Cloudflare
Runs a global network that hosts websites and AI apps and runs AI models.
- Type
- AI infrastructure
- Last shipped
- Oct 21, 2026
Everything Cloudflare shipped
October 2026
- New feature
Cloudflare turned on default web application firewall protections against the newly disclosed php2shell PHP vulnerabilities for sites whose traffic is proxied through it.
- New feature
Cloudflare's web application firewall can now match an HTTP request with its response, helping all customers spot successful exploits, data exposure, and risky misconfigurations.
- New model
Cloudflare introduced Clairic, a System One extraction model that pulls out, computes, estimates, and forecasts data from unstructured inputs.
- Availability
Cloudflare made Stream WebRTC generally available, letting developers go live from a browser and deliver ultra-low latency video to thousands of viewers.
- New model
Cloudflare added Beam, an open-weights model from Reflection AI built for token efficiency and agentic workloads, to its platform.
- New feature
Cloudflare is introducing a system that continuously checks whether Verified bots honor site preferences like robots.txt and HTTP 429 responses.
- Launch
Cloudflare introduced Void, an open-source SDK, CLI, and self-hosted platform for building full-stack Vite apps and deploying them to Cloudflare.
- New feature
Cloudflare Gateway and Data Loss Prevention now work with Cloudflare Workers through a full-stack integration with the Developer platform.
- New model
Cloudflare made Google's Gemini 4 Argon available on AI Gateway, at 50% off until December 1.
- Availability
Cloudflare made Hyperdrive MySQL support generally available for developers after fixing a rare protocol bug in query result caching.
- New model
Cloudflare made Meta's Muse Wonder model available on AI Gateway for agentic tasks.
- New feature
Cloudflare Logpush now supports Transformers, letting teams filter, redact, and reshape log streams with SQL before export.
- New feature
Cloudflare now offers on-demand CPU and memory profiling for Workers and Durable Objects, helping developers find memory leaks and performance bottlenecks.
- New model
Cloudflare added Clef-omni to its Clef model family, handling audio, video, images, and text, and lowered Clef-flash pricing with inference up to 2.0x faster.
- New feature
Cloudflare redesigned Cloudflare Radar to make real-time global traffic and outage data easier for journalists, less technical researchers, and everyday users.
- Pricing
Cloudflare launched eight updates that combine logs, traces, analytics, alerts, dashboards, querying, and telemetry export into one observability platform with simpler, more predictable pricing.
- Launch
Cloudflare opened a closed beta of a self-serve OHTTP Gateway and renamed its Privacy Gateway to Cloudflare OHTTP Relay.
- Launch
Cloudflare launched Cloudflare Traces in open beta, extending automatic tracing beyond Workers to the rest of the request path.
- New feature
Cloudflare AI Gateway now supports web search integration with Ceramic, Exa, and Linkup, letting developers add real-time web context to model calls.
- New feature
Cloudflare Quick Tunnels now support email authentication, so adding --allowed-mail to a cloudflared command limits access to listed addresses or domains, with no account needed.
- Availability
Cloudflare expanded Logpush, multi-account governance, and higher platform limits to all accounts, ending two-tier product access.
- Launch
Cloudflare launched an Account Abuse Protection dashboard that uses stateful analysis and edge-generated Hashed User IDs to help teams investigate and block account abuse.
- Launch
Cloudflare opened Artifacts in beta on the Workers Paid plan, letting developers create and fork git repos from a Worker and get events on every push.
- Availability
Cloudflare's Data Platform is now generally available and has been renamed Cloudflare Basin.
- Availability
Cloudflare AI Search is now generally available, adding visual image search, OCR for scanned PDFs, 10 MiB file uploads, and support for any chat model.
- Launch
Cloudflare launched K2, a serverless event streaming service built on R2 storage for durable, ordered log streams without managing broker clusters.
- Launch
Cloudflare opened a waitlist for Cloudflare OS, a fully managed agent workspace for organizations that connects to company data and systems.
- New feature
Cloudflare Workers now offers opt-in support for the post-quantum algorithms ML-KEM and ML-DSA.
- Launch
Cloudflare Artifacts, a Git platform for AI agents, is now in open beta with Workers bindings, data jurisdiction controls, and repository event subscriptions.
- Launch
Cloudflare launched Workers KV Instant, offering sub-2ms p99 reads and 250ms global replication with the same Workers KV API.
- New model
Cloudflare introduced Clef and Clef-flash, open-source decision models on Workers AI for fast classification and agentic workflows.
September 2026
- New feature
Cloudflare Containers now start 6x faster, let agents pick image and instance type at runtime, and offer filesystem snapshots in public beta.
- New feature
Cloudflare AI Gateway User Insights now adds task, model, turn, and user categories, free to AI Gateway users.
- New feature
Cloudflare Registrar has a new domain search covering 420+ extensions, plus an expanded API and cf CLI that let agents search, register, and transfer domains.
- New feature
Cloudflare Workers now has built-in error monitoring that groups production failures and sends context to a coding agent to investigate and open a pull request.
- Launch
Cloudflare made its Monetization Gateway available in closed beta.
- Launch
Cloudflare released Auto Router in public beta through AI Gateway.
- Launch
Cloudflare launched Pay Per Use in beta, where AI companies report use of publishers' content and Cloudflare handles billing and payouts.
- New feature
Cloudflare now learns the structure of your HTTP requests and flags deviations, adding a positive security layer that reduces attack surface.
- Availability
Cloudflare expanded Cloudforce One's Threat Events Platform to every account and introduced Threat Signals, which connects threat reporting context to WAF rules.
- New feature
Cloudflare added post-quantum encryption visibility for TLS 1.3 to HTTP Analytics, Log Explorer, and Logpush.
- Launch
Cloudflare introduced cf, an agentic command-line tool for the entire Cloudflare API that supports programmatic TypeScript configuration.
- New feature
Cloudflare updated Kitesurf, its Workers-based browser for AI agents, with WebMCP support, faster DOM performance and terminal-based rendering.
- New feature
Cloudflare added experimental Emscripten target support in Rust Workers, letting more Rust libraries and apps be built and deployed on Workers.
- Launch
Cloudflare released cf, a command-line tool that mirrors the entire Cloudflare API, and open-sourced Forge, its internal SDK generator.
- Launch
Cloudflare released Vinext 1.0, a production-ready framework that lets developers run Next.js apps on Vite, with cache warming and broader compatibility.
- Launch
Cloudflare released EmDash 1.0, a stable open source CMS for Astro with sandboxed plugins, agent-friendly workflows and a decentralized registry.
- Launch
Cloudflare launched Turnstile Spin, which uses your AI coding agent to set up server-side verification for sites with incomplete Turnstile setups.
- Launch
Cloudflare launched Worker Previews, giving each Git branch a production-like environment with its own code, configuration, URL, observability and state.
- New feature
Cloudflare added Vary support to Cache Rules on every plan, so users can normalize headers, pass values to the origin, or bypass cache.
- Launch
Cloudflare made Python Workers generally available, making Python a first-class, fully supported language on its Developer Platform.
- New model
Cloudflare added Jev from Typesafe AI to AI Gateway, a model that takes state and typed questions and returns structured answers.
- New model
Cloudflare added its first stealth model, Union Alpha, to AI Gateway, pitched as a strong price and performance option.
- New feature
Cloudflare now lets users scope access to individual Workers and assign narrower Developer Platform roles for teammates, CI tokens and agents.
- New feature
Cloudflare added a Disallow AI Training setting that lets site owners stay indexed for search while blocking the same crawler from training on content.
- New feature
Cloudflare added automatic remediation policies to Cloudflare CASB, its SaaS security product.
- New feature
Cloudflare's 1.1.1.1 resolver now validates DNSSEC signatures that use NIST's post-quantum ML-DSA-44 algorithm.
- New feature
Cloudflare Workers now enables Node.js compatibility by default, supports applications up to 64 mebibytes, and adds a URL-based module registry with clearer errors.
- Launch
Cloudflare launched Automatic Key Exchange, an extension of Automatic SSL/TLS that measures the best setting instead of guessing.
- Launch
Cloudflare opened early access to a service that ranks vulnerabilities using production traffic evidence and suggests WAF mitigations and code patches, by invitation through Managed Defense.
August 2026
- Launch
Cloudflare introduced its Adaptive Intelligence engine, which analyzes live traffic signals to automatically generate disposable bot detection rules.
- New feature
Cloudflare added a section in its dashboard where bot operators can manage their submissions.
- New model
Cloudflare made the SeeDance 2.5 video generation model available on AI Gateway.