The best problem-solving writing in software engineering — databases, performance, security, frontend and distributed systems, in one feed.
Log Explorer provides the ability to store and query Cloudflare logs natively within the Cloudflare network. Today we are excited to announce support for Zero Trust datasets, and custom dashboards where customers can monitor critical metrics for suspicious or unusual activity.
Introducing new Turnstile Analytics: Gain insight into your visitor traffic, bot behavior patterns, traffic anomalies, and attack attributes. Stay equipped with visitor attributes and the outcome of Turnstile challenges against ever-evolving attacks.
PostgreSQL powers many applications. In this blog posting you can read more about how to debug database applications effectively.
Linear’s CEO shares his approach to quality and craft—catch him at Config 2025 alongside a lineup of makers redefining tech’s future.
We’re thrilled to announce that organizations can now protect their sensitive corporate network traffic against quantum threats by tunneling it through Cloudflare’s Zero Trust platform. Let us worry about your corporate network’s upgrade to post-quantum cryptography so that you don’t have to.
Cloudflare is now using a wall of waves in our Lisbon, Portugal office to create entropy and strengthen Internet security, turning liquid chaos into secure, unpredictable encryption.
Nearly half of observed login attempts across websites protected by Cloudflare involved leaked credentials. The pervasive issue of password reuse is enabling automated bot attacks and account takeovers on a massive scale.
Enhanced security, simplified control! This Security Week, Cloudflare unveils automated botnet protection, flexible cipher suites, and an upgraded URL Scanner.
We’re excited to announce that Cloudflare for Campaigns now includes Email Security, adding an extra layer of protection to email systems that power political campaigns.
A year after signing CISA’s Secure by Design pledge, Cloudflare has made significant progress in boosting multi-factor authentication (MFA) adoption. With the recent addition of Apple and Google social logins, we’ve made secure access easier for our users.
Get the most out of Copilot with code completion, inline chat, slash commands, Copilot code review, and more.
Some critics question the agnostic nature of Web Components, with some even arguing that they are not real components. Gabriel Shoyomboa explores this topic in-depth, comparing Web Components and framework components, highlighting their strengths and trade-offs, and evaluating their performance.
The layer of security around today’s Internet is essential to safeguarding everything. Over the next week, we will discuss the latest trends in cyber security, announce new products and partnerships, and showcase the latest in Cloudflare technology. Welcome to Security Week 2025!
Scott Jehl released a course called Web Components Demystified. This is my full set of notes from Scott's course. You'll still want to take the course on your own, and I encourage you to because Scott is an excellent teacher who makes all of this stuff extremely accessible, even to noobs like me.
Figma’s Dylan Field and YC’s Garry Tan discuss exploring the idea maze, vibe coding, and preserving craft even when the models are “cooking.”
The open source Git project just released Git 2.49. Here is GitHub’s look at some of the most interesting features and changes introduced since last time.
"PostgreSQL scales" - what does it mean? Find out what 1 trillion rows in Citus is all about in this blog post.
Strategies to quickly get up to speed, whether you’re a seasoned engineer or a newcomer to the field.
Have you thought about the security risks WordPress websites face? Anders Johansson explores why they are frequent hacker targets and shares how WordPress SQL injection attacks work and how to remove and prevent them.
Vercel welcomes Jeanne DeWitt Grosser as Chief Operating Officer. Jeanne helped take Stripe from $100M to billions, pioneered usage-based go-to-market strategies, and scaled influential developer platforms. Now, she brings that momentum to Vercel.
Critical authentication bypass vulnerabilities (CVE-2025-25291 + CVE-2025-25292) were discovered in ruby-saml up to version 1.17.0. In this blog post, we’ll shed light on how these vulnerabilities that rely on a parser differential were uncovered.
In February, we experienced two incidents that resulted in degraded performance across GitHub services.
This article describes the little known parameter stats_fetch_consistency and its potential applications for statistics collection.
For 30 years, Java has been a cornerstone of enterprise software development. Here’s why—and how to learn Java.
