megachangelog
Feature

Radar Researcher adds richer sources and URL Scanner explanations

Radar Researcher now links to relevant Radar pages, reports, and blog posts, and can explain URL Scanner findings with AI. Shared conversations also open in fullscreen while preserving share URLs.

Cloudflare Radar expands the Radar Researcher ↗ beta with richer sources and new ways to investigate Internet data.

Connected insights

Radar Researcher responses can now link to relevant Radar pages, reports, and Cloudflare Blog posts.

Radar Researcher response linking to the IP Address Information and Network Quality Test pages

URL Scanner report explanations

Select Explain with AI on a URL Scanner report ↗ to have Radar Researcher explain its findings and answer follow-up questions about the scanned site.

Radar Researcher explaining findings from an example.com URL Scanner report

Improved shared sessions

Shared conversations now open in fullscreen, while the share URL remains available until you close the panel or start a new conversation.

Open Radar Researcher ↗ to explore these improvements.

radaraiurl-scannerfeaturesux

Source: original entry ↗

More from Cloudflare

Follow Cloudflare to get its new changes in your feed and email digest.

Feature

Rules - Remove surrounding bytes with trim functions

Cloudflare Rules now supports three new functions—trim(), trim_start(), and trim_end()—to remove surrounding bytes from values before comparison. These functions work across all HTTP products on all plans and can remove ASCII whitespace by default or custom byte sets specified as an optional parameter.

ruleshttpapifunctionstext-processing
Feature

Infrastructure applications support configurable session duration

Infrastructure applications now support configurable session duration with a default of 24 hours, set via dashboard or API. When the session duration expires, active SSH connections are closed and users must reconnect, improving security and predictability compared to the previous behavior where sessions could persist unpredictably.

accessinfrastructuresshsession-managementsecurity
Security2026-10-14

Emergency WAF managed rule for active RCE vulnerability

Cloudflare released an emergency WAF update with a new managed rule to block exploitation of a critical remote code execution vulnerability in popular web frameworks. The Generic Rules - Remote Code Execution detection prevents attackers from executing arbitrary system commands via malicious input with invalid path sequences.

wafsecurityrcemanaged-rulesemergency
See all Cloudflare changes →