Cloudflare

Cloudflare has released Clef and Clef-flash, two open-source decision models integrated into the Workers AI platform. Additionally, the company launched a reinforcement learning (RL) platform for developers to fine-tune these models using proprietary datasets.

Cloudflare is expanding its Workers AI platform to support a broader range of open-source models for local execution. The company is also deploying model-agnostic security tools designed to provide governance and protection for AI deployments across sovereign borders.

Cloudflare has launched Workers KV Instant, a new storage tier achieving sub-2ms p99 read latencies. The service guarantees 250ms global replication across the entire Cloudflare edge network.

Cloudflare OS gives everyone in your organization an agent workspace that knows how your company works and connects to its data and systems. We’re opening the waitlist for fully managed deployments that you’ll be able to...

Cloudflare has reached a cumulative total of $100 million in donated cybersecurity services through its Impact programs. This milestone represents the aggregate value of protection services provided to non-profit, governmental, and educational entities.

Cloudflare Registrar’s new search delivers fast, transparent results across 420+ extensions using Workers, Durable Objects, and WebSockets. Its expanded API and cf CLI also let agents search, register, and transfer domai...

Cloudflare Workers now includes built-in error monitoring that aggregates production failures. This feature enables the direct export of stack traces, logs, and application context to AI coding agents for automated investigation and pull request generation.

Cloudflare has introduced an Auto Router feature for AI Gateway that utilizes an edge-deployed classifier to evaluate request complexity. This system dynamically routes requests to the most cost-effective model based on a balance of output quality and token pricing.

Cloudflare has launched an adaptive security framework that integrates risk discovery, agent governance, and runtime protection. This system utilizes a continuous learning loop to automate AI-powered threat responses.

Cloudflare has introduced CryptoLabe, an internal AI-powered tool designed to automate the discovery of cryptographic implementations within their codebase. This tool maps complex dependencies to facilitate a systematic migration to post-quantum cryptographic standards by 2029.

Cloudflare is transitioning to become a formal Certificate Authority (CA) to issue its own SSL/TLS certificates. The new infrastructure integrates ACME protocol automation with Merkle Tree Certificates to support post-quantum cryptographic standards.

Cloudflare is launching a new certificate authority capable of issuing Merkle Tree Certificates (MTC). This implementation addresses the data size overhead associated with post-quantum cryptographic signatures in TLS handshakes.

Vinext 1.0 graduates from an AI experiment to a production-ready framework, letting developers run Next.js apps on Vite. This release brings advanced cache warming, broader compatibility, and an automated testing pipelin...

Cloudflare has launched 'cf', a new command-line interface that provides full coverage of the Cloudflare API with support for programmatic TypeScript configurations. Additionally, the company has open-sourced 'Forge', the internal SDK generator used to build these tools.

Cloudflare is open-sourcing the BEACON dataset, making billions of anonymized Real User Monitoring (RUM) performance records publicly available on Google BigQuery. Explore real-world Core Web Vitals, soft navigation metr...

Cloudflare is launching The Cold Start, a startup competition giving five early-stage companies five minutes on stage at Cloudflare Connect. Grand Prize winner receives $500,000 in credits, a San Francisco billboard, and...

We’ve updated Kitesurf, our Workers-based browser for AI agents, with WebMCP support, improved DOM performance, and terminal-based rendering. With over 730,000 Web Platform subtests passing, agents can now navigate compl...

Cloudflare has released Forge, an open-source CI pipeline tool designed to automate the generation of SDKs, CLIs, and documentation from API definitions. This tool decentralizes the generation process by moving it into individual team repositories to ensure continuous synchronization.

Since joining Cloudflare, VoidZero has delivered more than 80 releases that drastically speed up JavaScript compilation, linting, and testing. From a 10x faster React compiler to Vite+ 1.0, here’s how we are building fas...

Cloudflare introduced new tools to reduce server load by enabling crawlers to fetch only updated content and a framework for site owners to monetize their content when accessed by AI agents. These features address the rising strain of automated traffic, which surpassed human traffic in May 2026.

The Internet is changing more today than at any point since Cloudflare launched back on September 27, 2010. As automated traffic surpasses human activity, we reflect on the rise of AI agents, new creators, and how we can...

Cloudflare introduced Worker Previews, allowing developers to deploy isolated, production-like environments for every Git branch. This feature provides unique URLs, independent Durable Object namespaces, and separate configuration settings for each branch to enable safer pre-production testing.

Cloudflare introduced Turnstile Spin, a tool designed to automate the integration of server-side validation for Turnstile. It enables AI coding agents to automatically configure the necessary backend verification logic for website security.

External security researchers at Accomplish identified a vulnerability in Cloudflare Containers that could expose residual disk data from previous workloads. We explain how the issue worked, how we investigated it, and t...

Vary support is now available in Cache Rules on every plan. You can normalize known negotiation headers, pass exact values through to the origin when those small differences matter, or bypass cache when the variation is ...

Worker Previews gives every branch its own URL, configuration, state, and observability, so you and your agents can test changes in parallel without affecting production....

Cloudflare has officially transitioned Python Workers from beta to general availability. Developers can now execute Python code natively within the Workers runtime to interface directly with D1, R2, and Workers AI.

Cloudflare implemented a statistical optimization technique within their Pingora-based services to reduce memory consumption. This architectural change successfully reclaimed 100TB of RAM across their global network infrastructure.

Cloudflare has integrated machine learning models into its Client-Side Security product to detect evasive JavaScript-based attacks. These models are designed to identify malicious scripts that bypass traditional signature-based scanners by siphoning data or hijacking user interactions.

You can now scope access to individual Workers and assign narrower Developer Platform roles, so teammates, CI tokens, and agents get only the access they need to debug, deploy, or monitor safely....

Cloudflare is giving site owners a way to stay discoverable while disallowing AI training. New controls and an Accountable designation establish a shared model with Apple, Google, and Microsoft....

Cloudflare CASB policies introduce a native automation engine built directly on the Cloudflare developer platform to remediate SaaS risks automatically. Security teams can now design event-driven logic to revoke risky fi...

Cloudflare's 1.1.1.1 resolver now supports DNSSEC signature validation using the NIST-standardized ML-DSA-44 post-quantum algorithm. This implementation handles 2,420-byte signature payloads to ensure compatibility with quantum-resistant cryptographic standards.

Cloudflare Workers now enables Node.js compatibility by default and increases the maximum application size limit to 64 mebibytes. The platform has introduced a URL-based module registry featuring import.meta support, lazy compilation, and shared code caches.

Cloudflare has introduced Automatic Key Exchange to proactively probe TLS 1.3-capable origins for supported key agreement algorithms. The system now automatically prioritizes post-quantum cryptographic algorithms during the TLS handshake process.

Cloudflare announced general availability of Workers AI, enabling serverless AI model inference across 300+ edge datacenters alongside Vectorize vector database.

Cloudflare has integrated OpenAI Daybreak models into its Managed Defense service to automate vulnerability prioritization and remediation. The system utilizes production WAF traffic data to generate actionable code patches and edge-based security mitigations.

Cloudflare has prototyped the integration of Zstandard (zstd) compression within its Pingora-based cache architecture. This implementation aims to increase effective cache storage capacity on existing hardware by compressing cached objects.

Cloudflare has launched the Adaptive Intelligence engine to autonomously generate and deploy disposable bot detection rules based on live traffic meta-signals. This system shifts bot mitigation from static, deterministic rule-sets to a dynamic, self-learning model.

Cloudflare has introduced a dedicated dashboard interface for bot operators to manage their submissions. The update includes new functionality for tracking submission status, editing existing entries, and defining bot behavior models.

Five Rust-level memory optimizations to the DNS cache layout of Big Pineapple cut per-entry memory by 56%, freeing approximately 100 TB of memory across Cloudflare's fleet....

Cloudflare removed legacy daily query limitations on D1 serverless SQL database, introducing 5GB storage and 5 million daily rows read for zero cost.

We migrated the Cloudflare Blog to EmDash to prove our stack at massive scale. Here is how we stress-tested performance, safely routed production traffic, and redesigned the frontend experience....