2, 2025. This certificate is crucial for advanced security features like HTTPS traff…

Cloudflare API | Radar › Post Quantum

The content describes various API endpoints and methods related to Cloudflare's Radar service, which provides insights into internet traffic, attacks, and other network-related data. The most signific…

Translating risk insights into actionable protection: leveling up security posture with Cloudflare and Mastercard

Cloudflare is announcing a planned integration with Mastercard's RiskRecon attack surface intelligence capabilities, set to launch in the third quarter of 2026. This integration will enable continuous…

Browser Rendering - Crawl entire websites with a single API call using Browser Rendering

Cloudflare has introduced a new feature called the crawl endpoint in open beta, allowing users to crawl an entire website with a single API call. This feature is part of Browser Rendering and enables …

Audit Logs v2 - General Availability

Cloudflare has released Audit Logs v2 to general availability, affecting all customers. This update introduces a unified and standardized system for tracking user and system actions across approximate…

Cloudflare Introduces Nova-3 Speech-to-Text Model

Cloudflare has introduced the nova-3 model, a speech-to-text transcription service powered by Deepgram. This model supports a wide range of languages, including English, Spanish, French, German, Hindi…

Cloudflare Introduces Meeting Feature for RealtimeKit

Cloudflare has introduced a new feature called Meeting, which is a reusable virtual room for real-time interaction. This feature allows users to create persistent virtual rooms that can be joined by a…

Cloudflare Introduces Brand Protection Service

Cloudflare has introduced Brand Protection, a service designed to help companies proactively identify and mitigate domain impersonation and phishing attacks. This service monitors newly registered dom…

Cloudflare Introduces Browser Rendering Service

Cloudflare has introduced Browser Rendering, a service that allows developers to control headless Chrome instances on Cloudflare's global network. This service enables automation, web scraping, testin…

Cloudflare Introduces REST API for Browser Rendering

Cloudflare has introduced a REST API for browser rendering, offering endpoints for common browser actions such as capturing screenshots, extracting HTML content, generating PDFs, and more. This API pr…

Workers Bindings

Cloudflare has introduced Workers Bindings, a feature that allows developers to execute advanced browser rendering scripts within Cloudflare Workers. This capability provides flexibility to automate a…

Cloudflare Browser Rendering Limits

Cloudflare has outlined the limits associated with its Browser Rendering service, which are determined by the user's Cloudflare Workers plan. For users on the Workers Free plan, the limits include 10 …

Cloudflare One is a cloud security platform that replaces legacy perimeters with Cloudflare's global network, offering a unified control plane for security and networking. It consolidates various secu

Policies

Cloudflare Access policies determine who can reach an application by configuring actions and rules. Actions include Allow, Block, Bypass, and Service Auth. Allow policies grant access based on criteri…

Active defense: introducing a stateful vulnerability scanner for APIs

Cloudflare has launched the beta of its Web and API Vulnerability Scanner, initially focusing on Broken Object Level Authorization (BOLA) vulnerabilities, which are among the most pervasive and diffic…

Fixing request smuggling vulnerabilities in Pingora OSS deployments

Cloudflare recently disclosed and patched three HTTP/1.x request smuggling vulnerabilities (CVE-2026-2833, CVE-2026-2835, and CVE-2026-2836) in the Pingora open-source framework when used as an ingres…

Cloudflare 2026 Threat Intelligence Report: Nation-State Actors, Cybercriminals Shift from ‘Breaking In’ to ‘Logging In’

AI年代：AI普及 港DDoS攻擊全球第二嚴重

Cloudflare Introduces /links Endpoint in Browser Rendering API

Cloudflare has introduced a new /links endpoint in its Browser Rendering API, which allows users to retrieve all links from a webpage, including hidden ones. This feature can be used for various purpo…

Complexity is a choice. SASE migrations shouldn’t take years.

Cloudflare is highlighting how its partners are accelerating the migration to zero trust architecture using Cloudflare One, their agile SASE platform. Traditionally, migrating to a zero trust architec…

New MCP Portal Logs dataset and new fields across multiple Logpush datasets in Cloudflare Logs

Cloudflare has introduced a new MCP Portal Logs dataset and added new fields to multiple Logpush datasets in Cloudflare Logs. The MCP Portal Logs dataset includes fields such as ClientCountry, ClientI…

New Vulnerability Scanner for API Shield

Cloudflare has introduced an Open Beta of the Web and API Vulnerability Scanner for API Shield customers. This stateful Dynamic Application Security Testing (DAST) platform is designed to proactively …

Network Quality Test

The Cloudflare Speed Test is a tool that measures network quality. It may use up to 200MB of data and shares the user's IP address with Cloudflare, which is processed according to their privacy policy…

Cloudflare Introduces Tail Workers for Enhanced Observability

Cloudflare has introduced Tail Workers, a feature that allows customers on the Workers Paid and Enterprise tiers to track and log the execution of other Workers, known as producer Workers. Tail Worker…

Data Explorer

The content describes a data explorer tool that allows users to filter network traffic product types. It includes an AI assistant feature that can provide information upon request. The tool seems to b…

Cloudflare AI Gateway Launch

Cloudflare has introduced AI Gateway, a new product that provides visibility and control over AI applications. By connecting apps to AI Gateway, users can gather insights through analytics and logging…

Cloudflare Introduces /content Endpoint for Fetching Rendered HTML

Cloudflare has introduced a new /content endpoint in its Browser Rendering API that allows users to fetch the fully rendered HTML of a webpage, including the head section, after JavaScript execution. …

Cloudflare Introduces /pdf Endpoint for Browser Rendering API

Cloudflare has introduced a new /pdf endpoint in its Browser Rendering API, which allows users to generate PDFs from webpages or custom HTML using Cloudflare's headless browser rendering service. This…

Cloudflare Introduces /screenshot Endpoint in Browser Rendering API

Cloudflare has introduced a new /screenshot endpoint in their Browser Rendering API. This endpoint allows users to capture screenshots of fully rendered webpages by processing their HTML and JavaScrip…

Cloudflare Introduces /markdown Endpoint for Browser Rendering API

Cloudflare has introduced a new /markdown endpoint in its Browser Rendering API that retrieves a webpage's content and converts it into Markdown format. Users can specify a URL or provide raw HTML to …

Cloudflare Introduces /snapshot Endpoint in Browser Rendering API

Cloudflare has introduced a new /snapshot endpoint in its Browser Rendering API that captures both the HTML content and a screenshot of a webpage in a single request. This endpoint returns the HTML as…

Cloudflare Introduces /scrape Endpoint for Web Scraping

Cloudflare has introduced a new /scrape endpoint in its Browser Rendering API, which allows users to extract structured data from specific elements on a webpage. This endpoint returns details such as …

/json - Capture structured data using AI

Cloudflare has introduced a new /json endpoint that extracts structured data from webpages using AI. This endpoint allows users to specify the expected output through either a prompt or a JSON schema,…

From the endpoint to the prompt: a unified data security vision in Cloudflare One

Cloudflare has expanded its data security vision within Cloudflare One to provide unified data security across various enterprise surfaces, including SaaS applications, endpoints, remote access, and A…

Cloudflare Launches Agents SDK for Building Stateful AI Agents

Cloudflare has introduced the Agents SDK, a TypeScript class designed to enable developers to build stateful AI agents. Unlike stateless AI applications, these agents can remember conversations, act o…

Radar - Region Filtering, AS Traffic Volume, and Navigation Improvements on Cloudflare Radar

Cloudflare Radar has introduced several new features to enhance platform flexibility and usability. The most significant update is the addition of region filtering, which allows users to filter locati…

Cloudflare has introduced several updates across its platform. The most significant change is the addition of retry attempt numbers in Workflows, which allows developers to access the current retry at

Workflows now supports step context in production & local development

Cloudflare has introduced step context support in production and local development for its Workflows feature. This update allows developers to access the current retry attempt number for each step in …

Real-time transcription in RealtimeKit now supports 10 languages with regional variants

Cloudflare's RealtimeKit now supports real-time transcription in 10 languages with regional variants, powered by Deepgram Nova-3 on Workers AI. This update allows transcription to run entirely on Clou…

Cloudflare has introduced several updates across its platforms. The most significant change is the addition of retry attempt numbers in Workflows, which allows developers to access the current retry a

Cloudflare has introduced several updates across its platform. The Radar tool now supports region filtering, allowing users to filter by continents, geographic subregions, political regions, and US Ce

Cloudflare has introduced several updates across its platform. The Radar tool now includes region filtering, traffic volume by top autonomous systems and locations, and improved navigation. Brand Prot

Cloudflare has introduced several updates across its platforms. The Radar service now includes region filtering, traffic volume by top autonomous systems and locations, and improved navigation. Brand

Dismiss and filter matches in Brand Protection

Cloudflare has introduced new triage controls for its Brand Protection service, allowing users to dismiss benign matches and toggle the visibility of past reviews. This update enables users to mark sp…

Cloudflare has introduced several updates across its platform. The most significant change is the addition of retry attempt numbers in Workflows, allowing developers to access which retry attempt is c

Ending the "silent drop": how Dynamic Path MTU Discovery makes the Cloudflare One Client more resilient

Cloudflare has introduced Dynamic Path MTU Discovery (PMTUD) in its Cloudflare One Client, addressing the 'PMTUD Black Hole' issue where networks fail to communicate packet size limits. This feature a…

Certifications and Compliance Resources | Cloudflare

Cloudflare provides resources and documentation on its adherence to industry-standard security compliance certifications and regulations. The company emphasizes its commitment to helping customers mai…

A QUICker SASE client: re-building Proxy Mode

Cloudflare has significantly improved the performance of its SASE (Secure Access Service Edge) proxy mode by rebuilding it from the ground up. The company has deprecated the use of WireGuard for proxy…

How Automatic Return Routing solves IP overlap

Cloudflare has introduced Automatic Return Routing (ARR) in closed beta, a feature designed to address IP address overlap issues in enterprise networks. This problem commonly arises in scenarios like …

Cloudflare has introduced proxy endpoints, allowing customers to apply Gateway policies without installing a client on devices. This is achieved by configuring a Proxy Auto-Configuration (PAC) file at

Search code, repositories, users, issues, pull requests...

Cloudflare has introduced Agents, which are persistent, stateful execution environments for agentic workloads, powered by Cloudflare Durable Objects. Each agent maintains its own state, storage, and l…

Deploy an existing project

Cloudflare has introduced automatic configuration for Wrangler, a tool that simplifies the deployment of existing projects to Cloudflare Workers. This feature allows developers to deploy projects with…

Client Certificate Device Posture Attribute

Cloudflare has introduced a new feature called Client Certificate device posture attribute, which checks if a device has a valid client certificate signed by a trusted certificate. This feature is ava…

SQLite-backed Durable Object Storage

The SQLite-backed Durable Object Storage API allows Durable Objects to access transactional and strongly consistent storage. This API is private to each Durable Object instance and cannot be accessed …

Always-on detections: eliminating the WAF “log versus block” trade-off

Cloudflare has introduced Attack Signature Detection, a new feature that provides complete visibility into every signature match without sacrificing protection or performance. This feature inspects ev…

Mind the gap: new tools for continuous enforcement from boot to login

Cloudflare has introduced two new tools in its SASE toolbox to enhance remote access security: mandatory authentication and Cloudflare's own multi-factor authentication (MFA). Mandatory authentication…

Connect to RDP in a browser

Cloudflare has introduced a feature that allows users to connect to an RDP (Remote Desktop Protocol) server directly through a web browser without the need to install an RDP client or the WARP client …

Stop reacting to breaches and start preventing them with User Risk Scoring

Cloudflare has enhanced its Cloudflare One platform with adaptive access capabilities, incorporating user risk scoring into zero trust network access (ZTNA) policies. This update allows organizations …

Defeating the deepfake: stopping laptop farms and insider threats

Cloudflare has partnered with Nametag to enhance its Cloudflare One SASE platform with identity-verified onboarding and continuous identity assurance. This collaboration aims to address the growing th…

Moving from license plates to badges: the Gateway Authorization Proxy

Cloudflare has introduced the Gateway Authorization Proxy and Proxy Auto-Configuration (PAC) File Hosting to address the challenge of protecting unmanaged devices. This solution moves identity verific…

Cloudflare Introduces File Watching Feature in Sandbox API

Cloudflare has introduced a new file-watching feature in its Sandbox API, allowing developers to monitor filesystem changes in real-time using Linux's native inotify system. The `watch()` method retur…

Cloudflare has announced several updates across its platform. The Browser Rendering service has increased its REST API request rate limit from 3 to 10 requests per second for Workers Paid plans, allow

Browser Rendering: 3x higher REST API request rate

Cloudflare has increased the REST API rate limit for Browser Rendering from 3 to 10 requests per second for Workers Paid plans. This change allows users to perform common browser tasks more efficientl…

New conversion options for Markdown Conversion

Cloudflare has introduced new conversion options for its Markdown Conversion service, allowing users to customize how images, HTML, and PDFs are processed. Users can now set the language for AI-genera…

User risk score selector in Access policies

Cloudflare has introduced a new feature that allows users to incorporate user risk scores into their Access policies. This update enables administrators to create policies that respond to user behavio…

Changelog

Cloudflare has introduced several updates across its platform. The Gateway Authorization Proxy and hosted PAC files are now in open beta, replacing IP-based authorization with Cloudflare Access authen…

2026 03 04 gateway authorization proxy open beta

Cloudflare has launched an open beta for Gateway Authorization Proxy and hosted PAC files across all plan types. This update replaces static IP-based authorization with Cloudflare Access authenticatio…

Cloudflare Introduces Traffic Policies for Enhanced Internet Traffic Control

Cloudflare has introduced traffic policies within its Gateway service, which acts as a Secure Web Gateway to control and filter internet traffic for organizations. These policies inspect traffic at di…

Cloudflare Introduces Task Scheduling in Agents API

Cloudflare has introduced a new feature for scheduling tasks within their Agents API. This feature allows users to schedule tasks to run at specific times, with delays, or on recurring schedules using…

AI and Deepfakes Supercharge Sophisticated Cyber-Attacks, Says Cloudflare

Cloudflare’s 2026 Threat Report reveals AI tools have become a 'force multiplier' for cybercriminals, enabling rapid, large-scale attacks like phishing, malware development, and network mapping. Deepf…

Evolving Cloudflare’s Threat Intelligence Platform: actionable, scalable, and ETL-less

Cloudflare has launched a new Threat Intelligence Platform (TIP) designed to address the 'data gravity' problem in cybersecurity. The platform centralizes and organizes threat data, eliminating the ne…

Introducing the 2026 Cloudflare Threat Report

Cloudflare's inaugural 2026 Threat Report highlights a significant shift in the cyber threat landscape, moving away from brute force attacks to high-trust exploitation. This evolution is driven by a n…

TIME100 AI 2025

Cloudflare CEO Matthew Prince was ranked #1 on TIME’s TIME100 AI 2025 list, highlighting his leadership in AI innovation. The company has also made significant strides in cybersecurity, releasing its …

The content describes a set of libraries and tools for Python Workers, specifically focusing on Pywrangler, a CLI tool for managing vendored packages in a Python Workers project. It provides installat

How Cloudy translates complex security into human action

Cloudflare has introduced Cloudy, an LLM-powered explanation layer integrated into Cloudflare One, designed to translate complex machine learning outputs into human-readable guidance for security team…

From reactive to proactive: closing the phishing gap with LLMs

Cloudflare has integrated Large Language Models (LLMs) into their email security tools to proactively identify and mitigate phishing threats, particularly those mimicking sales outreach. Traditionally…

See risk, fix risk: introducing Remediation in Cloudflare CASB

Cloudflare has introduced a significant update to its Cloud Access Security Broker (CASB) product, adding a new remediation feature that allows customers to fix risky file-sharing issues directly from…

Workflows step limit increased to 25,000 steps per instance

Cloudflare has increased the step limit for Workflow instances from 1,024 to 10,000 by default, with a configurable maximum of 25,000 steps. This change allows for more complex and long-running execut…

Cloudflare has announced several updates to its platform. The Workflows step limit for Workers Paid has been increased to 25,000 steps per instance, up from the previous limit of 1,024 steps. This cha

Real-time file watching in Sandboxes

Cloudflare has introduced real-time file watching in Sandboxes, allowing developers to monitor filesystem changes such as create, modify, delete, and move operations. This feature is enabled through t…

Network Quality Test on Cloudflare Radar

Cloudflare has introduced a new Network Quality Test page on its Radar platform. This tool measures Internet connection quality and performance, providing users with details such as IP address, server…

Cloudflare 2026 Threat Intelligence Report: Nation-State Actors and Cybercriminals Shift from 'Breaking In' to 'Logging In'

Cloudflare’s inaugural 2026 Threat Intelligence Report reveals a seismic shift in cyberattack methodologies, where threat actors—including nation-state groups and cybercriminals—are increasingly bypas…

Cloudflare Launches Containers Beta

Cloudflare has introduced a beta version of Containers, a feature that allows developers to run code in any programming language and runtime as part of apps built on Workers. This service is available…

Cloudflare Introduces Backup Feature for Sandbox Environment

Cloudflare has introduced a new backup feature for its Sandbox environment, allowing users to create point-in-time snapshots of sandbox directories and restore them using copy-on-write overlays. This …

The Cloudflare Web Application Firewall (WAF) offers automatic protection from vulnerabilities and allows users to create custom rules. It checks incoming web and API requests, filtering undesired tra

Cloudflare API Documentation for ASPA

The content provided is a documentation page for Cloudflare's API, specifically detailing the Radar subresource for ASPA (Autonomous System Provider Authorization) under the BGP (Border Gateway Protoc…

Commands

The provided content is a documentation page for Wrangler, a command-line tool used to manage Cloudflare Workers. It outlines various commands and their functionalities, including commands for managin…

Cloudflare Launches Hyperdrive for Global Database Acceleration

Cloudflare has introduced Hyperdrive, a service designed to accelerate database queries globally for Cloudflare Workers users. This service allows users to turn their existing regional databases into …

Cloudflare Launches AI Gateway Service

Cloudflare has introduced a new AI Gateway service that allows users to create and manage AI gateways through their dashboard or API. The service supports multiple AI providers, including OpenAI, Anth…

Beyond the blank slate: how Cloudflare accelerates your Zero Trust journey

Cloudflare has introduced Project Helix, a new initiative aimed at simplifying the onboarding process for its Cloudflare One SASE platform. The project addresses the complexity of configuring the plat…

The truly programmable SASE platform

Cloudflare has enhanced its Cloudflare One SASE platform to offer deeper programmability, allowing customers to customize security and networking policies in real-time. The platform's programmability …

Modernizing with agile SASE: a Cloudflare One blog takeover

Cloudflare is introducing innovations to its Cloudflare One platform, aiming to modernize network security with an agile and composable SASE (Secure Access Service Edge) architecture. The company high…

Agents SDK v0.7.0: Observability rewrite, keepAlive, and waitForMcpConnections

Cloudflare has released version 0.7.0 of its Agents SDK, introducing significant changes to observability, durability, and MCP connection handling. The observability system has been completely rewritt…

Copy Cloudflare One resources as JSON or POST requests

Cloudflare has introduced a new feature allowing users to copy Cloudflare One resources as JSON or ready-to-use API POST requests directly from the dashboard. This enhancement simplifies the transitio…

WAF Release - 2026-03-02

Cloudflare's WAF release on March 2, 2026, introduces new detections for vulnerabilities in SmarterTools SmarterMail, specifically CVE-2025-52691 and CVE-2026-23760. The first vulnerability allows arb…

AI Gateway now automatically creates a gateway for you on your first request

Cloudflare's AI Gateway now automatically creates a default gateway for users on their first request, eliminating the need to set one up through the dashboard or API. This change affects users who uti…

Cloudflare's Origin Cache Control Feature

Cloudflare's Origin Cache Control feature, enabled by default for Free, Pro, and Business customers, ensures that Cloudflare strictly respects Cache-Control directives from the origin server. Enterpri…