Subscribe to receive notifications of new posts:

Secure private networking for everyone: users, nodes, agents, Workers — introducing Cloudflare Mesh

2026-04-14

Cloudflare Mesh provides secure, private network access for users, nodes, and autonomous AI agents. By integrating with Workers VPC, developers can now grant agents scoped access to private databases and APIs without manual tunnels. ...

Continue reading »
Secure private networking for everyone: users, nodes, agents, Workers — introducing Cloudflare Mesh

Securing non-human identities: automated revocation, OAuth, and scoped permissions

2026-04-14

Agents WeekAgentsSecurityProduct NewsDevelopersDeveloper Platform

Cloudflare is introducing scannable API tokens, enhanced OAuth visibility, and GA for resource-scoped permissions. These tools help developers implement a true least-privilege architecture while protecting against credential leakage. ...

Scaling MCP adoption: Our reference architecture for simpler, safer and cheaper enterprise deployments of MCP

2026-04-14

AISecurityCloudflare OneCloudflare WorkersDevelopersDeveloper PlatformMCPCloudflare AccessCloudflare GatewayAgents Week

We share Cloudflare's internal strategy for governing MCP using Access, AI Gateway, and MCP server portals. We also launch Code Mode to slash token costs and recommend new rules for detecting Shadow MCP in Cloudflare Gateway. ...

Managed OAuth for Access: make internal apps agent-ready in one click

2026-04-14

Agents WeekAgentsSecurityZero TrustSASECloudflare AccessCloudflare OneAIDevelopersDeveloper Platform

Managed OAuth for Cloudflare Access helps AI agents securely navigate internal applications. By adopting RFC 9728, agents can authenticate on behalf of users without using insecure service accounts....

Building a CLI for all of Cloudflare

2026-04-13

DevelopersDeveloper PlatformCloudflare WorkersProduct NewsD1APIAgents Week

We’re introducing cf, a new unified CLI designed for consistency across the Cloudflare platform, alongside Local Explorer for debugging local data. These tools simplify how developers and AI agents interact with our nearly 3,000 API operations. ...

Durable Objects in Dynamic Workers: Give each AI-generated app its own database

2026-04-13

Developer PlatformDevelopersAgents WeekCloudflare WorkersDurable ObjectsStorage

We’re introducing Durable Object Facets, allowing Dynamic Workers to instantiate Durable Objects with their own isolated SQLite databases. This enables developers to build platforms that run persistent, stateful code generated on-the-fly. ...

Agents have their own computers with Sandboxes GA

2026-04-13

Agents WeekAgentsContainersSandboxCloudflare WorkersDeveloper PlatformDevelopers

Cloudflare Sandboxes give AI agents a persistent, isolated environment: a real computer with a shell, a filesystem, and background processes that starts on demand and picks up exactly where it left off....

Dynamic, identity-aware, and secure Sandbox auth

2026-04-13

ContainersSandboxAgentsCloudflare Workers

Outbound Workers for Sandboxes provide a programmable, zero-trust egress proxy for AI agents. This allows developers to inject credentials and enforce dynamic security policies without exposing sensitive tokens to untrusted code. ...

Welcome to Agents Week

2026-04-12

Agents WeekAgentsCloudflare WorkersWorkers AIAIDeveloper PlatformDevelopersServerless

Cloudflare's mission has always been to help build a better Internet. Sometimes that means building for the Internet as it exists. Sometimes it means building for the Internet as it's about to become. This week, we're kicking off Agents Week, dedicated to what comes next. ...

500 Tbps of capacity: 16 years of scaling our global network

2026-04-10

Network ServicesCloudflare NetworkPeeringDDoSBGPRPKIWorkers AICloudflare WorkersAI

Cloudflare’s global network has officially crossed 500 Tbps of external capacity, enough to route more than 20% of the web and absorb the largest DDoS attacks ever recorded....

From bytecode to bytes: automated magic packet generation

2026-04-08

MalwareNetworkZ3BPFReverse Engineering

By applying symbolic execution and the Z3 theorem prover to BPF bytecode, we’ve automated the generation of malware trigger packets, cutting analysis time from hours to seconds....

Cloudflare targets 2029 for full post-quantum security

2026-04-07

Post-QuantumSecurity

Recent advances in quantum hardware and software have accelerated the timeline on which quantum attack might happen. Cloudflare is responding by moving our target for full post-quantum security to 2029....

How we built Organizations to help enterprises manage Cloudflare at scale

2026-04-06

IdentityEnterprise

Cloudflare Organizations is now in public beta, introducing a new management layer for enterprise customers with multiple accounts. Learn how we consolidated our authorization systems to enable org-wide management. ...

Why we're rethinking cache for the AI era

2026-04-02

ResearchCache

The explosion of AI-bot traffic, representing over 10 billion requests per week, has opened up new challenges and opportunities for cache design. We look at some of the ways AI bot traffic differs from humans, how this impacts CDN cache, and some early ideas for how Cloudflare is designing systems to improve the AI and human experience....

Our ongoing commitment to privacy for the 1.1.1.1 public DNS resolver

2026-04-01

1.1.1.1DNSPrivacyConsumer ServicesTransparency

Eight years ago, we launched 1.1.1.1 to build a faster, more private Internet. Today, we’re sharing the results of our latest independent examination. The result: our privacy protections are working exactly as promised....

Introducing EmDash — the spiritual successor to WordPress that solves plugin security

2026-04-01

DevelopersCloudflare WorkersOpen SourceProduct News

Today we are launching the beta of EmDash, a full-stack serverless JavaScript CMS built on Astro 6.0. It combines the features of a traditional CMS with modern security, running plugins in sandboxed Worker isolates....

Introducing Programmable Flow Protection: custom DDoS mitigation logic for Magic Transit customers

2026-03-31

BetaDDoSUDPeBPFMagic TransitNetwork Services

Magic Transit customers can now program their own DDoS mitigation logic and deploy it across Cloudflare’s global network. This enables precise, stateful mitigation for custom and proprietary UDP protocols....

Cloudflare Client-Side Security: smarter detection, now open to everyone

2026-03-30

SecurityMachine LearningJavaScriptAIProduct News

We are opening our advanced Client-Side Security tools to all users, featuring a new cascading AI detection system. By combining graph neural networks and LLMs, we've reduced false positives by up to 200x while catching sophisticated zero-day exploits....

How we use Abstract Syntax Trees (ASTs) to turn Workflows code into visual diagrams

2026-03-27

WorkflowsCloudflare WorkersDevelopers

Workflows are now visualized via step diagrams in the dashboard. Here’s how we translate your TypeScript code into a visual representation of the workflow. ...

A one-line Kubernetes fix that saved 600 hours a year

2026-03-26

KubernetesTerraformPlatform EngineeringInfrastructureSRE

When we investigated why our Atlantis instance took 30 minutes to restart, we discovered a bottleneck in how Kubernetes handles volume permissions. By adjusting the fsGroupChangePolicy, we reduced restart times to 30 seconds....

Sandboxing AI agents, 100x faster

2026-03-24

MCPWorkers AIAIAgentsDeveloper PlatformDevelopers

We’re introducing Dynamic Workers, which allow you to execute AI-generated code in secure, lightweight isolates. This approach is 100 times faster than traditional containers, enabling millisecond startup times for AI agent sandboxing....