Cloudflare

Identity alone doesn't guarantee a bot will behave responsibly. We are introducing a system to continuously evaluate whether Verified bots honor site preferences, like robots.txt and HTTP 429s, ensuring they remain accou...

Cloudflare and OpenAI concluded a research pilot that utilized network signals from approximately 1% of Cloudflare's network to help ChatGPT discover and index hundreds of millions of new web pages. The collaboration focuses on using metadata to improve search crawler efficiency and content discovery rather than training models on site content.

Cloudflare Gateway and Data Loss Prevention (DLP) now support execution of Cloudflare Workers code directly within the traffic inspection pipeline. This integration allows users to apply custom logic and programmatic filtering to web traffic and data exfiltration policies.

Introducing Void: an open-source SDK, CLI, and self-hosted platform for building full-stack Vite apps and deploying them to Cloudflare....

Cloudflare has integrated OpenAI's GPTBot into its platform to provide website owners with granular control over AI crawler access. This partnership enables automated, optimized crawling patterns to reduce server load and improve content discovery efficiency.

Cloudflare observed that malicious bot traffic previously associated with Yandex infrastructure migrated to alternative network providers following data center outages. This shift confirms that botnet operators maintain operational continuity by rerouting traffic rather than ceasing activity during infrastructure failures.

While adding MySQL support to Hyperdrive, we found a subtle protocol bug when caching query results. Here is how we tracked down a 0.001% rate error and made Hyperdrive MySQL generally available....

Cloudflare has re-architected the D1 control plane to decouple management operations from the data plane. This allows the system to scale to millions of individual databases while maintaining edge-based query performance.

Cloudflare implemented a transition from a traditional log-based data pipeline to a compressed, batch-processed architecture. This change utilizes custom filtering and aggregation logic to reduce CPU and memory overhead during high-volume data ingestion.

Cloudflare Logpush now integrates Apache DataFusion and Apache Arrow to enable real-time SQL-based log transformation. Users can now filter, redact, and reshape log data directly within the pipeline before it reaches the destination storage.

Cloudflare has launched the Clef-omni model featuring native multimodal processing for audio, video, images, and text. Additionally, the company has increased Clef inference speeds by 2.0x and reduced pricing for the Clef-flash model.

Cloudflare has introduced on-demand CPU and memory profiling capabilities for Workers and Durable Objects. Users can now generate interactive flamegraphs directly within production environments to identify performance bottlenecks and memory leaks.

The Deno team is integrating with Cloudflare to enable self-hosting capabilities for Cloudflare Workers and Durable Objects. This move allows developers to deploy these serverless primitives outside of the managed Cloudflare network.

We redesigned Cloudflare Radar to make real-time global traffic and outage data accessible to a wider audience — including journalists, less technical researchers, and everyday users. By introducing an interactive map an...

Cloudflare has integrated a new agentic security operations framework into Managed Defense that utilizes Workers for automated evidence collection. The system decouples deterministic data gathering from LLM-based inference to provide grounded security recommendations.

On October 11, 2026, the DNS root switches to a new key-signing key (KSK-2024). Learn what this means for you, and how RFC 8509 trust anchor sentinels allow you to test whether your DNS resolver is ready for the rollover...

Cloudflare released 46 distinct updates spanning open source, post-quantum cryptography, and AI agent infrastructure. The launch cycle focused on expanding the developer platform and hardening network security protocols.

Cloudflare has integrated over 750 interns into 48 internal teams to accelerate product development. These contributors have successfully shipped features ranging from Birthday Week product releases to post-quantum security implementations.

Streamline demonstrates how to build long-running, continuous video processing pipelines by pairing Cloudflare Workers and Durable Objects with a containerized media engine....

Cloudflare AI Gateway now provides native integration with web search providers Ceramic.ai, Exa, and Linkup. Developers can inject real-time web search results into LLM inference calls using REST APIs or Cloudflare Workers bindings.

Cloudflare has launched a new observability tool called Cloudflare Traces to visualize request lifecycles across the platform. It enables end-to-end request tracking through security rules, cache, Workers, and external origin infrastructure.

Cloudflare has consolidated logs, traces, analytics, alerts, dashboards, querying, and telemetry export into a unified observability platform. The update introduces a simplified and predictable pricing model for these integrated observability services.

Cloudflare has released Clef and Clef-flash, two open-source decision models integrated into the Workers AI platform. Additionally, the company launched a reinforcement learning (RL) platform for developers to fine-tune these models using proprietary datasets.

Cloudflare is expanding its Workers AI platform to support a broader range of open-source models for local execution. The company is also deploying model-agnostic security tools designed to provide governance and protection for AI deployments across sovereign borders.

Cloudflare OS gives everyone in your organization an agent workspace that knows how your company works and connects to its data and systems. We’re opening the waitlist for fully managed deployments that you’ll be able to...

Cloudflare has launched Workers KV Instant, a new storage tier achieving sub-2ms p99 read latencies. The service guarantees 250ms global replication across the entire Cloudflare edge network.

Cloudflare has reached a cumulative total of $100 million in donated cybersecurity services through its Impact programs. This milestone represents the aggregate value of protection services provided to non-profit, governmental, and educational entities.

Cloudflare Registrar’s new search delivers fast, transparent results across 420+ extensions using Workers, Durable Objects, and WebSockets. Its expanded API and cf CLI also let agents search, register, and transfer domai...

Cloudflare has introduced an Auto Router feature for AI Gateway that utilizes an edge-deployed classifier to evaluate request complexity. This system dynamically routes requests to the most cost-effective model based on a balance of output quality and token pricing.

Cloudflare Workers now includes built-in error monitoring that aggregates production failures. This feature enables the direct export of stack traces, logs, and application context to AI coding agents for automated investigation and pull request generation.

Cloudflare has launched an adaptive security framework that integrates risk discovery, agent governance, and runtime protection. This system utilizes a continuous learning loop to automate AI-powered threat responses.

Cloudflare has introduced CryptoLabe, an internal AI-powered tool designed to automate the discovery of cryptographic implementations within their codebase. This tool maps complex dependencies to facilitate a systematic migration to post-quantum cryptographic standards by 2029.

Cloudflare is transitioning to become a formal Certificate Authority (CA) to issue its own SSL/TLS certificates. The new infrastructure integrates ACME protocol automation with Merkle Tree Certificates to support post-quantum cryptographic standards.

Cloudflare is launching a new certificate authority capable of issuing Merkle Tree Certificates (MTC). This implementation addresses the data size overhead associated with post-quantum cryptographic signatures in TLS handshakes.

Vinext 1.0 graduates from an AI experiment to a production-ready framework, letting developers run Next.js apps on Vite. This release brings advanced cache warming, broader compatibility, and an automated testing pipelin...

Cloudflare has launched 'cf', a new command-line interface that provides full coverage of the Cloudflare API with support for programmatic TypeScript configurations. Additionally, the company has open-sourced 'Forge', the internal SDK generator used to build these tools.

Cloudflare is open-sourcing the BEACON dataset, making billions of anonymized Real User Monitoring (RUM) performance records publicly available on Google BigQuery. Explore real-world Core Web Vitals, soft navigation metr...

Cloudflare is launching The Cold Start, a startup competition giving five early-stage companies five minutes on stage at Cloudflare Connect. Grand Prize winner receives $500,000 in credits, a San Francisco billboard, and...

Since joining Cloudflare, VoidZero has delivered more than 80 releases that drastically speed up JavaScript compilation, linting, and testing. From a 10x faster React compiler to Vite+ 1.0, here’s how we are building fas...

Cloudflare has released Forge, an open-source CI pipeline tool designed to automate the generation of SDKs, CLIs, and documentation from API definitions. This tool decentralizes the generation process by moving it into individual team repositories to ensure continuous synchronization.

We’ve updated Kitesurf, our Workers-based browser for AI agents, with WebMCP support, improved DOM performance, and terminal-based rendering. With over 730,000 Web Platform subtests passing, agents can now navigate compl...

Cloudflare introduced new tools to reduce server load by enabling crawlers to fetch only updated content and a framework for site owners to monetize their content when accessed by AI agents. These features address the rising strain of automated traffic, which surpassed human traffic in May 2026.

The Internet is changing more today than at any point since Cloudflare launched back on September 27, 2010. As automated traffic surpasses human activity, we reflect on the rise of AI agents, new creators, and how we can...

Cloudflare introduced Worker Previews, allowing developers to deploy isolated, production-like environments for every Git branch. This feature provides unique URLs, independent Durable Object namespaces, and separate configuration settings for each branch to enable safer pre-production testing.

Cloudflare introduced Turnstile Spin, a tool designed to automate the integration of server-side validation for Turnstile. It enables AI coding agents to automatically configure the necessary backend verification logic for website security.

External security researchers at Accomplish identified a vulnerability in Cloudflare Containers that could expose residual disk data from previous workloads. We explain how the issue worked, how we investigated it, and t...

Vary support is now available in Cache Rules on every plan. You can normalize known negotiation headers, pass exact values through to the origin when those small differences matter, or bypass cache when the variation is ...

Worker Previews gives every branch its own URL, configuration, state, and observability, so you and your agents can test changes in parallel without affecting production....

Cloudflare has officially transitioned Python Workers from beta to general availability. Developers can now execute Python code natively within the Workers runtime to interface directly with D1, R2, and Workers AI.

Cloudflare implemented a statistical optimization technique within their Pingora-based services to reduce memory consumption. This architectural change successfully reclaimed 100TB of RAM across their global network infrastructure.

Cloudflare has integrated machine learning models into its Client-Side Security product to detect evasive JavaScript-based attacks. These models are designed to identify malicious scripts that bypass traditional signature-based scanners by siphoning data or hijacking user interactions.

You can now scope access to individual Workers and assign narrower Developer Platform roles, so teammates, CI tokens, and agents get only the access they need to debug, deploy, or monitor safely....

Cloudflare is giving site owners a way to stay discoverable while disallowing AI training. New controls and an Accountable designation establish a shared model with Apple, Google, and Microsoft....

Cloudflare CASB policies introduce a native automation engine built directly on the Cloudflare developer platform to remediate SaaS risks automatically. Security teams can now design event-driven logic to revoke risky fi...

Cloudflare's 1.1.1.1 resolver now supports DNSSEC signature validation using the NIST-standardized ML-DSA-44 post-quantum algorithm. This implementation handles 2,420-byte signature payloads to ensure compatibility with quantum-resistant cryptographic standards.

Cloudflare Workers now enables Node.js compatibility by default and increases the maximum application size limit to 64 mebibytes. The platform has introduced a URL-based module registry featuring import.meta support, lazy compilation, and shared code caches.

Cloudflare has introduced Automatic Key Exchange to proactively probe TLS 1.3-capable origins for supported key agreement algorithms. The system now automatically prioritizes post-quantum cryptographic algorithms during the TLS handshake process.

Cloudflare announced general availability of Workers AI, enabling serverless AI model inference across 300+ edge datacenters alongside Vectorize vector database.

Cloudflare has integrated OpenAI Daybreak models into its Managed Defense service to automate vulnerability prioritization and remediation. The system utilizes production WAF traffic data to generate actionable code patches and edge-based security mitigations.

Cloudflare has prototyped the integration of Zstandard (zstd) compression within its Pingora-based cache architecture. This implementation aims to increase effective cache storage capacity on existing hardware by compressing cached objects.

Cloudflare has launched the Adaptive Intelligence engine to autonomously generate and deploy disposable bot detection rules based on live traffic meta-signals. This system shifts bot mitigation from static, deterministic rule-sets to a dynamic, self-learning model.

Cloudflare has introduced a dedicated dashboard interface for bot operators to manage their submissions. The update includes new functionality for tracking submission status, editing existing entries, and defining bot behavior models.

Five Rust-level memory optimizations to the DNS cache layout of Big Pineapple cut per-entry memory by 56%, freeing approximately 100 TB of memory across Cloudflare's fleet....

Cloudflare removed legacy daily query limitations on D1 serverless SQL database, introducing 5GB storage and 5 million daily rows read for zero cost.

We migrated the Cloudflare Blog to EmDash to prove our stack at massive scale. Here is how we stress-tested performance, safely routed production traffic, and redesigned the frontend experience....