Cloudflare — Cloud, Security product updates and releases, tracked on megachangelog.
Cloudflare Gateway now supports DNS64 requests via DNS location settings or EDNS option 65051, enabling IPv6-only networks to synthesize AAAA records from A records for NAT64 translation. The feature works across UDP, TCP, DoT, and DoH protocols.
Real User Monitoring in Web Analytics now breaks down Largest Contentful Paint (LCP) and Interaction to Next Paint (INP) into their constituent phases, plus splits connection time into TCP and TLS components. These sub-part metrics are available in the dashboard and queryable through the GraphQL Analytics API to help identify which specific area is impacting page performance.
Cloudflare Workers now preserves context when subrequests target BYOIP-proxied hostnames, maintaining CF-Worker headers and client signals. This ensures consistent security rule evaluation and accurate Bot Management results instead of incorrectly treating internal traffic as external.
The Cloudflare API MCP server now exposes Workers Issues as MCP Events through webhook subscriptions, allowing agents to receive real-time notifications when production failures are detected without polling. Clients can subscribe to cloudflare.alert.workers_observability_real_time_issue scoped to an account or individual Worker.
The Cloudflare Agents SDK now includes a browserTool that allows agents to maintain a persistent browser session across multiple turns, preserving tabs, cookies, and login sessions. The browser remains alive even when the Durable Object hibernates, with a 10-minute idle timeout before creating a fresh session.
This release resolves an issue where the Windows Cloudflare One Client could repeatedly disconnect and reconnect when a split tunnel configuration with hostname-based entries failed to apply.
This hotfix resolves an issue where the Cloudflare One Client for macOS would repeatedly disconnect and reconnect when a split tunnel configuration with hostname-based entries failed to apply.
Fixed an issue where the Linux client would repeatedly disconnect and reconnect when a split tunnel configuration with hostname-based entries failed to apply, improving stability for users with complex tunnel setups.
The Cloudflare Agents SDK now includes a web_search tool that enables agents to search the public web and retrieve results with titles, URLs, and descriptions. The tool integrates with web_fetch for page reading and supports multiple providers including Exa, with SDK v0.27.0 or greater required.
API Shield now supports on-demand schema learning runs, allowing you to manually trigger learning after sending representative traffic to your API instead of waiting for the weekly schedule. This enables faster testing and validation cycles.
Cloudflare unified its dashboard navigation to combine Zero Trust and main dashboard access, allowing customers to move between all products from the same navigation. Zero Trust network items were reorganized under Networking and Traffic Controls sections.
Workers requests and connections now have a grace period of up to 20 minutes during runtime updates, increased from 30 seconds. This gives long-running HTTP requests, streamed AI responses, and WebSocket sessions more time to complete before an update interrupts them.
Workers Builds now consistently posts preview URLs to GitHub pull requests and GitLab merge requests within seconds of build completion, replacing a process that previously took minutes. This enables faster testing and code review workflows.
Cloudflare WAF now includes new detections to block CVE-2026-102989 (TanStack reflected XSS) and CVE-2026-21589 (Atlassian arbitrary file access). These rules protect against recent vulnerabilities that could lead to session hijacking or unauthorized data exposure.
The Agents SDK now supports running OpenCode 2.0 on Cloudflare through the experimental OpenCodeHarness, enabling session storage in SQLite and Lifecycle jobs for resuming interrupted work. Custom tools, remote MCP servers, and skills can extend the harness while connecting to Workers AI.
Cloudflare Queues now supports jurisdictional restrictions (EU, US, FedRAMP) to ensure messages are stored and processed within specific jurisdictions, helping users comply with data residency requirements like GDPR and FedRAMP.
Agents SDK 0.28.0 introduces a beta web_fetch tool that reads URLs with support for HTML, PDF, and Office documents, automatically converting content to Markdown and paginating long responses with offset navigation. The tool lets you configure allowed hosts, response sizes, timeouts, and redirect handling.
The Cloudflare API MCP server now integrates with the Skills over MCP extension, allowing MCP clients to discover and access Cloudflare skills. Users can add the MCP server endpoint to compatible MCP clients to access these skills.
R2 now displays bandwidth usage by Cloudflare edge location in the UI, letting you see which locations consume the most bandwidth and compare read vs write traffic by specific bucket.
Cloudflare launched Clef-omni, a multimodal decision model that processes audio, video, text, and images in a single request on Workers AI. Clef-flash pricing was reduced by 58% to $0.038 per million tokens (context reduced to 24K), and Clef model performance was optimized to return decisions up to 2x faster.
Cloudflare now properly stops HTTP/3 requests when clients cancel them and reports these consistently as 499 status codes. This reduces unnecessary origin work and provides clearer visibility into client behavior across all plan types.
A new cf.appsec.request.failed_detections field lets you control how rules handle requests when security detections fail. This array of detection IDs covers content scanning, WAF attack scoring, attack signatures, leaked credentials, and AI-based PII/prompt injection/custom topic detection failures, and works across custom rules, rate limiting rules, and request header transform rules.
Markdown for Agents now uses an in-process streaming engine at the edge to convert HTML, reducing overhead and memory use. The conversion limit increased from 2 MiB to 6 MiB, and token count headers are no longer generated.
The createBatch() method now accepts an options object to create up to 100 Workflow instances in a single call, with support for creating instances by count with shared options or by providing individual instance configurations with unique IDs. The result provides details on created instances and errors, with improved error reporting for duplicate or existing IDs.
GA release for macOS Cloudflare One Client with improved split tunnel handling that no longer briefly blocks traffic during reconnects, support for non-RFC 1918 local IPv4 networks, faster connects with lower memory use, and numerous reliability fixes across DNS, reauthentication, and client stability.
This GA release improves split tunnel reliability, adds support for non-RFC 1918 local networks, optimizes connection performance with faster reconnections and lower memory usage, and includes numerous bug fixes for DNS, registration, and network handling. The client now features a service recovery mechanism that automatically restarts on system unlock and better handles large hosts files without blocking traffic.
New GA release for Linux with improved split tunnel handling that no longer briefly blocks traffic during reconnects, support for non-RFC 1918 local IPv4 networks, faster tunnel reconnections, and lower memory usage. Includes numerous stability and reliability fixes for DNS, reconnection behavior, and crash issues.
Cloudflare Organizations is now generally available for Enterprise customers and MSSP/Distributor partners, providing a top-level container for centrally managing accounts, members, analytics, and shared policies. Organization Super Administrators receive implicit access to every account in their Organization without requiring separate memberships.
AI Security for Apps now supports an updated set of categories for detecting unsafe topics in incoming prompts. The cf.llm.prompt.unsafe_topic_categories values have changed, and existing WAF custom rules referencing removed or renamed categories will no longer match.
Log Explorer datasets are now queried from the unified Logs page under Observability, which combines Log Explorer and Workers Observability datasets with a shared filter builder, SQL editor, and visualizations. The Log Explorer menu has been removed from dashboard navigation, though all enabled datasets and saved queries remain functional.
AI Gateway now returns consistent HTTP 401 responses with error code 2009 when any AI provider rejects credentials, replacing previously provider-specific error responses. Applications using the AI Gateway REST API must be updated to treat HTTP 401 as an invalid or rejected provider credential.
The DNS records page now displays a warning when you reach 85% of your DNS records quota, helping you avoid hitting limits. The warning accounts for zone-level or account-level quotas depending on your configuration.
This release adds a new detection for CVE-2026-94127, a heap-based buffer overflow vulnerability in F5 BIG-IP that could allow arbitrary code execution. It also enhances command injection protections by merging tested beta logic into the baseline rule, and refines rule metadata for Next.js cache poisoning detection.
BGP peering over IPsec and GRE tunnels is now generally available for Cloudflare WAN and Magic Transit, enabling dynamic route exchange between your devices and Cloudflare's virtual network routing table. This eliminates the need to manually update static routes as your network changes.
Cloudflare CASB now supports custom finding types, allowing security teams to write their own detection logic using Rego to identify organization-specific security conditions across SaaS and cloud integrations. Custom finding types can be scoped to specific providers and asset classes, validated for syntax errors, and integrated with CASB remediation policies for automated response.
Web Search API is now in beta, enabling AI agents and applications to search the Internet and ground responses in live information. Supports three providers (Ceramic.ai, Exa, Linkup) with Zero Data Retention, integrates with AI Gateway, and can be accessed via REST API or Workers.
The hash_in_range() function is now available on all HTTP product plans globally, allowing you to hash fields into an integer within a specified range to select a portion of requests. This enables use cases like random request sampling and controlled rollout progression with custom metadata.
Quick Tunnels can now be restricted to specific email addresses using the --allowed-mail flag in cloudflared, requiring visitors to authenticate with a one-time PIN before accessing the local service. This enables secure sharing of development servers and demos without requiring visitors to have a Cloudflare account.
D1 now supports creating databases with US jurisdiction for data residency compliance. Users can specify the us jurisdiction flag when creating databases to ensure data runs and persists within the United States.
Workers KV namespaces now support jurisdictions (EU, US, FedRAMP) to ensure data is durably stored within specific regions for compliance with data localization regulations like GDPR. Jurisdictions can only be set at namespace creation time via dashboard, Wrangler, cf CLI, or REST API.
Cloudflare Access now offers a strict service token authentication setting that enforces consistent security behavior: requests with service token headers are handled separately from regular authentication, returning 401/403 on failure instead of redirecting to login, and CF_Authorization cookies are not returned. New Zero Trust organizations created on or after October 5, 2026 have this setting enabled by default and cannot disable it.
You can now build Custom Dashboards charts from Workers Observability data using two new datasets for logs and traces, letting you visualize worker invocations, errors, performance metrics alongside HTTP traffic and security events in a single dashboard.
All Cloudflare plans now retain at least 30 days of analytics data, including HTTP requests, security events, and DNS analytics. This allows you to investigate issues retrospectively, compare performance across weeks, and distinguish spikes from trends through the dashboard, Custom Dashboards, and GraphQL API.
The Agents SDK now supports building long-running agents using the Pi Durable harness via the new PiHarness class. This enables agents to persist work durably in Durable Objects, surviving interruptions and restarts.
Cloudflare Organizations now support up to 20,000 accounts and 200,000 zones, with these limits applied at the root Organization level for sub-organizations. Enterprise and MSSP/Distributor Organizations benefit from these increased limits, while legacy reseller partners retain existing quotas.
Cloudflare launches Clef and Clef-flash, open-source decision models optimized for fast, structured decisions in AI agents. These models read input state and typed questions to return probabilities for allowed answers, enabling millisecond-latency decisions without free-form text generation. Available on Workers AI with weights open-sourced on Hugging Face under Apache 2.0.
Durable Objects now remain active during pending I/O operations like service bindings, RPC calls, and timers even when no client is connected, allowing long-running tasks such as agents to continue executing. This is the default behavior for compatibility date 2026-10-01 or later and can be controlled with compatibility flags.
Workers Web Crypto API now supports post-quantum cryptography algorithms ML-KEM and ML-DSA for key encapsulation and digital signatures. Enable via the webcrypto_modern_algorithms compatibility flag to use these new key types and operations.
Tagging targets through the Infrastructure Access Targets API now requires only the Zero Trust Write API token permission instead of both Zero Trust Write and Tag Write permissions. This simplifies the permission model for API-based target management.
Account API token creation is now available to members with the API Token Provisioning role via Dashboard, API, Terraform, or CLI, eliminating the dependency on Super Administrators. Tokens are scoped to the creator's existing permissions, and creator metadata is tracked for visibility.
Workers OAuth Provider reaches v1 with a new split API architecture that separates authorization servers from resource servers, enabling MCP servers to run independently while validating tokens over Service Bindings. The library now supports the MCP 2026-07-28 specification including Client ID Metadata Documents and issuer identification, with step-up authorization via insufficientScope() and backwards compatibility for older clients.
Rules expressions now support comparing dynamic values on both sides of equality and ordering comparisons, allowing you to compare request fields or function results with one another. For example, you can now compare the current request path with its original value.
Artifacts, Cloudflare's versioned file system with Git support, is now in open beta. It allows you to deploy repositories to Workers, programmatically manage repositories, subscribe to repository events, control data storage location, and monitor usage via dashboard or API.
Cloudflare's end-to-end analytics platform Basin is now generally available, combining data collection and querying capabilities. Basin includes Pipelines for event ingestion from Workers and Logpush, Catalog for managing Apache Iceberg tables, and SQL for serverless distributed querying without compute management.
Emergency WAF update deploys protection against CVE-2026-88771, an improper input validation vulnerability in Citrix NetScaler ADC and Gateway that allows unauthenticated attackers to execute arbitrary commands. A new blocking rule has been added to the Cloudflare Managed Ruleset.
Basin Pipelines stream ingest limit increased from 5 MB/s to 1 GB/s, allowing high-volume applications to handle more events, telemetry, and logs without requiring stream splitting.
The coalesce() function now returns the first non-nil argument, allowing you to provide fallback values in rule expressions for handling missing or undefined parameters.
AI Search is now generally available with usage-based billing starting November 1, 2026. The service includes hybrid search by default, multimodal embedding model support, OCR for PDFs, and integrated Workers AI embeddings and reranking at no additional cost.
Cloudflare Containers now support the durable_object scheduling policy in public beta, allowing Durable Objects to dynamically select container images and instance sizes at runtime rather than using a centrally managed configuration. This enables per-instance customization and includes support for custom images configured in Wrangler and a new cloudflare/debian-trixie managed image.
Cloudflare Containers now support snapshot APIs in public beta, allowing developers to save and restore point-in-time filesystem state. Use snapshotContainer() to capture the full container filesystem and pass the snapshot handle to start() to restore files after container sleep, restart, or handoff to another Durable Object.
Sandbox SDK 1.0 is now available, enabling direct control of each sandbox container through the Durable Object container API. You can choose images and instance sizes per sandbox, create snapshots, manage lifecycle, run commands with streamed I/O, serve previews with custom hostnames, and run agents with model tools.
This beta release includes multiple stability and reliability improvements for the Windows Cloudflare One Client, including fixes for traffic blocking during split tunnel operations, improved reauthentication, DNS reliability enhancements on low-MTU networks, and resolution of several crashes and connection issues.
Transformers for Logpush are now generally available across all plan levels, allowing users to filter, reshape, and redact log data using SQL before delivery. The feature includes 1 GB of free monthly transformation input per account, with additional usage billed at $0.04 per GB.
Cloudflare's WAF introduces new detections for CVE-2026-85706 GitLab path traversal vulnerability and advanced generic rules targeting HTTP request smuggling, directory traversal, and command injection attacks. Multiple rule enhancements improve blocking capabilities and reduce false positives.
Logpush is now available across all Cloudflare plans (Free, Pro, Business, Enterprise) with usage-based pricing. Each account receives monthly included usage before charges apply, with rates of $0.03 per GB for internal exports and $0.10 per GB for external exports after the included 25 GB monthly allocation.
The WebSocket adapter for Cloudflare's Realtime SFU is now generally available, enabling servers to connect live WebRTC calls and receive uncompressed PCM audio and JPEG video frames for processing without implementing a WebRTC client. The SFU also improves retry logic for WebSocket connections from 5 to 15 seconds and makes the close API idempotent.
AI Gateway now supports Machine Payments in beta, enabling direct payment for inference requests using the x402 protocol from stablecoin wallets instead of prepaid credits. The feature is available for the /ai/run endpoint with select open models and currently requires US-based customers with a credit card on file.
Isolation policies now support role-based access control through Gateway's account-level and resource-scoped roles, allowing administrators to grant targeted access to HTTP policies and specific isolation policies while maintaining security boundaries.
Monetization Gateway is now available in closed beta, enabling sellers to charge agents for access to APIs, MCP tools, sites, and datasets. The gateway uses the x402 protocol to handle payment authorization within HTTP request flows.
A new beta release of the Windows Cloudflare One Client with multiple bug fixes for connectivity, DNS reliability, and UI stability, plus support for routing local IPv4 networks through WARP when enabled by policy. Key improvements include fixed split tunnel issues, better reauthentication reliability, reduced latency during TPM authentication, and elimination of the WLAN AutoConfig service dependency.
Beta release with numerous reliability improvements and bug fixes for the macOS Cloudflare One Client, including fixes for traffic blocking during reconnection, reauthentication issues, DNS handling on low-MTU networks, and several client stability and performance enhancements.
Custom container instance types can now allocate up to 20 GB of disk independent of memory, removing the previous 2:1 disk-to-memory ratio limit. This enables workloads requiring large container images, datasets, or build caches to run without disk constraints.
AI Gateway now includes User Insights that helps you analyze AI traffic patterns, group conversations by task, and identify requests that could use more cost-effective or faster models without sacrificing quality. This feature is available to all AI Gateway customers at no additional cost.
Gateway and Zero Trust Network Session Logs now identify traffic from Mesh nodes and Workers VPC with new fields including OnrampType, SourceName, SourceID, and DestinationReplicaID, enabling you to distinguish between different traffic sources and pinpoint which Tunnel or Mesh replica handled each session.
Browser Run sessions now accept multiple concurrent connections instead of one at a time, allowing multiple Workers to connect to the same browser simultaneously. Each connection uses separate browser contexts to isolate pages, cookies, and storage, reducing cold-start time and browser limits.
Workers Cache now supports invalidate(), which marks cached responses as stale instead of deleting them, allowing revalidation via conditional requests (If-None-Match/Last-Modified). This reduces bandwidth and regeneration costs when only some cached responses have changed.
WebMCP now works in both Kitesurf and Lab sessions using the document.modelContext API from the WebMCP Community Group draft. Lab sessions no longer expose navigator.modelContextTesting, and you can list and run page tools via Chrome DevTools, AI agents, or CDP clients.
Cloudflare now supports invalidating cached content, which marks it as stale and revalidates with the origin on next request. This allows efficient refreshing of specific assets while reusing unchanged content via 304 responses, using the same selectors as purge (URLs, cache tags, hostnames, prefixes).
Purge requests now force a cache miss for Cache Reserve content regardless of purge type, meaning the next request requires a full fetch from origin and triggers Class A billing. A new invalidate_cache endpoint is available to revalidate content instead of purging it, reducing origin egress at the cost of Cache Reserve operations.
Cloudflare's new command-line interface (cf) is now available in beta, providing a unified tool to manage zones, DNS, storage, security settings, and to create, develop, and deploy Workers projects without switching between tools. It supports over 2,900 API commands, Wrangler migration, and agent-friendly search functionality.
Workers can now call Workflows declared in their Wrangler configuration exports field through ctx.exports, eliminating the need for a separate workflows binding. Workflows are keyed by class name and share the same API as bindings, with local development support via Wrangler, Vite, and Vitest plugins.
Browser Run crawl jobs can now publish lifecycle events (started, updated, finished) to Cloudflare Queues, allowing you to track progress and trigger downstream processing without polling.
Email Sending suppressions now support domain-level scope in addition to account-level scope, allowing you to manage bounce and complaint suppressions per sending domain. This prevents issues with one domain from affecting suppressions across your entire account, with automatic creation of domain-level suppressions and API support for specifying scope.
Cloudflare's Web Application Firewall has added new managed rules to block critical vulnerabilities in WordPress (path traversal, LFI, XSS) and JFrog Artifactory (authentication bypass). Administrators should apply vendor patches to fully secure their origin servers.
Workers Metrics charts now display every release and the full progression of gradual deployments, making it easier to correlate performance changes like memory, CPU, errors, or latency with code versions. Hover over rollouts to see version details, duration, and traffic percentage at each step.
Workers now support additional OpenTelemetry span APIs including getActiveSpan(), recordException(), startSpan(), and setAttributes() for more granular instrumentation and error tracking on custom spans.
Cloudflare Advanced Network Firewall Managed Rulesets are now available for accounts using Unified Routing mode, expanding feature support across Magic Transit and Cloudflare WAN deployments.
Workers can now declare Workflows directly in the exports field of the Wrangler configuration file, eliminating the need for a workflows binding when the Worker doesn't call the Workflow itself. This enables cleaner configuration and automatic Workflow creation or updates during deployment.
MCP server portals are now generally available to all Cloudflare customers, providing a single endpoint for approved Model Context Protocol servers with activity logging. The feature now includes gateway routing for HTTP logging and DLP scanning, Code Mode policies for tool optimization, static OAuth credentials, session management, service token authentication for machine-to-machine access, and Logpush support for SIEM integration.
1.1.1.1 resolver now supports RFC 8509 root key trust anchor sentinels, allowing you to verify whether the resolver trusts a specific DNSSEC root key ahead of a key rollover. This enables testing for DNSSEC root key readiness using special sentinel domain queries.
R2 now provides product-level bandwidth usage metrics accessible via the Cloudflare dashboard and GraphQL Analytics API, allowing users to monitor upload and download throughput across all buckets or individually per bucket.
Durable Object name searches in the Cloudflare dashboard now accept up to 128 characters instead of 20, with search results and recent invocation lists displaying up to 128 characters before truncation. This applies to the object filter on the Metrics tab and object search in Data Studio.
Gateway HTTP and Network policies now support a Traffic Destination selector that identifies how traffic exits Cloudflare, enabling administrators to write policies targeting specific off-ramp methods like public Internet, Cloudflare Tunnel, WAN, or Mesh.
Users can now view account-level analytics for Images transformation usage, including request breakdowns by source type, top zones, configurations, origins, and Worker scripts. This helps identify which zones and configurations generate the most image transformation requests.
Cloudflare Mesh now includes guided onboarding in the dashboard to simplify adding and managing Mesh nodes and client devices. The updated interface provides deployment options for multiple container platforms, platform-specific installation guidance, and a unified table to manage all participants.
The concat() function in Cloudflare Rules now accepts up to 32 arguments instead of 16, enabling you to combine more request data directly in Rules expressions and simplify configurations that add dynamic headers and values to requests.
Cloudflare Access administrators can now automatically disable or delete inactive service tokens by setting an inactivity period from 30 to 365 days. Cleanup runs gradually in the background for tokens that are older than the configured period and have not authenticated during that time.
Worker Previews let you test each change in an isolated, production-like environment with its own code, configuration, URL, and observability. Each Preview gets a stable URL that updates with every push, full observability including logs and metrics, and can use production-like hostnames on custom domains for testing authentication and integrations before deploying to production.
MCP server portals can now connect to private MCP servers on your network via Cloudflare Gateway without exposing them publicly. Set up a connection using Cloudflare Tunnel or Mesh, configure a private hostname or CIDR route, and enable Gateway traffic routing.
Workers Builds now integrates with Cursor Origin repositories, enabling automatic building and deployment of production changes, preview generation for non-production branches, and build status visibility in pull requests.
97 more changes from Cloudflare. Sign up to read the whole changelog.
Sign up freeGitHub or email — no card needed.