What Cloudflare shipped in April 2026

Cloudflare expands Radar API with origins tracking and performance metrics

Cloudflare introduced new Radar API endpoints to list origins by region, retrieve origin details, and analyze time-series metrics (e.g., connection failures, requests) for major cloud providers like A…

Cloudflare R2 introduces enhanced object lifecycle management with storage class transitions

Cloudflare R2 now supports configurable object lifecycle rules to automate retention periods and storage class transitions. Users can set rules to delete objects after a set duration or transition the…

Cloudflare Hyperdrive adds Workers VPC support for private database connections

Cloudflare Hyperdrive now supports connecting to private databases using Workers VPC, eliminating the need for Cloudflare Access or service tokens. Users create a TCP VPC Service pointing to their dat…

Post-quantum encryption for Cloudflare IPsec is generally available

Cloudflare advanced its post-quantum security timeline to 2029 and launched generally available post-quantum encryption in its IPsec WAN service using hybrid ML-KEM (FIPS 203). The implementation inte…

Agents can now create Cloudflare accounts, buy domains, and deploy

Cloudflare and Stripe introduced a new protocol allowing coding agents to autonomously provision Cloudflare accounts, domains, and deploy apps without human intervention. The integration leverages Str…

Cloudflare expands DEX synthetic tests with log export and rule-based controls

Cloudflare enhanced its Digital Experience Monitoring (DEX) synthetic tests in Cloudflare One, allowing users to export application test logs via Logpush to R2, SIEM tools, or third-party storage beyo…

Cloudflare expands predefined DLP profiles with new detection entries

Cloudflare added new predefined Data Loss Prevention (DLP) profiles to Cloudflare One, including AI prompt protection, expanded financial data detection, and enhanced PII and identifier validations. T…

Cloudflare launches Secrets Store in open beta for secure secret management

Cloudflare introduced Secrets Store, a centralized service for encrypting and storing account-level secrets securely across its global data centers. Currently in open beta, it integrates with Cloudfla…

Cloudflare expands Data Loss Prevention with AI traffic scanning and SaaS integration

Cloudflare updated its Data Loss Prevention (DLP) feature to scan AI prompts and responses via AI Gateway, complement SaaS application scanning with CASB, and extend support to Zero Trust Free and Pay…

Cloudflare Queues enables guaranteed message delivery with Workers

Cloudflare launched Queues, a messaging service integrated with Workers that guarantees delivery, supports batching, retries, dead-letter queues, and pull consumers. Available on Free and Paid plans w…

Cloudflare expands GraphQL Analytics API for network and product data

Cloudflare introduced a GraphQL Analytics API enabling users to query HTTP request data, product-specific metrics (e.g., Firewall, Load Balancing), and packet-level data for Network Analytics users. T…

Cloudflare launches Version Management for Enterprise zones

Cloudflare introduced Version Management, an Enterprise-only feature enabling safe testing, deployment, and rollback of zone configuration changes. Users can create independent versions, deploy to sta…

Cloudflare Radar adds provider, region, and percentile views to Cloud Observatory connection metrics

Cloudflare’s Cloud Observatory now offers enhanced connection metric insights with provider-level, region-level, and percentile breakdowns for TCP/TLS handshake and response durations. Users can compa…

Cloudflare IPsec adds post-quantum key agreement with Cisco and Fortinet

Cloudflare IPsec now supports post-quantum key agreement with validated third-party devices, starting with Cisco and Fortinet. The feature uses ML-KEM hybrid key exchange (RFC 9370) alongside classica…

Cloudflare releases Go SDK v7.0.0 with breaking changes and new features

Cloudflare launched Go SDK v7.0.0, a major release introducing breaking changes to AI Search, Email Security, and Workers packages. The update removes deprecated metadata types, restructures path para…

Cloudflare Radar adds dark mode with theme selector

Cloudflare Radar now supports dark mode with a theme selector offering light, dark, and system settings. The theme applies across all Radar pages and embedded graphs, including shared links.

Cloudflare Web Analytics adds Navigation Type filtering and reporting

Cloudflare Web Analytics now includes Navigation Type reporting and filtering to track how users navigate pages and whether browser caching (including bfcache) is effective. This helps identify perfor…

Cloudflare DLP adds new predefined detection entries for credentials and financial data

Cloudflare introduced new predefined detection entries for its Data Loss Prevention (DLP) tool, expanding coverage for credential types, webhooks, addresses, tax identifiers, national IDs, financial d…

Cloudflare DLP adds Data Classification for sensitive content labeling

Cloudflare introduced Data Classification in its DLP product, enabling administrators to label and organize sensitive content using custom labels, templates, and reusable data classes. Classifications…

WAF - WAF Release - 2026-04-30 - Emergency

Cloudflare deployed an emergency WAF rule to block a critical cPanel & WHM authentication bypass (CVE-2026-41940) enabling unauthenticated administrative access. The flaw risks full server compromise …

Cloudflare R2 dashboard adds empty bucket and folder delete capabilities

Cloudflare’s R2 dashboard now lets users empty entire buckets or delete folders directly, eliminating the need for scripting or lifecycle rules. The feature streamlines bucket management by combining …

Cloudflare Python SDK v5.0.0 drops Python 3.8, adds 11 new services and aiohttp backend

Cloudflare released Python SDK v5.0.0, dropping Python 3.8 support in favor of 3.9+, adding 11 new API services (e.g., AI Search, Fraud, R2 Data Catalog), and introducing optional aiohttp backend for …

Cloudflare TypeScript SDK v6.0.0 released with major breaking changes

Cloudflare released TypeScript SDK v6.0.0, a major update introducing 11 new API resources, 179 return type changes, and 17 removed endpoints. The release includes breaking changes to method signature…

Save the date for Cloudflare Connect San Francisco 2026

What's New at Cloudflare

Cloudflare launches Digital Experience Monitoring (DEX) for Zero Trust

Cloudflare introduced Digital Experience Monitoring (DEX) to provide visibility into device, network, and application performance for Zero Trust organizations. DEX is available on all Cloudflare Zero …

Cloudflare introduces enforce DNS-only account-level setting

Cloudflare launched an account-level 'enforce DNS-only' feature allowing users to bypass reverse proxy for all zones simultaneously via API. This removes Cloudflare protections (DDoS, WAF, caching) an…

Cloudflare Queues adds GraphQL-based metrics for backlog, concurrency, and operations

Cloudflare Queues now exposes granular metrics—backlog size, consumer concurrency, and message operations—via GraphQL Analytics API. Users can query real-time or aggregated data programmatically or th…

Cloudflare introduces Cache Response Rules for granular cache control

Cloudflare launched Cache Response Rules, enabling users to modify `Cache-Control` directives, cache tags, and strip headers like `ETag` or `Set-Cookie` from origin responses before caching. Rules app…

Cloudflare Hyperdrive now supports private databases via Workers VPC

Cloudflare added support for connecting Hyperdrive to private databases using Workers VPC, enabling secure, non-public internet access with TLS verification and reusable VPC services. Users can config…

Cloudflare adds bank account payments via Link at checkout

Cloudflare introduced Instant Bank Payments via Link, allowing US-based self-serve accounts to pay directly from bank accounts during checkout. The feature integrates with existing Link payment method…

Digital Experience Monitoring - Digital experience tests to authenticated resources and enhanced configuration

Cloudflare Digital Experience Tests now support testing applications protected by Cloudflare Access or third-party authentication, with secrets managed via Cloudflare Secret Store. Enhanced configurat…

Cloudflare Gateway Authorization Proxy and hosted PAC files reach GA

Cloudflare announced general availability of Gateway Authorization Proxy and hosted PAC files for all plan types. The new proxy endpoints use Cloudflare Access authentication to enforce identity-aware…

Shutdowns, power outages, and conflict: a review of Q1 2026 Internet disruptions

Q1 2026 saw a surge in government-directed internet shutdowns in Uganda, Iran, and the Republic of Congo, alongside disruptions from power outages, military strikes on cloud infrastructure in the Midd…

Queues - Realtime backlog metrics now available for Queues

Cloudflare Queues now provides realtime backlog metrics through its dashboard, REST API, JavaScript API, and GraphQL Analytics API. Three new fields and a metrics object are exposed after message cons…

Digital Experience Monitoring - Internet outage notifications for devices

Cloudflare’s Digital Experience (DEX) now shows dashboard alerts when Internet outages or traffic anomalies may impact a Cloudflare One Client device based on location or network. The data is sourced …

Cloudflare enables standalone DLP detection entry management

Cloudflare’s DLP now allows administrators to create, view, and manage detection entries as standalone objects outside of profiles. This change simplifies administration and enables reuse of detection…

Cloudflare adds predefined PII Record DLP profile to reduce false positives

Cloudflare introduced a new predefined Data Loss Prevention (DLP) profile that detects PII records containing at least three unique personal data types in close proximity, reducing false positives fro…

Cloudflare removes dropdown for direct Support portal access

Cloudflare updated its dashboard to let users access the Support Portal directly from the global navigation header, bypassing the previous dropdown menu. The change aims to reduce friction when seekin…

Cloudflare adds speed tests to Cloudflare One Client for network diagnostics

Cloudflare introduced a new speed test feature in its Cloudflare One Client, allowing IT teams to remotely measure internet speed, latency, and network quality metrics directly to Cloudflare's edge. T…

DNS - Account-level enforce DNS-only

Cloudflare launched an account-level setting called enforce_dns_only that disables reverse proxy across all zones, routing traffic directly to origin IPs. This removes all proxy-based protections like…

Cache - Cache Response Rules now support zone versioning

Cloudflare now supports versioning for Cache Response Rules, allowing teams to test response-phase cache settings in staging before promoting them to production. Previously, these rules applied global…

Cloudflare adds structured 5xx error responses with RFC 9457 compliance

Cloudflare now returns structured JSON and Markdown responses for its generated 5xx errors (500, 502, 504, 520-526), aligning with RFC 9457 and including Retry-After headers for retryable codes. The u…

Cloudflare launches Resource Tagging in public beta

Cloudflare introduced Resource Tagging in public beta, allowing users to attach custom key-value metadata to a wide range of resources (e.g., zones, Workers, R2 buckets) and query them with advanced f…

WAF - WAF Release - 2026-04-27

Cloudflare released updates to its WAF managed rules, refining SQL injection (SQLi) detection by merging and renaming existing rules to include '- Body' suffixes. The changes aim to enhance attack pat…

Security Center - Unified workspace for Brand Protection

Cloudflare introduced a unified investigation workspace in Brand Protection to consolidate analyst workflows into a single view, replacing fragmented query-based navigation. The change streamlines por…

Cloudflare launches AI Security Suite for enterprise GenAI adoption

Cloudflare introduced the AI Security Suite, a unified platform to secure AI interactions across workforce tools and public-facing applications. It addresses shadow AI, model abuse, agent access, and …

Resource hub

10 Top Cybersecurity CEOs On AI’s Impact In 2026

In 2026, cybersecurity CEOs from 10 leading vendors warn that AI will intensify both attacks and defenses, with autonomous agents and AI-driven social engineering becoming dominant threats. Defenders …

Cloudflare expands phishing protection beyond email to SMS, social media, and collaboration apps

Cloudflare introduced a unified platform to detect and block phishing threats across email, SMS, social media, instant messaging, and collaboration apps using ML-powered analysis and Zero Trust servic…

Cloudflare promotes ZTNA as VPN replacement with SASE platform

Cloudflare is positioning its Zero Trust Network Access (ZTNA) service as a modern alternative to traditional VPNs, leveraging its SASE platform to improve security, performance, and user experience. …

Leadership

Cloudflare expands API SDK support with Go, TypeScript, and Python libraries

Cloudflare introduced official SDKs for Go, TypeScript, and Python to simplify API integration, complementing existing cURL examples. The libraries enable language-specific syntax for easier adoption …

Cloudflare expands Remote Browser Isolation for Zero Trust plans

Cloudflare introduced Remote Browser Isolation as an add-on for Zero Trust Pay-as-you-go and Enterprise plans, executing active webpage content in a secure isolated browser to protect against zero-day…

Terraform Registry

Apache Iceberg™

Cloudflare enables Network Session Logs for all on-ramps in Gateway

Cloudflare now generates Zero Trust Network Session Logs for all traffic proxied through Cloudflare Gateway, including previously unsupported on-ramps like proxy endpoints and Browser Isolation egress…

Cloudflare releases tf-migrate to automate Terraform v4 to v5 provider upgrades

Cloudflare launched tf-migrate, a CLI tool that automates migrating Terraform configurations from Provider v4 to v5 by handling resource renames, attribute transformations, and moved block generation.…

Immerse Minneapolis

Cloudflare announced Immerse, a roadshow event in Minneapolis on April 23, 2026, targeting security and IT leaders to discuss Zero Trust, SASE, DDoS, and AI modernization. The event highlights Cloudfl…

Cloudflare Go SDK v6.10.0 introduces breaking changes and new services

Cloudflare released Go SDK v6.10.0 with significant breaking changes driven by OpenAPI updates, including removals and restructurings across multiple services like AI Search, IAM, and Stream. New serv…

Audit Logs - Audit Logs v2 — Organization-level support

Cloudflare introduced organization-level audit logs in Audit Logs v2, allowing Org Admins to retrieve audit events for organization-level actions via the API. This update is separate from account-leve…

Cloudflare shifts to usage-based billing for multiple products

Cloudflare introduced usage-based billing for several products, shifting from prepaid flat fees to postpaid charges based on actual consumption during the previous billing period. This affects custome…

Making Rust Workers reliable: panic and abort recovery in wasm‑bindgen

Cloudflare announced comprehensive WebAssembly error recovery for Rust Workers, addressing fatal panics and aborts that previously poisoned Worker instances and caused cascading failures. The update i…

Cloudflare Immerse Montreal

Cloudflare announced Immerse, its premier roadshow event in Montreal on April 22, 2026, focused on application, security, and network modernization. The event targets security, IT, and digital leaders…

Cloudflare R2 Data Catalog adds automated table maintenance for Iceberg tables

Cloudflare introduced automated table maintenance for R2 Data Catalog, including compaction and snapshot expiration for Apache Iceberg tables stored in R2. Compaction combines small files into larger,…

R2 Data Catalog snapshot expiration now cleans unreferenced data files

Cloudflare’s R2 Data Catalog now automatically removes unreferenced data files during snapshot expiration, not just Iceberg metadata. Previously, only metadata files were cleaned up, leaving stale dat…

Cloudflare launches custom dashboards with 100+ GraphQL datasets and Log Explorer integration

Cloudflare made custom dashboards generally available to all customers, enabling personalized views using over 100 GraphQL datasets and raw Log Explorer data. Users can now consolidate metrics from mu…

Cloudflare Wrangler configuration updates: JSON support, automatic provisioning, and environment management

Cloudflare updated Wrangler’s configuration system to support both JSON (including JSONC) and TOML formats as of Wrangler v3.91.0, with JSONC recommended for new projects. The configuration file serve…

Cloudflare Logpush adds subrequest merging for Worker logs

Cloudflare introduced subrequest merging in Logpush, an opt-in feature that aggregates multiple log entries from Worker subrequests into a single parent request log line. By default, each subrequest g…

Cloudflare adds Hibernation WebSocket API for Durable Objects to reduce costs

Cloudflare introduced a Hibernation WebSocket API for Durable Objects, enabling WebSocket servers to hibernate when idle without disconnecting clients, reducing costs by avoiding billable duration cha…

Moving past bots vs. humans

Cloudflare argues that the traditional 'bots vs. humans' distinction is outdated as AI agents and automated clients increasingly mimic human behavior, disrupting the implicit balance between publisher…

Workflows - Additional step context and ReadableStream support now available in Workflows step.do()

Cloudflare Workflows now supports additional context in step.do() callbacks and allows returning ReadableStream for larger step outputs. The step.do() callback receives a context object with new prope…

Cloudflare launches Network session analytics dashboard for Zero Trust traffic visibility

Cloudflare introduced a Network session analytics dashboard in Cloudflare One to provide visibility into Zero Trust traffic patterns. The dashboard tracks session counts, bandwidth usage, connection i…

Logs - Logpush subrequest merging for HTTP requests

Cloudflare introduced subrequest merging in Logpush to consolidate multiple subrequest log entries into a single parent log record. Previously, each subrequest generated separate log lines, creating r…

Cloudflare WAF Release - 2026-04-21: New RCE and SQLi Detections, Rule Refinements

Cloudflare’s April 21, 2026 WAF release introduces new detections for critical vulnerabilities, including Apache ActiveMQ RCE (CVE-2026-34197) and Magento 2 unrestricted file uploads, both now blocked…

Cloudflare launches WAN-as-a-Service to replace MPLS with cloud-native networking

Cloudflare introduced Cloudflare WAN, a standalone WAN-as-a-Service (WANaaS) product replacing its Magic WAN offering. It connects data centers, offices, and cloud resources via Cloudflare’s global ne…

Cloudflare expands virtual network support for Zero Trust routing isolation

Cloudflare introduced virtual networks as private routing domains within accounts to isolate traffic between environments, partners, or applications. Each virtual network maintains separate routing ta…

Cloudflare unifies Container, Worker, and Durable Object logs in a single page

Cloudflare’s Container logs page now aggregates Worker and Durable Object logs alongside container logs in a single view. This change centralizes log data for containerized applications, enabling easi…

Cloudflare launches Billable Usage dashboard and Budget alerts for pay-as-you-go customers

Cloudflare introduced a Billable Usage dashboard and Budget alerts for pay-as-you-go customers, enabling daily cost monitoring and spend threshold notifications. The dashboard provides granular, invoi…

Cloudflare launches Network Overview page for unified network management

Cloudflare introduced a new Network Overview page in its dashboard, serving as a centralized hub for network security and connectivity products. Users can now connect resources via Cloudflare Tunnel, …

Workers - WebSocket binary messages now delivered as Blob by default

Cloudflare changed WebSocket binary frame delivery in Workers to default to Blob objects instead of ArrayBuffer, aligning with the WebSocket specification and browser behavior. This affects Workers wi…

kimi-k2.6

Cloudflare introduced Kimi K2.6, a 1-trillion parameter open-source AI model with a 262,144-token context window, supporting multi-turn tool calling, vision inputs, and structured outputs for agentic …

Cloudflare Workers AI bindings now available for Workers and Pages Functions

Cloudflare introduced Workers AI bindings, enabling developers to integrate AI models directly into Workers and Pages Functions via the Cloudflare Developer Platform. Bindings can be configured in the…

Cloudflare launches Tiered Cache to reduce origin load and latency

Cloudflare introduced Tiered Cache, a feature that reduces origin server requests by organizing its global data centers into a hierarchical topology. Lower-tier edge locations query upper-tier hubs be…

The AI engineering stack we built internally — on the platform we ship

Cloudflare revealed that 93% of its R&D organization (3,683 users) actively used internal AI coding tools over the last 30 days, processing 47.95 million AI requests and driving a 55% increase in merg…

Orchestrating AI Code Review at scale

Cloudflare built an AI-native code review system using OpenCode to address bottlenecks in engineering workflows. The system replaces manual reviews with up to seven specialized AI agents (security, pe…

Building the agentic cloud: everything we launched during Agents Week 2026

Cloudflare concluded its first Agents Week by unveiling a suite of new primitives and services designed to support the rise of AI agents as a primary workload. The company introduced compute environme…

Cloudflare Logpush adds Pipelines as a native destination for optimized log analytics

Cloudflare introduced native Pipelines as a Logpush destination, enabling event ingestion, SQL-based transformation, and delivery to R2 as Iceberg tables, Parquet, or JSON files. Logpush can now route…

Cloudflare R2 SQL limitations and best practices

Cloudflare released R2 SQL in open beta, a read-only SQL query engine for Cloudflare R2 object storage. The service supports basic SQL operations (SELECT, WHERE, GROUP BY, etc.) and 206 scalar/aggrega…

Moonshot AI Kimi K2.6 now available on Workers AI

Cloudflare added Moonshot AI’s Kimi K2.6 model to Workers AI, a 1T-parameter MoE model with 32B active parameters, 262.1k context window, vision, and agentic capabilities. It competes with GPT-5.4 and…

R2 SQL - R2 SQL adds JSON functions, EXPLAIN FORMAT JSON, and unpartitioned table support

Cloudflare added JSON query functions, EXPLAIN FORMAT JSON support, and unpartitioned Iceberg table querying to R2 SQL, its serverless analytics engine for Apache Iceberg tables in R2 Data Catalog. JS…

Logs, Pipelines - Cloudflare Pipelines as a Logpush destination

Cloudflare introduced a new Logpush destination option, allowing users to send logs directly to Pipelines for in-flight transformation and storage in R2 as Parquet files or Apache Iceberg tables manag…

Cloudflare launches Network session analytics dashboard in Cloudflare One

Cloudflare launched a Network session analytics dashboard in Cloudflare One on April 20, 2026, providing visibility into network traffic patterns including geographic distribution, session metrics, pr…

Cloudflare enhances AI agent support with new tools and features

Cloudflare introduced new AI-focused tools to improve website compatibility with AI agents and crawlers. The Agent Readiness score helps site owners assess how well their sites support AI agents, with…

Cloudflare launches AI Insights and Agent Readiness tools in Radar

Cloudflare introduced new AI-focused tools in Radar, including an Agent Readiness score to help site owners assess AI agent compatibility, shared compression dictionaries to improve page load times fo…

Cloudflare enhances AI agent support with Agent Readiness score and new features

Cloudflare introduced the Agent Readiness score to help website owners assess how well their sites support AI agents. The company also revealed support for shared compression dictionaries to improve p…

Cloudflare launches AI agent readiness summary API

Cloudflare introduced a new API endpoint `/radar/agent_readiness/summary/{dimension}` to provide AI agent readiness scores across scanned domains, grouped by specified dimensions like 'CHECK'. The API…

Cloudflare launches API to measure AI agent HTML-to-markdown reduction ratios

Cloudflare introduced a new API endpoint to retrieve the median HTML-to-markdown reduction ratio for AI agent requests over specified date ranges. The endpoint, `/radar/ai/markdown_for_agents/summary`…

Cloudflare launches Markdown for Agents to streamline AI content processing

Cloudflare introduced 'Markdown for Agents,' a feature enabling real-time HTML-to-Markdown conversion for AI systems via content negotiation headers. When AI agents request pages from Cloudflare-enabl…

Shared Dictionaries: compression that keeps up with the agentic web

Cloudflare announced support for shared compression dictionaries to reduce asset transfer sizes and improve page load speeds, particularly for returning users and slow connections. The technology comp…

Introducing Flagship: feature flags built for the age of AI

Cloudflare launched Flagship, a native feature flag service built on OpenFeature, designed to support AI-driven autonomous code deployment. Flagship enables AI agents to write, deploy, and roll out co…

Redirects for AI Training enforces canonical content

Cloudflare launched 'Redirects for AI Training,' a feature that enforces HTTP 301 redirects for verified AI training crawlers (e.g., GPTBot, ClaudeBot) to current content using existing canonical tags…

Unweight: how we compressed an LLM 22% without sacrificing quality

Cloudflare introduced Unweight, a lossless compression system for LLM model weights that reduces size by 15–22% without hardware changes, enabling faster and cheaper inference. By compressing only the…

Agents that remember: introducing Agent Memory

Cloudflare launched Agent Memory, a private beta managed service that provides persistent memory for AI agents by extracting, storing, and retrieving contextually relevant information without bloating…

Agents Week: network performance update

Cloudflare increased its share of the fastest network provider from 40% to 60% in the top 1,000 global networks by December 2025, measured via TCP connection time using Real User Measurements (RUM). T…

Cloudflare launches Redirects for AI Training to enforce canonical tags for AI crawlers

Cloudflare introduced Redirects for AI Training, a feature that enforces existing `<link rel="canonical">` tags as 301 redirects for verified AI training crawlers. When such crawlers request a page wi…

AI Crawl Control - Introducing Redirects for AI Training

Cloudflare now redirects verified AI training crawlers to canonical URLs when they request deprecated or duplicate pages. Enabled via AI Crawl Control, this feature uses existing canonical tags to iss…

Cloudflare’s Smart Tiered Cache now optimizes public cloud origins by region

Cloudflare introduced Smart Tiered Cache optimizations for public cloud origins, enabling higher cache HIT rates and reduced origin load by selecting optimal upper-tier data centers based on cloud reg…

Cloudflare launches Agent Readiness score to optimize websites for AI agents

Cloudflare introduced the Agent Readiness score, a tool to help website owners assess and improve their site’s compatibility with AI agents. The score evaluates four dimensions: discoverability (robot…

Cloudflare Radar adds AI Insights features for agent standards, Markdown savings, and response status tracking

Cloudflare Radar introduced three new AI Insights features: a widget tracking adoption of AI agent standards (filterable by domain and available via API), a savings gauge showing bandwidth/token reduc…

AI Crawl Control - Tools to prepare your site for the agentic Internet

Cloudflare introduced AI Crawl Control tools to optimize websites for AI agents in the 'agentic Internet.' The Content Format chart in the Metrics tab shows AI-requested content types versus origin-se…

Cloudflare migrates AI Search Workers bindings to new API

Cloudflare deprecated the legacy `env.AI.autorag()` binding for AI Search in favor of new `ai_search` and `ai_search_namespaces` bindings. The new bindings require updated Wrangler configurations, Typ…

Cloudflare launches hybrid search for AI Search

Cloudflare introduced hybrid search for its AI Search product, enabling parallel execution of vector and keyword search methods with merged results. The feature requires keyword search to be enabled a…

Cloudflare AI Search adds relevance boosting for custom result ranking

Cloudflare introduced relevance boosting for its AI Search product, allowing users to bias search results toward documents with specific metadata characteristics. The feature re-ranks retrieved result…

Cloudflare adds Artifacts Workers binding for repo operations

Cloudflare introduced an Artifacts Workers binding that enables direct repo operations (create, inspect, fork, delete) from Workers via a typed binding. Developers configure the binding in wrangler.js…

Cloudflare Artifacts adds Git protocol support for repository access

Cloudflare introduced Git protocol support for its Artifacts repositories, enabling standard Git-over-HTTPS operations like clone, fetch, pull, and push. Repositories are accessible via HTTPS remotes …

Cloudflare launches Rules Templates, Regionalized Tiered Cache, and Okta risk score integration

Cloudflare introduced three key updates: one-click Rules Templates for faster rule configuration, Regionalized Generic Tiered Cache to improve cache hit ratios by routing content consistently within r…

Cloudflare’s AI Platform: an inference layer designed for agents

Cloudflare launched AI Gateway and Workers AI as a unified inference layer, allowing developers to access over 70 models from 12+ providers (including OpenAI, Anthropic, Google, and others) through a …

Building the foundation for running extra-large language models

Cloudflare announced significant performance improvements to its Workers AI platform, including a 3x speed increase for Moonshot’s Kimi K2.5 model. The company introduced a disaggregated prefill-decod…

Deploy Postgres and MySQL databases with PlanetScale + Workers

Cloudflare will allow users to create and bill PlanetScale Postgres and MySQL databases directly from the Cloudflare dashboard and API starting next month, integrating billing into Cloudflare accounts…

AI Search: the search primitive for your agents

Cloudflare launched AI Search, a new plug-and-play search primitive for AI agents, replacing AutoRAG. It enables hybrid search combining vector and keyword (BM25) retrieval, built-in storage and vecto…

AI Search - AI Search instances now include built-in storage and namespace Workers Bindings

Cloudflare introduced significant changes to its AI Search service, including built-in storage and vector indexing for new instances, eliminating the need for external R2 buckets or data sources. New …

AI Search - AI Search now has hybrid search and relevance boosting

Cloudflare introduced hybrid search and relevance boosting for its AI Search product. Hybrid search merges vector-based semantic search with BM25 keyword search, allowing users to configure tokenizers…

Cloudflare And OpenAI Launch Agent Cloud For Enterprises

Cloudflare and OpenAI unveiled Agent Cloud, a platform for running autonomous AI agents at scale using lightweight isolates instead of containers. It integrates OpenAI’s GPT-5.4 and Codex models via C…

Cloudflare launches Email Address Obfuscation to block bot scraping

Cloudflare introduced Email Address Obfuscation, a feature that automatically hides email addresses on web pages from bots while keeping them visible and clickable for humans. The feature works by rep…

Cloudflare Email Service: now in public beta. Ready for your agents

Cloudflare launched Email Sending in public beta as part of its Email Service, enabling bidirectional email communication for agents. The service allows agents to receive, process, and reply to emails…

Cloudflare Launches Access App Launcher for Centralized Application Access

Cloudflare introduced the Access App Launcher, a centralized dashboard where users can open all authorized applications from a single interface. The feature is accessible via a unique team domain (e.g…

Cloudflare Introduces Independent MFA for Zero Trust Access

Cloudflare introduced Independent MFA, a feature allowing organizations to enforce multi-factor authentication (MFA) directly within its Zero Trust Access service without relying on third-party identi…

Cloudflare Artifacts enters private beta with Git-compatible storage

Cloudflare launched Artifacts in private beta, introducing a versioned filesystem with Git access for Workers, APIs, and Git-compatible workflows. The service enables creation of tens of millions of r…

Cloudflare Logpush Dataset Documentation Update

Cloudflare updated its Logpush dataset documentation to clarify field availability across log categories, subscription plans, and access methods. The most significant change is the explicit distinctio…

Cloudflare Expands Logpush Dataset with Firewall Events Fields

Cloudflare has expanded its Logpush dataset offerings to include detailed fields for `firewall_events`, enabling users to capture granular security and traffic data from Cloudflare’s Firewall products…

Cloudflare Expands HTTP Requests Logpush Dataset with Bot and Fraud Detection Fields

Cloudflare has expanded the dataset fields available for HTTP requests in its Logpush service, adding detailed bot management, fraud detection, and security-related metadata. The update introduces new…

Cloudflare Enhances DLP Profiles with Advanced Detection Settings

Cloudflare has introduced advanced settings for its Data Loss Prevention (DLP) profiles, enabling more granular control over sensitive data detection. The key changes include configurable match count …

Add web applications to Cloudflare Access

Cloudflare Access now supports securing web applications as an identity-aware proxy, verifying user identity before granting access based on policies tied to existing identity providers, device postur…

Get started with Cloudflare GraphQL Analytics API

Cloudflare has expanded its GraphQL API documentation to include a new getting-started guide for its Analytics GraphQL API. The guide provides step-by-step instructions for authentication, querying ba…

Cloudflare Updates Workflows Limits to Enhance Scalability

Cloudflare has updated the operational limits for its Workflows product, a serverless workflow automation tool. The most significant changes include increased default and configurable limits for compu…

Human in the Loop Feature for Browser Run

Cloudflare introduced a 'Human in the Loop' feature for its Browser Run service, enabling temporary human intervention in browser automation workflows. The feature allows a human operator to take cont…

Cloudflare Adds Session Recording to Browser Run for Debugging

Cloudflare introduced session recording for its Browser Run service, enabling lightweight debugging of browser automation scripts by capturing DOM changes, mouse/keyboard events, and page navigation a…

WebMCP: AI Agents Gain Direct Access to Website Tools via Cloudflare

Cloudflare introduced WebMCP, a browser API enabling AI agents to directly discover and execute structured tools exposed by websites, replacing traditional screenshot-analyze-click automation loops. T…

Register domains wherever you build: Cloudflare Registrar API now in beta

Cloudflare launched a beta version of its Registrar API, enabling programmatic domain search, availability checks, and registration directly within AI code editors, deployment pipelines, and agent-dri…

Browser Run: give your agents a browser

Cloudflare renamed its Browser Rendering product to Browser Run and introduced major enhancements to support AI agents interacting with the web. The most significant change is the direct exposure of t…

Project Think: building the next generation of AI agents on Cloudflare

Cloudflare introduced Project Think, a next-generation Agents SDK featuring durable execution, sub-agents, persistent sessions, and sandboxed code execution to build long-running AI agents. The platfo…

Introducing Agent Lee - a new interface to the Cloudflare stack

Cloudflare has launched Agent Lee, an in-dashboard AI assistant designed to revolutionize how users interact with its platform by enabling natural language commands to perform complex tasks. Agent Lee…

Add voice to your agent

Cloudflare has introduced an experimental voice pipeline for its Agents SDK, enabling real-time voice interactions without requiring a separate voice framework. The new @cloudflare/voice package allow…

Rearchitecting the Workflows control plane for the agentic era

Cloudflare announced Workflows v2, a major upgrade to its durable execution engine for multi-step applications, increasing scalability limits from 4,500 to 50,000 concurrent instances and from 100 to …

Lifecycle of a Container

Cloudflare introduced a new container lifecycle architecture for its Container platform, fundamentally changing how containerized applications are deployed, scaled, and managed. The most significant c…

Cloudflare Enables Browser Rendering Control via Model Context Protocol (MCP)

Cloudflare introduced support for controlling its Browser Rendering service via the Model Context Protocol (MCP) using the chrome-devtools-mcp package. This allows AI coding agents to automate browser…

Wrangler commands for Browser Rendering sessions

Cloudflare introduced new `wrangler browser` commands to manage Browser Rendering sessions directly from the command line via Wrangler. The commands allow developers to create, close, list, and view b…

Browser Rendering is now Browser Run with expanded features and 4x higher limits

Cloudflare has renamed its Browser Rendering product to Browser Run, expanding its capabilities beyond rendering to include full browser session execution, AI-driven automation, and human-in-the-loop …

Last seen timestamp for Cloudflare One Client devices is more consistent

Cloudflare has improved the consistency of last seen timestamps for Cloudflare One Client devices in its dashboard. This change ensures IT teams receive more reliable and synchronized data about the m…

Agent Lee adds Write Operations and Generative UI

Cloudflare’s AI co-pilot, Agent Lee, now supports write operations and generative UI, enabling users to make natural language configuration changes and visualize real-time account data. Write operatio…

Privacy Proxy metrics now available via GraphQL Analytics API

Cloudflare has made Privacy Proxy metrics queryable through its GraphQL Analytics API, replacing the previous default method for accessing observability data. Four new GraphQL nodes now provide aggreg…

New TenantID and Firewall for AI fields in Logpush datasets

Cloudflare has added new fields to its Logpush datasets, including TenantID for Gateway and Zero Trust logs and Firewall for AI security metrics. The TenantID field now appears in Gateway DNS, HTTP, a…

Increased concurrency, creation rate, and queued instance limits for Workflows instances

Cloudflare raised key limits for its Workflows service on April 15, 2026, increasing the concurrency limit for running instances from 10,000 to 50,000, the instance creation rate from 100 to 300 per s…

Browser Run adds WebMCP support

Cloudflare’s Browser Run now supports WebMCP, a new browser API from Google Chrome that enables AI agents to discover and execute structured website tools directly. This eliminates unreliable screensh…

Browser Run adds Live View, Human in the Loop, and Session Recordings

Cloudflare introduced three new features for Browser Run—Live View, Human in the Loop, and Session Recordings—to enhance browser automation visibility and reliability. Live View provides real-time mon…

Independent MFA for Access applications

Cloudflare has introduced independent multi-factor authentication (MFA) for its Access applications, enabling enforcement of MFA policies without relying on third-party identity providers. This change…

Control where your Containers run with regional and jurisdictional placement

Cloudflare introduced regional and jurisdictional placement controls for its Containers product, allowing users to specify where their containers run. The update enables geographic constraints using r…

New, streamlined creation experience for Access Applications and Gateway Policies

Cloudflare introduced redesigned builders for Gateway policies and self-hosted Access applications in its Cloudflare One dashboard, streamlining workflows with clearer states, inline policy creation, …

Cloudflare Introduces Scannable API Token Formats for Enhanced Security

Cloudflare has introduced a new scannable format for its API credentials, replacing older unprefixed strings with prefixed tokens that include a 40-character identifier and a checksum. The new format …

Cloudflare Mesh Launches with Post-Quantum Encrypted Private Networking

Cloudflare Mesh introduces post-quantum encrypted networking to privately route traffic between servers, laptops, and phones without VPNs or bastion hosts. Every enrolled device or node receives a pri…

Routes - Cloudflare Mesh Documentation

Cloudflare introduced CIDR route management for its Cloudflare Mesh nodes, enabling devices on a Mesh network to reach other hosts on the local subnet behind a node—such as servers, databases, printer…

High availability for Cloudflare Mesh nodes

Cloudflare has introduced high availability (HA) support for its Mesh node deployments, enabling multiple replicas of a single node to run in active-passive mode. All replicas share the same node iden…

Cloudflare One Introduces Network Policies for TCP/UDP Traffic Control

Cloudflare has introduced network policies in Cloudflare One to control TCP and UDP traffic between users and network destinations, enabling granular allow or block actions based on IP addresses, port…

Cloudflare Zero Trust Adds Device Posture Checks for Enhanced Security

Cloudflare introduced device posture checks as part of its Zero Trust framework, enabling stricter access controls for protected applications and network resources. Users can now configure policies re…

VPC Networks for Cloudflare Workers

Cloudflare introduced VPC Networks for Workers, enabling direct access to private network services without pre-registering individual hosts or ports. Unlike VPC Services, which require separate bindin…

Cloudflare Introduces VPC Services for Secure Private Network Access in Workers VPC

Cloudflare introduced VPC Services as a core component of Workers VPC, enabling secure access to private network resources from Workers via Cloudflare Tunnel. Workers can now bind to specific VPC Serv…

Managed OAuth for Access: make internal apps agent-ready in one click

Cloudflare has introduced managed OAuth for Cloudflare Access, enabling agents (AI tools, scripts, or automated systems) to authenticate and access internal apps protected by Access without manual wor…

Securing non-human identities: automated revocation, OAuth, and scoped permissions

Cloudflare introduced security updates to address risks in agentic AI systems, including credential leaks, user impersonation, and elevation of privilege, which can cause denial of service, data loss,…

Scaling MCP adoption: Our reference architecture for simpler, safer and cheaper enterprise deployments of MCP

Cloudflare has fully integrated the Model Context Protocol (MCP) into its enterprise operations, deploying agentic workflows across engineering, product, sales, marketing, and finance teams to drive e…

Secure private networking for everyone: users, nodes, agents, Workers — introducing Cloudflare Mesh

Cloudflare introduced Cloudflare Mesh, a new private networking solution designed to securely connect autonomous AI agents, developers, and services to private infrastructure. Mesh integrates with Clo…

Cloudflare Immerse New York City 2026

Cloudflare announced Immerse NYC, a roadshow event on April 14, 2026, in New York City, targeting security, IT, and digital leaders. The event focuses on Zero Trust, SASE, DDoS, application security, …

Cloudflare Enables Puppeteer Integration with Browser Rendering via CDP

Cloudflare introduced a new integration allowing Puppeteer, a Node.js library for browser automation, to connect directly to its Browser Rendering service via the Chrome DevTools Protocol (CDP). This …

Cloudflare Integrates Playwright with Browser Rendering via CDP

Cloudflare has integrated Playwright with its Browser Rendering service, enabling developers to automate browser tasks programmatically via the Chrome DevTools Protocol (CDP) from any Node.js environm…

Cloudflare Launches Cloudforce One, a Threat Intelligence Platform for SOC Teams

Cloudflare has launched Cloudforce One, its Threat Intelligence Platform (TIP), which aggregates and correlates threat data from Cloudflare’s global network telemetry to provide actionable intelligenc…

Chrome DevTools Protocol (CDP) Support via /devtools Endpoints

Cloudflare introduced support for the Chrome DevTools Protocol (CDP) via new `/devtools` endpoints, enabling persistent browser sessions, tab management, and remote browser control through WebSocket a…

Manage Browser Rendering sessions with Wrangler CLI

Cloudflare introduced new Wrangler CLI commands for managing Browser Rendering sessions directly from the terminal. Developers can now create, close, list, and view browser sessions using commands lik…

Logpush to BigQuery — Cloudflare dashboard support

Cloudflare has added native dashboard support for configuring Logpush jobs to Google BigQuery, eliminating the previous requirement to use the API. Users can now create and manage BigQuery Logpush des…

Cloudflare and Wiz partner to secure global AI attack surface

Cloudflare and Wiz announced a partnership to integrate Cloudflare’s AI Security for Apps with Wiz’s AI Application Protection Platform, enabling organizations to discover, inspect, and secure AI endp…

Cloudflare launches Mesh to secure AI agent lifecycle

Cloudflare introduced Cloudflare Mesh, a private networking solution designed to secure AI agent connections to internal infrastructure without exposing data to the public internet. The product enable…

Introducing Cloudflare Mesh

Cloudflare launched Cloudflare Mesh, a post-quantum encrypted mesh networking solution that enables private, direct traffic routing between servers, laptops, and phones without VPNs or bastion hosts. …

VPC Networks and Cloudflare Mesh support now in public beta

Cloudflare has introduced VPC Networks and Cloudflare Mesh support in public beta for its Workers platform, enabling direct access to private networks without pre-registering individual hosts or ports…

Generate citations on Cloudflare Radar

Cloudflare Radar’s shareable widgets now include a ‘generate citation’ feature, allowing users to export data in BibTeX, APA, MLA, Chicago, and RIS formats. This change simplifies referencing Radar da…

Improved OAuth experience for consent and management

Cloudflare introduced granular OAuth consent and management features, allowing users to select specific accounts for third-party application access instead of granting blanket permissions. The update …

DLP account-level settings now available in Cloudflare One

Cloudflare has introduced account-level Data Loss Prevention (DLP) settings in Cloudflare One, enabling advanced configurations such as OCR, AI context analysis, and payload masking to be managed cent…

Cloudflare makes Email Obfuscation decode script non-render-blocking

Cloudflare changed the Email Address Obfuscation decode script to load with the `defer` attribute, making it non-render-blocking. This improves page loading performance and Core Web Vitals for all zon…

Cloudflare adds configurable DLP payload log masking options

Cloudflare introduced configurable payload log masking for Data Loss Prevention (DLP) to let incident response teams control how sensitive data appears in logs. Previously, all DLP payload logs used a…

Cloudflare Sandbox Outbound Traffic Control

Cloudflare introduced outbound handlers for its Sandbox environment, enabling developers to intercept, modify, and control HTTP/HTTPS traffic leaving sandboxes. The feature allows granular control ove…

Cloudflare Containers Gains Outbound Traffic Interception for Enhanced Security

Cloudflare introduced outbound traffic interception capabilities for its Containers platform, allowing developers to programmatically control, modify, and secure HTTP/HTTPS egress traffic from contain…

Webhooks for Cloudflare One CASB

Cloudflare introduced webhook integrations for its Cloud Access Security Broker (CASB) within Cloudflare One, enabling automated forwarding of posture finding instances to external systems like chat p…

Cloudflare One Introduces Enhanced CASB Findings Management

Cloudflare has introduced a new capability within its Cloudflare One platform to manage security findings detected in SaaS and cloud applications, including users, data at rest, and configuration sett…

Configure link aggregation groups for Cloudflare One Appliance

Cloudflare has introduced Link Aggregation Group (LAG) support for its Cloudflare One Appliance, allowing users to bundle multiple physical LAN ports into a single logical interface. This feature incr…

Cloudflare enables Bring Your Own CA for mTLS in Enterprise accounts

Cloudflare now allows Enterprise customers to use their own Certificate Authorities (CAs) for mutual TLS (mTLS) authentication, expanding beyond its default CA. This change enables organizations with …

Cloudflare Introduces Centralized Organization Setup for Enterprise Customers

Cloudflare introduced a centralized organization setup feature requiring Enterprise plan users to create and manage organizations, assign accounts, and invite members with implicit Super Administrator…

Cloudflare Expands RSS Feeds for Granular Changelog Tracking

Cloudflare has expanded its changelog system by introducing granular RSS feeds for tracking updates across specific product areas, including Application performance, Application security, Cloudflare O…

Building a CLI for all of Cloudflare

Cloudflare has introduced a significant evolution of its Wrangler CLI tool, now rebranded as 'cf', to unify access to its entire API surface for both human developers and AI agents. The most critical …

Agents have their own computers with Sandboxes GA

Cloudflare has announced the general availability of its Sandboxes and Cloudflare Containers, a persistent, isolated environment designed to safely run AI agents and development workloads. The platfor…

Durable Objects in Dynamic Workers: Give each AI-generated app its own database

Cloudflare introduced Durable Object Facets, a new feature in open beta for its Workers platform, enabling dynamic loading and instantiation of Durable Object classes within Dynamic Workers. This solv…

Dynamic, identity-aware, and secure Sandbox auth

Cloudflare has introduced outbound Workers for its Sandboxes and Containers, enabling programmatic egress proxies that enhance security, observability, and authentication for agentic workloads. The ne…

Containers, Agents - Secure credential injection and dynamic egress policies for Sandboxes

Cloudflare has introduced significant enhancements to its Outbound Workers for Sandboxes and Containers, enabling zero-trust credential injection, TLS interception, allow/deny host lists, and dynamic …

Containers - Containers and Sandboxes are now generally available

Cloudflare has announced the general availability of its Containers and Sandbox products, marking a significant expansion of its Workers platform. Containers now enable the execution of resource-inten…

Welcome to Agents Week

Cloudflare has launched 'Agents Week,' a dedicated initiative to build infrastructure for the emerging agentic era of the Internet, where AI-driven agents will perform tasks autonomously on behalf of …

500 Tbps of capacity: 16 years of scaling our global network

API tokens now detectable by secret scanning tools

Cloudflare API tokens now follow a standardized format that secret scanning tools can automatically detect when leaked in public repositories or code. This change enables immediate detection of expose…

Browser Rendering - Browser Rendering adds Chrome DevTools Protocol (CDP) and MCP client support

Cloudflare has integrated the Chrome DevTools Protocol (CDP) into its Browser Rendering service, enabling direct access to low-level browser automation capabilities. This change allows any CDP-compati…

CASB - Send CASB posture finding instances with webhooks

Cloudflare has introduced CASB (Cloud Access Security Broker) webhooks in its Cloudflare One platform, enabling security teams to automatically route CASB posture findings to external systems such as …

Relaxed simultaneous connection limiting for Workers

Cloudflare has relaxed the simultaneous open connections limit for its Workers platform, reducing constraints on connection management. Previously, each Worker invocation was capped at six open connec…

Cloudflare Launches AI Search for Managed RAG Applications

Cloudflare has launched AI Search, a fully managed retrieval-augmented generation (RAG) service designed to enable developers to build scalable, context-aware AI applications without managing infrastr…

From bytecode to bytes: automated magic packet generation

Cloudflare has developed an automated tool to reverse-engineer malicious Linux BPF (Berkeley Packet Filter) socket programs used by malware authors to create stealthy backdoors. These BPF programs, of…

Cloudflare Workers Request Interface Update Enhances Developer Control

The Cloudflare Workers Request interface, part of the Fetch API, has been updated to enhance developer control over HTTP request handling within Cloudflare’s serverless platform. The most significant …

Request Header Transform Rules

Cloudflare has introduced Request Header Transform Rules, enabling users to modify HTTP request headers sent to origin servers. This feature allows setting header values to literal strings or dynamic …

User risk scoring for high risk browsing activity

Cloudflare has introduced a new feature for its User Risk Scoring system, integrating Gateway DNS traffic patterns to automatically elevate a user's risk score when they visit high-risk or malicious d…

Real-time alerts and daily digests for Threat Events

Cloudflare has introduced automated real-time alerts and daily digests for its Threat Events feature, enabling users to subscribe to notifications based on custom saved views. This update allows secur…

Website Source CSS content selectors for precise content extraction in AI Search

Cloudflare has introduced CSS content selectors for its AI Search feature, enabling precise control over which parts of crawled web pages are indexed. Users can now specify CSS selectors paired with U…

New Workers AI models for text generation and embedding in AI Search

Cloudflare has introduced four new Workers AI models for its AI Search service, expanding its text generation and embedding capabilities. The additions include GLM-4.7-Flash, a lightweight model from …

Cloudflare targets 2029 for full post-quantum security

Cloudflare has accelerated its post-quantum cryptography (PQC) roadmap, targeting full post-quantum security—including authentication—by 2029, a significant shift from prior timelines. The urgency ste…

Logpush Feature Update

Cloudflare’s Logpush feature delivers logs in near real-time batches, with no minimum batch size and potential delivery frequencies exceeding once per minute. This enables faster access to smaller log…

User Submission Triage Status Tracking

Cloudflare introduced Triage Status Tracking for User Submissions in its Email Security product, enabling SOC teams to track, manage, and prioritize user-submitted emails directly within the Cloudflar…

WAF Release - 2026-04-07

Cloudflare’s latest Web Application Firewall (WAF) managed ruleset release, dated April 7, 2026, introduces critical security enhancements to address three high-severity vulnerabilities. The update ad…

Support - Redesigned Support Portal for faster, personalized help

Cloudflare has launched a redesigned 'Get Help' Support Portal to streamline customer support interactions. The new portal replaces a complex, multi-step navigation system with a simplified, personali…

Cloudflare and GoDaddy partner to enable transparent AI agent interactions on the web

Cloudflare and GoDaddy announced a strategic partnership to integrate Cloudflare’s AI Crawl Control into GoDaddy’s hosting platform, giving website owners visibility and control over AI crawlers. The …

Manage mTLS and BYO CA certificates from the Cloudflare dashboard

Cloudflare has introduced a dashboard-based solution for managing mutual TLS (mTLS) and Bring Your Own Certificate Authority (BYO CA) configurations, eliminating the previous requirement to use the Cl…

Link aggregation (LACP) support for Cloudflare One Appliance

Cloudflare has introduced Link Aggregation Control Protocol (LACP) support for its Cloudflare One Appliance, enabling users to bundle up to six physical LAN ports into a single logical interface. This…

WebSockets now automatically reply to Close frames

Cloudflare has updated its Workers runtime to automatically send a reciprocal Close frame when receiving a Close frame from a WebSocket peer, aligning with the WebSocket specification and standard bro…

Cloudflare One Client for Windows (version 2026.3.851.0)

Cloudflare has released a General Availability (GA) version 2026.3.851.0 of its Cloudflare One Client for Windows, addressing critical stability and connectivity issues. The update fixes multiple tunn…

Connect, protect, and build everywhere | Cloudflare

Cloudflare has reinforced its position as a unified connectivity cloud platform, emphasizing its ability to connect, protect, and build across users, applications, AI agents, and networks. The company…

How we built Organizations to help enterprises manage Cloudflare at scale

Cloudflare has launched a new Organizations feature in beta, designed to simplify the management of multiple Cloudflare accounts for enterprise customers. Historically, enterprises have segmented thei…

Logs - New ResponseTimeMs field in Gateway DNS Logpush dataset

Cloudflare has introduced a new field to its Gateway DNS Logpush dataset, enhancing the granularity of DNS query logging for users. The update adds a previously unspecified metric, though the exact na…

DANE Support for MX Deployments

Cloudflare has introduced DANE (DNS-based Authentication of Named Entities) support for MX deployments in its Email Security service, enabling DNSSEC-backed certificate verification for regional MX ho…

Organizations is now in public beta for enterprises

Cloudflare has launched Organizations in public beta for enterprise customers, introducing a top-level container to centrally manage multiple Cloudflare accounts, members, analytics, and shared polici…

Google Gemma 4 26B A4B now available on Workers AI

Cloudflare has partnered with Google to integrate the Gemma 4 26B A4B model into its Workers AI platform. This Mixture-of-Experts (MoE) model features 26 billion total parameters with only 4 billion a…

Why we're rethinking cache for the AI era

Cloudflare reports that 32% of its network traffic now originates from automated sources, with AI crawlers accounting for 80% of self-identified AI bot traffic. Unlike human users, AI agents generate …

Cloudflare Immerse Houston 2026

Cloudflare announced its Immerse roadshow event in Houston on April 2, 2026, targeting security, IT, and digital leaders. The event will focus on application, security, and network modernization, incl…

Cloudflare One Client for Linux (version 2026.3.846.0) GA Release

Cloudflare has released the General Availability (GA) version 2026.3.846.0 of its Cloudflare One Client for Linux, marking the first stable Linux release. This update includes minor fixes and improvem…

Cloudflare One Client for Windows (version 2026.3.846.0)

Cloudflare has released a General Availability (GA) version 2026.3.846.0 of its Cloudflare One Client for Windows, marking a stable milestone for the product. This update includes minor fixes and impr…

AI Gateway - Automatically retry on upstream provider failures on AI Gateway

Cloudflare has introduced automatic retry functionality at the gateway level for its AI Gateway product. This feature allows requests to be automatically retried when upstream providers return errors,…

Cloudflare Introduces Incremental Updates Across Cloudflare One, AI Gateway, AI Search, Workers, and Radar

Cloudflare has introduced several incremental updates across its product ecosystem, primarily focused on enhancing developer experience, improving reliability, and expanding observability capabilities…

BigQuery as Logpush destination

Cloudflare has introduced native support for Google Cloud BigQuery as a destination for its Logpush service, enabling direct streaming of Cloudflare logs to BigQuery. This integration allows users to …

Cloudflare Announces Incremental Product Updates Across Cloudflare One, AI Gateway, Wrangler, AI Search, and Radar

Cloudflare has introduced several incremental updates and improvements across its product ecosystem, primarily focused on enhancing developer experience, operational efficiency, and data visibility. T…

Cloudflare Announces Incremental Product Updates Across Cloudflare One, AI Gateway, Workflows, AI Search, and Radar

Cloudflare has introduced several incremental updates across its product ecosystem, primarily focused on improving user experience, reliability, and developer tooling. The most significant changes inc…

Cloudflare Announces Incremental Product Updates Across Multiple Services

Cloudflare has announced a series of incremental updates and improvements across multiple products, primarily focused on enhancing usability, reliability, and developer experience. The most significan…

Cloudflare Announces Incremental Product Updates Across Cloudflare One, AI Gateway, Wrangler CLI, AI Search, and Workers

Cloudflare has rolled out several incremental updates across its product ecosystem, primarily focused on improving usability, reliability, and developer experience. The most significant changes includ…

Cloudflare One Client for macOS (version 2026.3.846.0)

Cloudflare has released a General Availability (GA) version 2026.3.846.0 of its Cloudflare One Client for macOS, now available on the stable releases downloads page. The update includes minor fixes an…

Cloudflare One Adds Identity-Based Policy Controls for Secure Web Gateway

Cloudflare has enhanced its Cloudflare One Secure Web Gateway with new identity-based policy controls that allow organizations to filter outbound traffic at the user identity level. The update introdu…

Introducing EmDash — the spiritual successor to WordPress that solves plugin security

Cloudflare has launched EmDash, a new open-source content management system (CMS) designed as a modern, serverless successor to WordPress. Built entirely in TypeScript and powered by Astro, EmDash add…

Our ongoing commitment to privacy for the 1.1.1.1 public DNS resolver

Cloudflare has released the results of its 2024 independent privacy examination for its 1.1.1.1 public DNS resolver, confirming that its core privacy commitments remain unchanged and validated. The ex…

@cloudflare/codemode

Cloudflare has released version 0.3.3 of the `@cloudflare/codemode` package, a tool designed to enable code execution within Cloudflare's edge network. This update, published a day ago, marks a minor …

@cloudflare/shell

Cloudflare has released a new package called @cloudflare/shell, a command-line interface (CLI) tool designed to interact with Cloudflare’s services. The package, currently at version 0.3.1, is lightwe…

Cloudflare Dashboard | Manage Your Account

Resolver policies for Cloudflare Gateway DNS

Cloudflare has introduced **resolver policies** for its Enterprise-grade Gateway DNS service, enabling organizations to route DNS queries to custom resolvers instead of defaulting to Cloudflare’s publ…

Logs UI refresh

Cloudflare has refreshed the user interface for its Access authentication logs and Gateway activity logs (DNS, Network, and HTTP) to enhance usability and customization. The updated UI introduces flex…

Deploy Hooks are now available for Workers Builds

Cloudflare has introduced Deploy Hooks for Workers Builds, enabling automated build triggers via HTTP POST requests to unique URLs tied to specific branches. This feature allows developers to initiate…

Cloudflare Announces Pricing Updates and Major Product Enhancements Across Workflows, AI Search, Radar, and Security

Cloudflare has introduced several significant updates across its product ecosystem, primarily focused on developer tools, security, and network telemetry. The most impactful changes include expanded l…

Cloudflare Introduces Major Developer and Security Updates Across Workflows, AI Search, Radar, and WAF

Cloudflare has introduced several significant updates across its product ecosystem, primarily focused on developer tools, security, and network telemetry. The most impactful changes include expanded l…

Routing Section Expansion on Cloudflare Radar

Cloudflare Radar’s Routing section has been expanded into a dedicated, three-part hub with new sub-pages and widgets. The Overview page now aggregates routing statistics, IP address space trends, BGP …

On April 1, 2026, Cloudflare introduced several significant updates across its product ecosystem, primarily centered on developer tools, security, and network analytics. The most impactful changes inc

Cloudflare Announces Incremental Product Updates Across Cloudflare One, AI Gateway, Wrangler, and Radar

Cloudflare has introduced several incremental updates across its product ecosystem, primarily focused on improving usability, reliability, and developer experience. The most significant changes includ…

Create, manage, search AI Search instances with Wrangler CLI

Cloudflare has introduced a new command namespace, `wrangler ai-search`, within its Wrangler CLI to enable users to create, manage, and search AI Search instances directly from the command line. The u…

New L4 transport telemetry fields in Workers

Cloudflare has introduced three new properties on the `request.cf` object in its Workers platform, enabling real-time Layer 4 transport telemetry for client connections. These properties—`clientTcpRtt…

All Wrangler commands for Workflows now support local development

Cloudflare has introduced local development support for all Wrangler commands related to Workflows, enabling developers to manage Workflows entirely within a local environment using the `--local` flag…

Cloudflare Introduces Outbound Workers Support for Containers and Sandboxes, Enhances Security and Developer Workflows

Cloudflare has introduced several significant updates across its product ecosystem, primarily centered on enhancing developer experience, security capabilities, and integration between its services. T…

Cloudflare Introduces Major Developer and Security Enhancements Across Workflows, AI Search, Internal DNS, and WAF

Cloudflare has introduced several significant updates across its product ecosystem, primarily focused on enhancing developer experience, security, and integration capabilities. The most impactful chan…