All news with #cloudflare tag

🔒 Cloudflare introduces an agentic security operations harness that uses multiple AI agents and deterministic reconnaissance to reduce analyst workload and speed alert triage. The Managed Defense AI harness aggregates evidence, employs Clef for decision scoring, and leverages approved OpenAI Daybreak and Anthropic models for deeper analysis. Specialist agents run in parallel with constrained scopes to avoid hallucinations, while application code enforces data collection, provenance, and reproducibility. The system produces advisory reports, preserves evidence and gaps, and keeps analysts responsible for final decisions.

🔐 On October 11, 2026 the DNS root will replace its key-signing key (KSK) with KSK-2024 (key tag 38696). Most site operators need take no action, but operators of DNSSEC-validating resolvers must ensure their trust anchors include KSK-2024 before the switch to avoid service outages. Cloudflare’s resolvers already include the new key and offer a RFC 8509-based readiness test at dnstest.dev to check whether the resolver your browser uses trusts the new root key. The post explains KSK vs ZSK roles, RFC 5011 automatic updates, and why embedding the new anchor in resolver software helps avoid issues seen during the 2018 rollover.

🎉 Cloudflare recapped its 16th Birthday Week, detailing 46 announcements spanning open source, application security, developer tools, monetization, data platforms, and observability. Highlights include a new cf CLI and Forge pipeline, EmDash CMS, post-quantum cryptography efforts, plans to become a certificate authority, Monetization Gateway and Pay Per Use, and GA launches for Basin and K2. The company emphasized support for agents, developer ecosystems, intern contributions, and commitments to open tools and civic programs.

🎥 Cloudflare released Streamline, a developer playground demonstrating how to build custom video processing pipelines on its Developer Platform. The system pairs long-running Containers for media processing with Workers and Durable Objects for orchestration, control, and preview. Streamline supports RTMPS, HLS, webcam ingestion, live overlays, burned-in subtitles, and WebSocket preview delivery. The design emphasizes modularity, local development parity, and security for credentials and session control.

🔎 Cloudflare announced integration of a Web Search API into its AI Gateway, partnering with providers like Ceramic.ai, Exa, and Linkup. The feature supplies live, structured web snippets to agents and models, addressing stale knowledge and reducing inefficient URL guessing. Partners commit to Cloudflare's verified bot standards, transparency, and respect for robots.txt. The API is accessible via REST, Workers, and AI Gateway with observability, BYOK, and optional Zero Data Retention.

🔒 Cloudflare introduces email-based access controls for Quick Tunnels so developers and agents can publish local services securely. Add the --allowed-mail flag to cloudflared to restrict access to specific email addresses or domains; visitors verify ownership with a one-time PIN via Cloudflare Access. The design keeps authorization rules on the developer's machine while using a stateless authentication broker to validate emails, ensuring guest lists never leave the host.

🚀 Cloudflare Impact is funding civil society groups with over $7.5M in developer credits to help non-profits build secure, scalable AI tools. Project Galileo continues to protect thousands of public-interest domains while lightweight serverless services and Workers AI reduce infrastructure cost and complexity. The company launched a nonprofit startup cohort and provides engineering support to help organizations automate sensitive workflows safely.

🔍 Cloudflare introduces an Account Abuse Protection dashboard that builds stateful, privacy-preserving account overviews from login and signup activity. Using a Hashed User ID, the system aggregates network and device signals to reveal behavioral baselines and surface deviations for investigation. Early Access customers can use the workspace to move from population-level trends to individual account investigations and apply role-based access controls for PII.

📊 Cloudflare announced eight major updates to unify logs, traces, analytics, alerts, dashboards, and export capabilities into a single observability platform with simpler pricing. The release combines Workers Observability and Log Explorer into a new Logs home, introduces Cloudflare Traces in open beta, and provides a unified SQL API and native Workers binding for querying telemetry. Alerts, Custom Dashboards, Logpush availability on self-serve plans, and usage-based export/transformer pricing complete the rollout.

🛰️ Cloudflare Traces enters open beta, extending automatic distributed tracing beyond Workers to cover the entire request path. The feature records supported security rules, transformations, caching, routing, Worker execution, and origin interactions as OpenTelemetry spans, which can be exported via OTLP to compatible backends. Tracing is enabled per domain with baseline sampling and flexible Trace Rules to capture targeted, full-trace investigations without instrumenting code.

📣 Cloudflare announced that many features previously restricted to Enterprise customers are now available to Free, Pro, and Business users. The company is making advanced capabilities like Logpush, Transformers, Custom Dashboards, and expanded RBAC broadly accessible with pay-as-you-go or free tiers where possible. They also introduced self-serve multi-account creation, Organizations for unified management, resource tagging, and improved Terraform support.

🚀 Cloudflare reports it is the fastest provider in 74% of the 1,000 largest networks worldwide, up from 60% in April 2026. The update summarizes measurement methods, introduces a new approach using Cloudflare Challenge Pages, and explains how expanded data collection improved geographic and network coverage. The post highlights connection time and the trimean metric as core evaluation methods and describes plans to scale measurements while preserving user experience and privacy.

🛡️ Cloudflare announced a closed beta for its self-serve OHTTP Gateway, a paid add-on that lets customers receive Oblivious HTTP traffic with minimal setup. The Gateway decapsulates encrypted requests and encapsulates responses so app servers can accept plain HTTP while preserving separation of trust between relay and gateway. It complements Cloudflare’s existing OHTTP Relay and includes global deployment, managed keying, and Access-based authentication to protect against misuse.

📣 Today Cloudflare released two decision models, Clef and Clef-flash, hosted on Workers AI and open-sourced under Apache 2.0. The models are Jev-API compatible, include a vision encoder, and support a 64k context window. Clef prioritizes low latency and strictly typed outputs for programmatic decision workflows, and Cloudflare also introduced an RL-based fine-tuning product and partner services for custom workloads.

🎉 Cloudflare announces two public models—EuroLLM and Apertus—now available via Workers AI, plus hands-on workshops to help government cyber agencies build model-agnostic AI defenses. EuroLLM covers 35 languages including all 24 EU official languages, while Apertus is Switzerland's fully open multilingual model trained on over 15 trillion tokens. The company emphasizes choice and open standards to avoid vendor lock-in and strengthen national AI resilience.

🛠️ Cloudflare has launched Artifacts, a versioned filesystem that speaks Git and scales to millions of repositories, designed as programmable primitives developers can use to build workflows and agent-driven products. Artifacts now integrates with Workers Builds to deploy production branches and Workers Previews for other branches, supports repository events for automation, offers jurisdictional data controls, and exposes repository metrics in the dashboard. The open beta invites developers to build the next-generation Git platform for hundreds or thousands of agents working concurrently, with a competition accepting submissions through October 14, 2026.

🧭 Cloudflare’s AI Search is now generally available, combining Workers AI, Vectorize, R2, and Browser Run into a managed index and retrieval pipeline. The release adds native image embeddings, OCR for PDFs, and support for larger files, while introducing billing starting November 1, 2026 alongside a continued free tier. The service preserves both textual captions and pixel embeddings for richer multimodal retrieval and uses Matryoshka Representation Learning to keep embeddings efficient.

📣 Today Cloudflare announced K2, a public beta serverless event streaming primitive on the Developer Platform. K2 stores events as an ordered, partitioned durable log built on R2 object storage, enabling independent consumers to read at their own pace and supporting long-term retention. It targets high-scale data movement and fan-out consumption, with higher produce latency due to object storage writes. K2 integrates with Workers, supports subscriptions for parallel reads, and is available now for Workers Paid accounts with beta limits and no usage billing.

🔒 Cloudflare Workers now exposes post-quantum primitives in Web Crypto, enabling developers to experiment with ML-KEM and ML-DSA via new APIs like encapsulateBits(), decapsulateKey(), getPublicKey(), and SubtleCrypto.supports(). Available behind the webcrypto_modern_algorithms compatibility flag, this runtime-level support reduces the need to bundle third-party crypto implementations and lets libraries delegate operations to the native environment. The initial implementation on workerd uses BoringSSL and includes ML-KEM-768 and ML-DSA-44 with additional variants provisioned for testing.

🚀 Today Cloudflare announced Workers KV Instant, a new mode for Workers KV that uses Quicksilver to deliver globally replicated key-value data with immediate availability and dramatically reduced read latency. KV Instant targets infrequently updated configuration and feature-flag data, offering p99 read latencies under two milliseconds and writes replicating to the edge in ~250ms for 99% of writes. It preserves the Workers KV API with a few differences in metadata, list pagination, and a one-write-per-namespace-per-second restriction, and is launching in private beta with distinct pricing tailored to read-heavy workloads.