2,099 articles from Cloudflare.
Cloudflare Load Balancing now supports Monitor Groups, allowing you to combine multiple health monitors into a single, logical assessment. Create sophisticated health checks for complex applications, define critical dependencies, and make smarter failover decisions.
Today, there's no way to audit a site’s client-side code as it changes, making it hard to trust sites that use cryptography. We preview a specification we coauthored that adds auditability to the web.
Cloudflare investigated CPU performance benchmark results for Workers, uncovering and fixing issues in infrastructure, V8 garbage collection, and OpenNext optimizations. These improvements have made Cloudflare Workers faster for all customers.
We're launching Cloudforce One REACT, a team of expert security responders designed to eliminate the gap between perimeter defense and internal incident response. The team brings unmatched threat intelligence and network-native mitigation to help organizations prepare for and respond to security crises across any environment.
84 million requests a second means even rare bugs appear often. We'll reveal how we discovered a race condition in the Go arm64 compiler and got it fixed.
We demonstrate how the open-source Payload CMS was ported to run entirely on Cloudflare's developer platform. This post details the technical work required, including building custom database and storage adapters for D1 and R2, and how we’re using Payload to help power Cloudflare TV.
On September 29, 2025, Internet connectivity was completely shut down across Afghanistan, impacting business, education, finance, and government services. It follows regional shutdowns that began several weeks prior, ostensibly to prevent “immoral activities”.
Cloudflare just turned 15! Birthday Week 2025 celebrated innovation at scale: Rust-powered core systems, post-quantum upgrades, developer access for students, PlanetScale integration, open-source partnerships, and our biggest internship program ever — 1,111 interns in 2026.
Cloudflare is using its vast traffic to send responses faster than ever before, by learning the characteristics of each individual network and tuning our congestion control system.
We’ve replaced the original core system in Cloudflare with a new modular Rust-based proxy, replacing NGINX. It’s not only substantially faster for all our customers, it’s also more secure, and lets us ship new products quicker than ever before.
Cloudflare Radar offers two new features: regional Internet traffic visibility for a more local perspective on trends and disruptions, and a new dashboard bringing insights into Certificate Transparency, the ecosystem which ensures that all website certificates are publicly visible & auditable.
We reduced Cloudflare Workers cold starts by 10x by optimistically routing to servers with already-loaded Workers. Learn how we did it here.
Today, we’re announcing two enhancements to our Application Performance suite. Observatory and Smart Shield allow you to see how the world sees your website, and make it faster with one click. Available inside the Cloudflare Dashboard today!
Cloudflare will soon automatically create an AI-optimized search index for your domain, and expose a set of ready-to-use standard APIs and tools including an MCP server, LLMs.txt, and a search API. For AI builders, Cloudflare will offer a new way to discover and retrieve web content.
AS-SETs, for better or worse, are critical data sources that help build BGP route filters across the Internet. Because these AS-SET objects are based solely on trust, they can be misused. We will cover some of the reasons why operators need to monitor the AS-SET memberships for their ASN, and now Cloudflare Radar can help.
On the Internet, being fast is what matters and at Cloudflare, we are committed to being the fastest network in the world. In this post, we will share how our network performance has changed since our last post in September 2024, and discuss the tools and processes we are using to assess network performance.
It turns out we've all been using MCP wrong. Most agents today use MCP by exposing the "tools" directly to the LLM. We tried something different: Convert the MCP tools into a TypeScript API, and then ask an LLM to write code that calls that API. The results are striking.
Over the year we have greatly expanded Node.js compatibility. There are hundreds of new Node.js APIs now available that make it easier to run existing Node.js code on our platform. This has been a major initiative for us, and we are excited to share the progress we've made.
We're making it easier for developers to build amazing things, by introducing major upgrades like external model support in AI Search (previously AutoRAG), updates to Node.js compatibility, support for larger and more concurrent container instances, and more! Plus, new tools like, transactional email, and GAed support for Workers Builds, Media Transformations, and Browser Rendering with Playwright
The Cloudflare Data Platform, launching today, is a fully-managed suite of products for ingesting, transforming, storing, and querying analytical data, built on Apache Iceberg and R2 storage.
As governments around the world eye AI for national transformation, Cloudflare champions AI sovereignty through choice: diverse tools, data control, and no vendor lock-in. We're enabling this in India, Japan, and Southeast Asia, offering local, open-source models on Workers AI, fostering innovation.
R2 SQL provides a built-in, serverless way to run ad-hoc analytic queries against your R2 Data Catalog. This post dives deep under the Iceberg into how we built this distributed engine, from its metadata-driven planner to its parallel execution model.
We’ve teamed up with PlanetScale to make shipping full-stack applications on Cloudflare Workers even easier. Connect your PlanetScale and Cloudflare accounts together and automatically get distributed connection pooling and query caching for any PlanetScale Postgres or MySQL database.
Cloudflare Workers are constantly being updated to be as secure and efficient as possible. We are further hardening Workers by making use of the latest software and hardware features. We use defense-in-depth, including V8 sandboxes and the CPU's memory protection keys, to keep your data safe.
Today, we’re launching Cloudflare Email Service. Send and receive email directly from your Workers with native bindings—no API keys needed. We're unifying email sending and routing into a single service built for developers. Sign up for the private beta.
Cloudflare is making every feature available to any customer.
Cloudflare’s Content Signals Policy gives creators a new tool to control use of their content.
To prepare for a future where powerful quantum computers come online, we've upgraded our WARP client with post-quantum cryptography. This protects both consumers and enterprises from adversaries that harvest Internet traffic now and then decrypt it in the future using powerful quantum computers.
We are proposing—as starting points—responsible AI bot principles that emphasize transparency, accountability, and respect for content access and use preferences. These are a launchpad for a larger conversation, and we recognize that there is work to be done to address many nuanced perspectives.
Cloudflare has made it even easier to enable our free child safety tooling for all customers.
The recent Salesloft breach taught us one thing: companies do not have visibility over data in SaaS applications. Cloudflare is committing to providing additional security tools to companies who use SaaS applications and downstream integrations.
We are excited to announce that Project Galileo will now include access to Cloudflare's Bot Management and AI Crawl Control services. Participants in the program, which include roughly 750 journalists, independent news organizations, and other non-profits supporting news-gathering around the world, will now have the ability to protect their websites from AI crawlers - for free.
Cloudflare is partnering with Coinbase to create the x402 Foundation and adding x402 support to the Agents SDK & MCP Servers.
Today, Cloudflare is proud to announce support for two cornerstone frameworks in the modern web ecosystem: we’re partnering with Webflow to sponsor Astro, and with Netlify to sponsor TanStack.
Cloudflare is doing anomaly detection like never before. Today, we’re sharing how we build and deploy bespoke, per-customer models to detect traffic anomalies and catch more sophisticated bots in bot management and Super Bot Fight Mode. As we develop a new generation.
Cloudflare Confidence Scorecards are now live in the Application Library. Get transparent risk ratings for SaaS and Gen-AI apps.
Introducing VibeSDK, an open-source AI "vibe coding" platform that anyone can deploy to build their own custom platform. Comes ready with code generation, sandbox environment, and project deployment.
Cap'n Web is a new open source, JavaScript-native RPC protocol for use in browsers and web servers. It provides the expressive power of Cap'n Proto, but with no schemas and no boilerplate.
We're expanding Cloudflare for Startups to include non-profits, civil society, and public interest orgs. Eligible organizations can now receive up to $250,000 in Cloudflare credits for our developer and core products, including AI, databases, and security.
Workers Launchpad program offers resources and mentorship for founders building on the Cloudflare network. Learn more about prior cohorts, where Launchpad alumni are today, and the participants of Workers Launchpad Cohort #6.
We are incredibly excited to announce our most ambitious intern program yet: Cloudflare aims to hire as many as 1,111 interns over the course of 2026.
Students in the United States over the age of 18 with a .edu email can now get one year of free access to Cloudflare developer features. Build, experiment, and launch projects with production-grade tools, plus connect with peers in our student developer community.
We're excited to announce our support of two independent, open source projects: Ladybird, an ambitious project to build a completely independent browser from the ground up, and Omarchy, an opinionated Arch Linux setup for developers.
Cloudflare launched 15 years ago this week. We like to celebrate our birthday by launching new products that give back to the Internet, which will do a lot of this week. But on this occasion we've also been thinking a lot about what's changed on the Internet and what has not.
Post-quantum cryptography protects against quantum threats using today’s hardware. Quantum tech like QKD may sound appealing, but it isn’t necessary or sufficient to secure organizations.
Tired of IP Lists? Securely connect private networks to any app by its hostname, not its IP address. This powerful routing is now built into Cloudflare Tunnel and is free for all Cloudflare One customers, simplifying your Zero Trust journey.
We’re excited to announce the start of a major upgrade to Cloudflare’s performance analytics suite: Web Analytics as part of our real user monitoring (RUM) tools will soon be combined with network-level insights to help you pinpoint performance issues anywhere on a packet’s journey — from a visitor’s browser, through Cloudflare’s network, to your origin.
Cloudflare and CrowdStrike have partnered to help SOC teams minimize manual bottlenecks. By combining Cloudflare’s SASE platform with CrowdStrike’s Falcon® Fusion SOAR, security teams can now detect and remediate cross-domain threats automatically.
Cloudflare’s Dashboard and a set of related APIs were unavailable or partially available for an hour starting on Sep 12, 17:57 UTC. The outage did not affect the serving of cached files via the Cloudflare CDN or other security features at the Cloudflare Edge.
We've implemented the node:http client and server APIs in Cloudflare Workers, allowing developers to migrate existing Node.js applications with minimal code changes. This post explains how we built a bridge between the Workers serverless environment and Node.js's traditional HTTP model, complete with examples for running frameworks like Express.js at the edge.
Unauthorized TLS certificates were issued for 1.1.1.1 by a Certification Authority without permission from Cloudflare. These rogue certificates have now been revoked. Read our blog to see how this could affect you.
An advanced threat actor, GRUB1, exploited the integration between Salesloft’s Drift chat agent and Salesforce to gain unauthorized access to Salesforce tenants of Cloudflare and many other companies.
We're at a critical inflection point where conversational AI is moving from experimental demos to production-ready systems. If you’re already a developer in the real-time AI ecosystem, we want to build the best building blocks for you to get the lowest latency at a global scale.
We're now leveraging our internal LLM, Cloudy, to generate automated summaries within our Email Security product, helping SOC teams better understand what's happening within flagged messages.
Troubleshoot network connectivity issues by using Cloudflare AI-Power to quickly self diagnose and resolve WARP client and network issues.
By mid-2025, training drives nearly 80% of AI crawling, while referrals to publishers (especially from Google) are falling. GPTBot and ClaudeBot surged, Amazonbot and Bytespider collapsed, and crawl-to-refer ratios show AI consumes far more than it sends back.
An inside look at how the Images team compared dichotomous image segmentation models to identify and isolate subjects in an image from the background.
Bring conversational search to your website so people and AI agents can ask natural language questions and get direct answers. With NLWeb, an open project by Microsoft, and Cloudflare AutoRAG, conversational search is now a one-click setup for your website.
We are extending AI-related insights on Cloudflare Radar with new industry-focused data and a breakdown of bot traffic by purpose, such as training or user action. These new views help website owners better understand the impact of AI crawlers.
Cloudflare now lets websites and bot creators use Web Bot Auth to segment agents from verified bots, making it easier for customers to allow or disallow the many types of user and partner directed bots the explosion of AI agents has created.
