The Different Ways to Select <html> in CSS
Sure, we can select the <html> element in CSS with, you know, a simple element selector, html. But what other (trivial and perhaps useless) ways can we do it?
Ideological Resistance to Patents, Followed by Reluctant Pragmatism
This article reflects on an ideological discomfort with software patents, a direct experience of patent aggression in the software industry, and the practical constraints faced by startups. It argues that while the patent system remains deeply flawed, defensive patenting can function as a shield in an asymmetric legal environment, especially for open-source innovators.
60 million Copilot code reviews and counting
How Copilot code review helps teams keep up with AI-accelerated code changes.
Scaling AI opportunity across the globe: Learnings from GitHub and Andela
Developers connected to Andela share how they’re learning AI tools inside real production workflows.
From idea to secure checkout in minutes with Stripe
You can now connect or import an existing Stripe account directly into your Vercel project, automatically configure environment variables, and move from Stripe Sandbox to production without manual key exchanges.
Always-on detections: eliminating the WAF “log versus block” trade-off
Cloudflare is introducing Attack Signature Detection and Full-Transaction Detection to provide continuous, high-fidelity security insights without the manual tuning of traditional WAFs. By correlating request payloads with server responses, we can now identify successful exploits and data exfiltration while minimizing false positives.
Defeating the deepfake: stopping laptop farms and insider threats
Cloudflare One is partnering with Nametag to combat laptop farms and AI-enhanced identity fraud by requiring identity verification during employee onboarding and via continuous authentication.
Moving from license plates to badges: the Gateway Authorization Proxy
Cloudflare’s Gateway Authorization Proxy adds support for identity-aware policies for clientless devices, securing virtual desktops, and guest networks without a device client.
Stop reacting to breaches and start preventing them with User Risk Scoring
Cloudflare One now incorporates dynamic User Risk Scores into Access policies to enable automated, adaptive security responses. This update allows teams to move beyond binary "allow/deny" rules by evaluating continuous behavior signals from both internal and third-party sources.
Mind the gap: new tools for continuous enforcement from boot to login
Cloudflare’s mandatory authentication and independent MFA protect organizations by ensuring continuous enforcement, from the moment a machine boots until sensitive resources are accessed.
3 ways product teams are building conviction faster with Figma Make
Product managers at ServiceNow, Ticketmaster, and Affirm are using Figma Make to prototype their way forward.
Introducing the 2026 Cloudflare Threat Report
There has been a fundamental shift toward industrialized cyber threats, highlighted by a record 31.4 Tbps DDoS attack and sophisticated session token theft. Our new report examines how nation-states and criminal actors have moved beyond traditional exploits to "living off the XaaS" within legitimate enterprise logic.
How Cloudy translates complex security into human action
Cloudy is our LLM-powered explanation layer built directly into Cloudflare One. Its explanations, now part of Phishnet and API CASB, can improve user decisions and SOC efficiency.
See risk, fix risk: introducing Remediation in Cloudflare CASB
Cloudflare CASB Remediation lets security teams go beyond visibility to fix risky file sharing in Microsoft 365 and Google Workspace directly from Cloudflare One, all in just a few clicks.
Our Config 2026 speakers on the biggest opportunities with AI
Here’s a first look at our speakers and how they’re interrogating craft, quality, and intention in an AI-powered world.
How we rebuilt the search architecture for high availability in GitHub Enterprise Server
Here’s how we made the search experience better, faster, and more resilient for GHES customers.
Join or host a GitHub Copilot Dev Days event near you
GitHub Copilot Dev Days is a global series of hands-on, in-person, community-led events designed to help developers explore real-world, AI-assisted coding.
Optimizing Recommendation Systems with JDK’s Vector API
By Harshad Sane
Now Shipping: Accessible UX Research, A New Smashing Book By Michele Williams — Smashing Magazine
Our newest Smashing Book, “Accessible UX Research” by Michele Williams, is finally shipping worldwide — and we couldn’t be happier! This book is about research, but you’ll also learn about assistive technology, different types of disability, and how to build accessibility into the entire design process. This thoughtful book will get you thinking about ways to make your UX research more inclusive a
Supporting additional payment methods for agentic commerce
Stripe is now the first and only provider that supports both agentic network tokens and buy now, pay later tokens in agentic commerce through a single primitive.
Scaling redirects to infinity on Vercel
Redirects are trivial at a small scale, but at millions, latency and cost become real systems problems. This is the story of how Vercel implemented bulk redirects.
Beyond the blank slate: how Cloudflare accelerates your Zero Trust journey
Project Helix simplifies and accelerates the onboarding process for Cloudflare One. By using automation and Terraform templates, this tool allows customers to quickly deploy a comprehensive, best-practice configuration in minutes.
The truly programmable SASE platform
As the only SASE platform with a native developer stack, we’re giving you the tools to build custom, real-time security logic and integrations directly at the edge.
Modernizing with agile SASE: a Cloudflare One blog takeover
In 2026, agile SASE is the engine for modernization. Discover how Cloudflare One secures humans, devices, and AI agents on a single, programmable connectivity cloud.
