Cloudflare — Cloud, Security product updates and releases, tracked on megachangelog.
A new GA release for Windows Cloudflare One Client is available, addressing an issue with building trusted certificate chains.
A new GA release of the macOS Cloudflare One Client is available. This hotfix addresses an issue with building trusted certificate chains.
A new GA release of Cloudflare One Client for Linux is now available. This hotfix addresses an issue with building trusted certificate chains.
Cloud Workload Security (CWS) is now in Beta, allowing you to apply policy controls to cloud API requests before they reach your cloud provider. Define policies with request filters and Rego checks, manage them in the Cloudflare dashboard, and enforce policies by running the CWS proxy in your environment.
Cloudflare introduces Clairic, a new extraction model for Workers AI that extracts and validates typed values from unstructured input without generating tokens. It supports multiple data types including text, numbers, dates, durations, lists, estimates, and forecasts, with confidence scoring and probability estimates.
The Cloudflare API MCP server now supports step-up authorization, allowing you to grant only required scopes initially and request additional permissions on demand as your agent performs tasks. When a scope is needed, the server returns an insufficient_scope challenge for approval, while previously granted scopes are retained.
Monitor mode allows customers to test Precursor bot detection and the interstitial challenge without affecting bot scores or challenge clearance. The interstitial is now configurable separately with sitewide defaults and per-rule customization for targeted enforcement.
Local Explorer now supports sending one-off Cron Trigger invocations to a Worker's scheduled() handler during local development, eliminating the need to manually construct request URLs. The browser interface allows invoking configured or ad hoc cron expressions, setting reusable scheduled times, and inspecting outcomes.
Cloudflare CLI 1.0.0-beta.16 adds cf docs search, allowing users and coding agents to search live Cloudflare documentation directly from the terminal, returning ranked results with titles, descriptions, and URLs. The release also standardizes command names to kebab-case, introducing breaking changes to command and flag naming.
AI Search keyword search now uses the trigram tokenizer to match Japanese, Chinese, and Korean queries, including natural-language questions. Previously, queries without spaces were treated as single exact phrases and returned no results. Users with CJK content should set keyword_tokenizer to trigram, which triggers a full reindex.
The default route limit has increased from 1,000 to 50,000 per account for CIDR and hostname routes, and new Tunnels for Platforms capability allows running more than 1,000 tunnels in a single account for improved scalability at $4.50 per additional tunnel per month.
Cloudflare WAN and Magic Transit now support BGP import and export filtering for IPsec and GRE tunnels. You can create reusable filter profiles with allow or deny actions and CIDR targets, configurable via dashboard, API, or Terraform without resetting BGP sessions.
DLP custom pattern entries can now use Cloudflare Workers to validate matches with organization-specific logic, allowing you to adjust match confidence or reject matches.
Cloudflare Gateway now integrates with Cloudflare Workers in public beta, allowing you to use the Forward action in Gateway HTTP policies to run custom code on permitted traffic without managing a separate proxy. Your Worker receives the request along with Gateway context including connection metadata, user identity, and device posture.
Cloudflare Stream's WebRTC support for delivering live video to thousands of concurrent viewers in milliseconds is now generally available with usage-based billing. The feature leverages Cloudflare Realtime primitives, supports modern WHIP/WHEP protocol standards, and includes analytics integration for monitoring and billing.
You can now create custom applications in the Application Library and reference them in Gateway DNS, Network, and HTTP policies using hostnames, IP subnets, TCP/UDP ports, or port ranges. The Application Library interface has also been improved with better search, filtering, and application management in the policy builder.
The GitHub repository picker in Workers Builds and Pages now displays only organizations and repositories that your GitHub user can access after authentication. Existing connections remain functional without requiring reauthentication.
Pipecat's PhoneLLM Mini model is now available on Cloudflare Workers AI for building voice agents and realtime AI applications. The model is optimized for fast, accurate responses in conversational scenarios without requiring reasoning mode, making it ideal for voice agent use cases where latency matters.
Nameserver sets are now available in beta for Enterprise accounts, allowing you to group custom nameserver names with Cloudflare-assigned IP addresses and assign them to multiple zones. This new approach replaces legacy custom_ns sets with reusable, immutable objects that support up to 3 IPv4 and 3 IPv6 addresses per nameserver and can leverage Advanced anycast network groups for improved resiliency.
Cloudflare Access deny redirects now include an account_id query parameter when account context is available, enabling custom block pages to identify the account that owns an application and integrate with account-scoped APIs.
Workers Builds now uses newer default versions for Node.js, Python, Ruby, Go, and package managers including Yarn, Bun, pip, pipx, Poetry, and uv. Projects with explicit version specifications will continue using their configured versions.
Cloudflare Rules now supports three new functions—trim(), trim_start(), and trim_end()—to remove surrounding bytes from values before comparison. These functions work across all HTTP products on all plans and can remove ASCII whitespace by default or custom byte sets specified as an optional parameter.
Cloudflare released an emergency WAF update with a new managed rule to block exploitation of a critical remote code execution vulnerability in popular web frameworks. The Generic Rules - Remote Code Execution detection prevents attackers from executing arbitrary system commands via malicious input with invalid path sequences.
Infrastructure applications now support configurable session duration with a default of 24 hours, set via dashboard or API. When the session duration expires, active SSH connections are closed and users must reconnect, improving security and predictability compared to the previous behavior where sessions could persist unpredictably.
Audit Logs v2 now records view actions for GET requests across Cloudflare products, providing visibility into read activity for security investigations and forensic analysis. View actions are available through the API and Logpush but excluded by default in the dashboard to reduce noise.
Cloudflare Gateway now supports DNS64 requests via DNS location settings or EDNS option 65051, enabling IPv6-only networks to synthesize AAAA records from A records for NAT64 translation. The feature works across UDP, TCP, DoT, and DoH protocols.
The Cloudflare Agents SDK now includes a browserTool that allows agents to maintain a persistent browser session across multiple turns, preserving tabs, cookies, and login sessions. The browser remains alive even when the Durable Object hibernates, with a 10-minute idle timeout before creating a fresh session.
The Cloudflare API MCP server now exposes Workers Issues as MCP Events through webhook subscriptions, allowing agents to receive real-time notifications when production failures are detected without polling. Clients can subscribe to cloudflare.alert.workers_observability_real_time_issue scoped to an account or individual Worker.
Real User Monitoring in Web Analytics now breaks down Largest Contentful Paint (LCP) and Interaction to Next Paint (INP) into their constituent phases, plus splits connection time into TCP and TLS components. These sub-part metrics are available in the dashboard and queryable through the GraphQL Analytics API to help identify which specific area is impacting page performance.
Cloudflare Workers now preserves context when subrequests target BYOIP-proxied hostnames, maintaining CF-Worker headers and client signals. This ensures consistent security rule evaluation and accurate Bot Management results instead of incorrectly treating internal traffic as external.
This release resolves an issue where the Windows Cloudflare One Client could repeatedly disconnect and reconnect when a split tunnel configuration with hostname-based entries failed to apply.
This hotfix resolves an issue where the Cloudflare One Client for macOS would repeatedly disconnect and reconnect when a split tunnel configuration with hostname-based entries failed to apply.
Fixed an issue where the Linux client would repeatedly disconnect and reconnect when a split tunnel configuration with hostname-based entries failed to apply, improving stability for users with complex tunnel setups.
The Cloudflare Agents SDK now includes a web_search tool that enables agents to search the public web and retrieve results with titles, URLs, and descriptions. The tool integrates with web_fetch for page reading and supports multiple providers including Exa, with SDK v0.27.0 or greater required.
Workers requests and connections now have a grace period of up to 20 minutes during runtime updates, increased from 30 seconds. This gives long-running HTTP requests, streamed AI responses, and WebSocket sessions more time to complete before an update interrupts them.
API Shield now supports on-demand schema learning runs, allowing you to manually trigger learning after sending representative traffic to your API instead of waiting for the weekly schedule. This enables faster testing and validation cycles.
Workers Builds now consistently posts preview URLs to GitHub pull requests and GitLab merge requests within seconds of build completion, replacing a process that previously took minutes. This enables faster testing and code review workflows.
Cloudflare unified its dashboard navigation to combine Zero Trust and main dashboard access, allowing customers to move between all products from the same navigation. Zero Trust network items were reorganized under Networking and Traffic Controls sections.
Cloudflare WAF now includes new detections to block CVE-2026-102989 (TanStack reflected XSS) and CVE-2026-21589 (Atlassian arbitrary file access). These rules protect against recent vulnerabilities that could lead to session hijacking or unauthorized data exposure.
The Agents SDK now supports running OpenCode 2.0 on Cloudflare through the experimental OpenCodeHarness, enabling session storage in SQLite and Lifecycle jobs for resuming interrupted work. Custom tools, remote MCP servers, and skills can extend the harness while connecting to Workers AI.
Cloudflare Queues now supports jurisdictional restrictions (EU, US, FedRAMP) to ensure messages are stored and processed within specific jurisdictions, helping users comply with data residency requirements like GDPR and FedRAMP.
Agents SDK 0.28.0 introduces a beta web_fetch tool that reads URLs with support for HTML, PDF, and Office documents, automatically converting content to Markdown and paginating long responses with offset navigation. The tool lets you configure allowed hosts, response sizes, timeouts, and redirect handling.
The Cloudflare API MCP server now integrates with the Skills over MCP extension, allowing MCP clients to discover and access Cloudflare skills. Users can add the MCP server endpoint to compatible MCP clients to access these skills.
A new cf.appsec.request.failed_detections field lets you control how rules handle requests when security detections fail. This array of detection IDs covers content scanning, WAF attack scoring, attack signatures, leaked credentials, and AI-based PII/prompt injection/custom topic detection failures, and works across custom rules, rate limiting rules, and request header transform rules.
Markdown for Agents now uses an in-process streaming engine at the edge to convert HTML, reducing overhead and memory use. The conversion limit increased from 2 MiB to 6 MiB, and token count headers are no longer generated.
Cloudflare now properly stops HTTP/3 requests when clients cancel them and reports these consistently as 499 status codes. This reduces unnecessary origin work and provides clearer visibility into client behavior across all plan types.
R2 now displays bandwidth usage by Cloudflare edge location in the UI, letting you see which locations consume the most bandwidth and compare read vs write traffic by specific bucket.
Cloudflare launched Clef-omni, a multimodal decision model that processes audio, video, text, and images in a single request on Workers AI. Clef-flash pricing was reduced by 58% to $0.038 per million tokens (context reduced to 24K), and Clef model performance was optimized to return decisions up to 2x faster.
The createBatch() method now accepts an options object to create up to 100 Workflow instances in a single call, with support for creating instances by count with shared options or by providing individual instance configurations with unique IDs. The result provides details on created instances and errors, with improved error reporting for duplicate or existing IDs.
GA release for macOS Cloudflare One Client with improved split tunnel handling that no longer briefly blocks traffic during reconnects, support for non-RFC 1918 local IPv4 networks, faster connects with lower memory use, and numerous reliability fixes across DNS, reauthentication, and client stability.
This GA release improves split tunnel reliability, adds support for non-RFC 1918 local networks, optimizes connection performance with faster reconnections and lower memory usage, and includes numerous bug fixes for DNS, registration, and network handling. The client now features a service recovery mechanism that automatically restarts on system unlock and better handles large hosts files without blocking traffic.
New GA release for Linux with improved split tunnel handling that no longer briefly blocks traffic during reconnects, support for non-RFC 1918 local IPv4 networks, faster tunnel reconnections, and lower memory usage. Includes numerous stability and reliability fixes for DNS, reconnection behavior, and crash issues.
Log Explorer datasets are now queried from the unified Logs page under Observability, which combines Log Explorer and Workers Observability datasets with a shared filter builder, SQL editor, and visualizations. The Log Explorer menu has been removed from dashboard navigation, though all enabled datasets and saved queries remain functional.
AI Security for Apps now supports an updated set of categories for detecting unsafe topics in incoming prompts. The cf.llm.prompt.unsafe_topic_categories values have changed, and existing WAF custom rules referencing removed or renamed categories will no longer match.
Cloudflare Organizations is now generally available for Enterprise customers and MSSP/Distributor partners, providing a top-level container for centrally managing accounts, members, analytics, and shared policies. Organization Super Administrators receive implicit access to every account in their Organization without requiring separate memberships.
The DNS records page now displays a warning when you reach 85% of your DNS records quota, helping you avoid hitting limits. The warning accounts for zone-level or account-level quotas depending on your configuration.
This release adds a new detection for CVE-2026-94127, a heap-based buffer overflow vulnerability in F5 BIG-IP that could allow arbitrary code execution. It also enhances command injection protections by merging tested beta logic into the baseline rule, and refines rule metadata for Next.js cache poisoning detection.
AI Gateway now returns consistent HTTP 401 responses with error code 2009 when any AI provider rejects credentials, replacing previously provider-specific error responses. Applications using the AI Gateway REST API must be updated to treat HTTP 401 as an invalid or rejected provider credential.
BGP peering over IPsec and GRE tunnels is now generally available for Cloudflare WAN and Magic Transit, enabling dynamic route exchange between your devices and Cloudflare's virtual network routing table. This eliminates the need to manually update static routes as your network changes.
Cloudflare CASB now supports custom finding types, allowing security teams to write their own detection logic using Rego to identify organization-specific security conditions across SaaS and cloud integrations. Custom finding types can be scoped to specific providers and asset classes, validated for syntax errors, and integrated with CASB remediation policies for automated response.
Web Search API is now in beta, enabling AI agents and applications to search the Internet and ground responses in live information. Supports three providers (Ceramic.ai, Exa, Linkup) with Zero Data Retention, integrates with AI Gateway, and can be accessed via REST API or Workers.
Quick Tunnels can now be restricted to specific email addresses using the --allowed-mail flag in cloudflared, requiring visitors to authenticate with a one-time PIN before accessing the local service. This enables secure sharing of development servers and demos without requiring visitors to have a Cloudflare account.
All Cloudflare plans now retain at least 30 days of analytics data, including HTTP requests, security events, and DNS analytics. This allows you to investigate issues retrospectively, compare performance across weeks, and distinguish spikes from trends through the dashboard, Custom Dashboards, and GraphQL API.
D1 now supports creating databases with US jurisdiction for data residency compliance. Users can specify the us jurisdiction flag when creating databases to ensure data runs and persists within the United States.
Workers KV namespaces now support jurisdictions (EU, US, FedRAMP) to ensure data is durably stored within specific regions for compliance with data localization regulations like GDPR. Jurisdictions can only be set at namespace creation time via dashboard, Wrangler, cf CLI, or REST API.
The Agents SDK now supports building long-running agents using the Pi Durable harness via the new PiHarness class. This enables agents to persist work durably in Durable Objects, surviving interruptions and restarts.
You can now build Custom Dashboards charts from Workers Observability data using two new datasets for logs and traces, letting you visualize worker invocations, errors, performance metrics alongside HTTP traffic and security events in a single dashboard.
The hash_in_range() function is now available on all HTTP product plans globally, allowing you to hash fields into an integer within a specified range to select a portion of requests. This enables use cases like random request sampling and controlled rollout progression with custom metadata.
Cloudflare Organizations now support up to 20,000 accounts and 200,000 zones, with these limits applied at the root Organization level for sub-organizations. Enterprise and MSSP/Distributor Organizations benefit from these increased limits, while legacy reseller partners retain existing quotas.
Cloudflare Access now offers a strict service token authentication setting that enforces consistent security behavior: requests with service token headers are handled separately from regular authentication, returning 401/403 on failure instead of redirecting to login, and CF_Authorization cookies are not returned. New Zero Trust organizations created on or after October 5, 2026 have this setting enabled by default and cannot disable it.
Cloudflare launches Clef and Clef-flash, open-source decision models optimized for fast, structured decisions in AI agents. These models read input state and typed questions to return probabilities for allowed answers, enabling millisecond-latency decisions without free-form text generation. Available on Workers AI with weights open-sourced on Hugging Face under Apache 2.0.
Cloudflare's end-to-end analytics platform Basin is now generally available, combining data collection and querying capabilities. Basin includes Pipelines for event ingestion from Workers and Logpush, Catalog for managing Apache Iceberg tables, and SQL for serverless distributed querying without compute management.
Account API token creation is now available to members with the API Token Provisioning role via Dashboard, API, Terraform, or CLI, eliminating the dependency on Super Administrators. Tokens are scoped to the creator's existing permissions, and creator metadata is tracked for visibility.
Artifacts, Cloudflare's versioned file system with Git support, is now in open beta. It allows you to deploy repositories to Workers, programmatically manage repositories, subscribe to repository events, control data storage location, and monitor usage via dashboard or API.
The coalesce() function now returns the first non-nil argument, allowing you to provide fallback values in rule expressions for handling missing or undefined parameters.
Workers Web Crypto API now supports post-quantum cryptography algorithms ML-KEM and ML-DSA for key encapsulation and digital signatures. Enable via the webcrypto_modern_algorithms compatibility flag to use these new key types and operations.
Tagging targets through the Infrastructure Access Targets API now requires only the Zero Trust Write API token permission instead of both Zero Trust Write and Tag Write permissions. This simplifies the permission model for API-based target management.
Durable Objects now remain active during pending I/O operations like service bindings, RPC calls, and timers even when no client is connected, allowing long-running tasks such as agents to continue executing. This is the default behavior for compatibility date 2026-10-01 or later and can be controlled with compatibility flags.
Basin Pipelines stream ingest limit increased from 5 MB/s to 1 GB/s, allowing high-volume applications to handle more events, telemetry, and logs without requiring stream splitting.
Emergency WAF update deploys protection against CVE-2026-88771, an improper input validation vulnerability in Citrix NetScaler ADC and Gateway that allows unauthenticated attackers to execute arbitrary commands. A new blocking rule has been added to the Cloudflare Managed Ruleset.
Workers OAuth Provider reaches v1 with a new split API architecture that separates authorization servers from resource servers, enabling MCP servers to run independently while validating tokens over Service Bindings. The library now supports the MCP 2026-07-28 specification including Client ID Metadata Documents and issuer identification, with step-up authorization via insufficientScope() and backwards compatibility for older clients.
Rules expressions now support comparing dynamic values on both sides of equality and ordering comparisons, allowing you to compare request fields or function results with one another. For example, you can now compare the current request path with its original value.
AI Search is now generally available with usage-based billing starting November 1, 2026. The service includes hybrid search by default, multimodal embedding model support, OCR for PDFs, and integrated Workers AI embeddings and reranking at no additional cost.
Cloudflare Containers now support snapshot APIs in public beta, allowing developers to save and restore point-in-time filesystem state. Use snapshotContainer() to capture the full container filesystem and pass the snapshot handle to start() to restore files after container sleep, restart, or handoff to another Durable Object.
Sandbox SDK 1.0 is now available, enabling direct control of each sandbox container through the Durable Object container API. You can choose images and instance sizes per sandbox, create snapshots, manage lifecycle, run commands with streamed I/O, serve previews with custom hostnames, and run agents with model tools.
Cloudflare Containers now support the durable_object scheduling policy in public beta, allowing Durable Objects to dynamically select container images and instance sizes at runtime rather than using a centrally managed configuration. This enables per-instance customization and includes support for custom images configured in Wrangler and a new cloudflare/debian-trixie managed image.
This beta release includes multiple stability and reliability improvements for the Windows Cloudflare One Client, including fixes for traffic blocking during split tunnel operations, improved reauthentication, DNS reliability enhancements on low-MTU networks, and resolution of several crashes and connection issues.
The WebSocket adapter for Cloudflare's Realtime SFU is now generally available, enabling servers to connect live WebRTC calls and receive uncompressed PCM audio and JPEG video frames for processing without implementing a WebRTC client. The SFU also improves retry logic for WebSocket connections from 5 to 15 seconds and makes the close API idempotent.
Cloudflare's WAF introduces new detections for CVE-2026-85706 GitLab path traversal vulnerability and advanced generic rules targeting HTTP request smuggling, directory traversal, and command injection attacks. Multiple rule enhancements improve blocking capabilities and reduce false positives.
Rule descriptions in logs now support up to 128 bytes, increased from 80 bytes, providing more context when investigating matched rules and making it easier to identify relevant rules. Descriptions over 128 bytes are truncated without breaking UTF-8 characters.
Logpush is now available across all Cloudflare plans (Free, Pro, Business, Enterprise) with usage-based pricing. Each account receives monthly included usage before charges apply, with rates of $0.03 per GB for internal exports and $0.10 per GB for external exports after the included 25 GB monthly allocation.
Isolation policies now support role-based access control through Gateway's account-level and resource-scoped roles, allowing administrators to grant targeted access to HTTP policies and specific isolation policies while maintaining security boundaries.
Transformers for Logpush are now generally available across all plan levels, allowing users to filter, reshape, and redact log data using SQL before delivery. The feature includes 1 GB of free monthly transformation input per account, with additional usage billed at $0.04 per GB.
AI Gateway now supports Machine Payments in beta, enabling direct payment for inference requests using the x402 protocol from stablecoin wallets instead of prepaid credits. The feature is available for the /ai/run endpoint with select open models and currently requires US-based customers with a credit card on file.
Monetization Gateway is now available in closed beta, enabling sellers to charge agents for access to APIs, MCP tools, sites, and datasets. The gateway uses the x402 protocol to handle payment authorization within HTTP request flows.
A new beta release of the Windows Cloudflare One Client with multiple bug fixes for connectivity, DNS reliability, and UI stability, plus support for routing local IPv4 networks through WARP when enabled by policy. Key improvements include fixed split tunnel issues, better reauthentication reliability, reduced latency during TPM authentication, and elimination of the WLAN AutoConfig service dependency.
Beta release with numerous reliability improvements and bug fixes for the macOS Cloudflare One Client, including fixes for traffic blocking during reconnection, reauthentication issues, DNS handling on low-MTU networks, and several client stability and performance enhancements.
Custom container instance types can now allocate up to 20 GB of disk independent of memory, removing the previous 2:1 disk-to-memory ratio limit. This enables workloads requiring large container images, datasets, or build caches to run without disk constraints.
Workers Cache now supports invalidate(), which marks cached responses as stale instead of deleting them, allowing revalidation via conditional requests (If-None-Match/Last-Modified). This reduces bandwidth and regeneration costs when only some cached responses have changed.
Gateway and Zero Trust Network Session Logs now identify traffic from Mesh nodes and Workers VPC with new fields including OnrampType, SourceName, SourceID, and DestinationReplicaID, enabling you to distinguish between different traffic sources and pinpoint which Tunnel or Mesh replica handled each session.
97 more changes from Cloudflare. Sign up to read the whole changelog.
Sign up freeGitHub or email — no card needed.