Adaptive application security for the AI era: how Cloudflare connects code, traffic, and intelligence to stop attacks
The Cloudflare Blogby Christian Reilly·12d ago
In July, AI agents testing new cybersecurity models compromised parts of OpenAI’s infrastructure and Hugging Face’s production environment.
Using AI to chart a course for our post-quantum migration
The Cloudflare Blogby Tiago Silva·12d ago
As laboratories around the world race to build out a cryptographically relevant quantum computer, we at Cloudflare are racing towards a 2029 target deadline for full post-quantum readiness.
Next.js applications, powered by Vite: introducing Vinext 1.0
The Cloudflare Blogby Matt “TK” Taylor·13d ago
When we launched Vinext in February, it was the result of an audacious week-long AI-driven experiment to see how far one engineer, and a stack of tokens, could get to replicating the NextJS...
Introducing cf: the agentic CLI for the entire Cloudflare API
The Cloudflare Blogby Samuel Macleod·13d ago
Over the last year, agent use of Wrangler has skyrocketed. In March 2026, agents were responsible for a quarter of Wrangler use, up from single-digit percentages the year prior.
How fast is the web? Explore billions of real-user measurements with BEACON
The Cloudflare Blogby Nic Jansma·13d ago
If you work in technology, you’re probably reading this on a powerful laptop or flagship mobile on robust, lightning-fast Wi-Fi.
Supporting native Rust in Workers with the new Emscripten target for wasm-bindgen
The Cloudflare Blogby Mitch Foley·13d ago
Today we’re announcing the first public experimental preview of a feature to better support native Rust code and even Tokio-based applications just running natively on Workers: first-class support...
EmDash 1.0: the stable CMS with a secure plugin registry
The Cloudflare Blogby Noah Pham·13d ago
When we introduced EmDash on April 1 as the “spiritual successor to WordPress”, the buzz was hard to ignore.
Introducing The Cold Start: pitch your startup live at Cloudflare Connect
The Cloudflare Blogby Sunil Pai·13d ago
Sixteen years ago, Cloudflare was one of more than 1,000 startups hoping for a spot on stage at TechCrunch Disrupt. We were not, on the face of it, an obvious choice.
The road to the agentic browser: A Kitesurf update
The Cloudflare Blogby Celso Martinho·13d ago
In August, we introduced Kitesurf, a browser for the agentic age that runs entirely on Cloudflare Workers.
Introducing Forge: the open source pipeline for generating SDKs, CLIs, docs, and more
The Cloudflare Blogby Samuel Macleod·13d ago
Today we’re introducing Forge, a fresh approach to generating SDKs, CLIs, docs, and libraries. Forge is an open source, pluggable generation pipeline that anyone can deploy and run for free.
Four months of VoidZero at Cloudflare: making the open-source JavaScript toolchain faster for all humans and agents
The Cloudflare Blogby Evan You·13d ago
When VoidZero joined Cloudflare four months ago, we made a commitment to open source, promising that Vite, Vitest, Rolldown, Oxc, and Vite+ will stay open source, vendor-agnostic, and...
Cloudflare’s 2026 Annual Founders’ Letter
The Cloudflare Blogby Michelle Zatlyn·14d ago
This week Cloudflare celebrates our 16th birthday. Like many 16-year-olds, we find ourselves looking around at the world we grew up in and feeling caught between the past and future.
Agents can now set up your website’s security with Turnstile Spin
The Cloudflare Blogby Jules Lemee·16d ago
In 2023, Cloudflare declared itself free from CAPTCHAs with the launch of Turnstile, our privacy-first client-side challenge.
How Cloudflare addressed a cross-tenant data exposure vulnerability in Containers
The Cloudflare Blogby Hrushikesh Deshpande·17d ago
On September 4, 2026, Oren Yomtov, a security researcher from Accomplish, responsibly reported a vulnerability affecting Cloudflare Containers and Cloudflare Sandboxes (which is built on...
We just shipped support for the ugliest part of HTTP: Vary
The Cloudflare Blogby Zaidoon Abd Al Hadi·19d ago
The response header, Vary, has been called “the ugliest part of HTTP that we haven't yet improved.” The same post describes it as a “horrible, kludgy mechanism” with “pretty abysmal...
Introducing Worker Previews: isolated preview environments for every change your agent makes
The Cloudflare Blogby Nanda Syahrasyad·19d ago
Nothing is worse than testing out a change that works in staging, only to see it behave differently in production.
Python Workers are now generally available
The Cloudflare Blogby Hood Chatham·20d ago
We introduced Python Workers two years ago, providing a way to run Python applications in the Cloudflare Workers runtime.
Saving another 100TB of RAM with math (and Rust)
The Cloudflare Blogby Ivan Babrou·23d ago
Cloudflare operates at a scale so big that even after working here for years, it doesn’t seem real.
When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts
The Cloudflare Blogby Denzil Correa·25d ago
A modern storefront can look perfectly healthy while malicious JavaScript works underneath: siphoning affiliate revenue, hijacking searches and clicks, tampering with analytics, or asking a remote...
Give every teammate and agent the right level of access to your Workers
The Cloudflare Blogby Visal In·26d ago
As more teams — and now agents — build applications on Cloudflare's Developer Platform, having the right access controls is crucial to allow you to ship safely.
Your filters hide everything on this page. Adjust them in preferences.