Containers are available in public beta for simple, global, and programmable compute
Cloudflare Containers are now available in public beta. Deploy simple, global, and programmable containers alongside your Workers.
Everything you need to know about NIST’s new guidance in “SP 1800-35: Implementing a Zero Trust Architecture”
We read NIST’s new guidance on “Implementing a Zero-Trust Architecture” so that you don’t have to. Read this to get the key points on the newly-released NIST Special Publication 1800-35.
Defending the Internet: How Cloudflare blocked a monumental 7.3 Tbps DDoS attack
In mid-May 2025, blocked the largest DDoS attack ever recorded: a staggering 7.3 terabits per second (Tbps).
Connect any React application to an MCP server in three lines of code
We're open-sourcing use-mcp, a React library that connects to any MCP server in just 3 lines of code, as well as our AI Playground, a complete chat interface that can connect to remote MCP servers.
Cloudflare Log Explorer is now GA, providing native observability and forensics
We are happy to announce the General Availability of Cloudflare Log Explorer, a powerful product designed to bring observability and forensics capabilities directly into your Cloudflare dashboard.
Cloudflare service outage June 12, 2025
Today, June 12, 2025, Cloudflare suffered a significant service outage that affected a large set of our critical services, including Workers KV, WARP, Access, Gateway, Images, Stream, Workers AI, Turnstile and Challenges, AutoRAG, and parts of the Cloudflare Dashboard.
Celebrating 11 years of Project Galileo’s global impact
June 2025 marks the 11th anniversary of Project Galileo, Cloudflare’s effort to protect vulnerable public interest organizations from cyber threats. To celebrate, we’re sharing a new Radar report, expanding in Asia with two new partners, and highlighting stories from organizations on the front lines.
We shipped FinalizationRegistry in Workers: why you should never use it
Cloudflare Workers now support FinalizationRegistry, but just because you can use it doesn’t mean you should. Dive into the tricky world of JavaScript and WebAssembly memory management and see why newer features make life a lot easier.
Building an AI Agent that puts humans in the loop with Knock and Cloudflare’s Agents SDK
How Knock shipped an AI Agent with human-in-the-loop capabilities with Cloudflare’s Agents SDK and Cloudflare Workers.
Cloudflare named a Strong Performer in Email Security by Forrester
Forrester has recognized Cloudflare Email Security as a Strong Performer in the ‘current offering’ category in “The Forrester Wave™: Email, Messaging, And Collaboration Security Solutions.
Let’s DO this: detecting Workers Builds errors across 1 million Durable Objects
Workers Builds, our CI/CD product for deploying Workers, monitors build issues by analyzing build failure metadata spread across over one million Durable Objects.
Cloudflare named in 2025 Gartner® Magic Quadrant™ for Security Service Edge
For the third consecutive year, Gartner has named Cloudflare to the Gartner® Magic Quadrant™ for Security Service Edge (SSE) report.
Resolving a request smuggling vulnerability in Pingora
Cloudflare patched a vulnerability (CVE-2025-4366) in the Pingora OSS framework, which exposed users of the framework and Cloudflare CDN’s free tier to potential request smuggling attacks. After being notified, Cloudflare mitigated the issue within 22 hours.
Bringing connections into view: real-time BGP route visibility on Cloudflare Radar
Real-time BGP route visualization is now available on Cloudflare Radar, providing immediate insights into global Internet routing. This new feature, accessible through the updated prefix pages or the API, enables operators to gain a better understanding of prefix routing status in real time.
Performance measurements… and the people who love them
Developers have a gut-felt understanding for performance, but that intuition breaks down when systems reach Cloudflare’s scale. We need the rigor of statisticians to understand latency’s impact on users. Here we discuss our work to communicate customer-centric measurements of latency in our network.
Your IPs, your rules- enabling more efficient address space usage
IPv4 is expensive, and moving network resources around is hard. Previously, when customers wanted to use multiple Cloudflare services, they had to bring a new address range. Now, they can use their resources more efficiently, saving space and reducing operational costs.
Vulnerability transparency: strengthening security through responsible disclosure
In line with CISA’s Secure By Design pledge, Cloudflare shares its vulnerability disclosure process, CVE issuance criteria, and CNA duties. This post outlines how findings are triaged based on real-world exploitability, coordinate disclosures, and contribute to the broader security community.
Forget IPs: using cryptography to verify bot and agent traffic
Bots now browse like humans. We're proposing bots use cryptographic signatures so that website owners can verify their identity. Explanations and demonstration code can be found within the post.
First-party tags in seconds: Cloudflare integrates Google tag gateway for advertisers
Cloudflare introduces a one-click integration with Google tag gateway for advertisers.
QUIC restarts, slow problems: udpgrm to the rescue
udpgrm is a lightweight daemon for graceful restarts of UDP servers. It leverages SO_REUSEPORT and eBPF to route new and existing flows to the correct server instance. Designed for modern protocols like QUIC, udpgrm hides kernel complexity behind a clean, configurable API.
Scaling with safety: Cloudflare's approach to global service health metrics and software releases
Learn how Cloudflare tackles the challenge of scaling global service health metrics to safely release new software across our global network.
Thirteen new MCP servers from Cloudflare you can use today
You can now connect to Cloudflare's first publicly available remote Model Context Protocol (MCP) servers from any MCP client that supports remote servers.
MCP Demo Day: How 10 leading AI companies built MCP servers on Cloudflare
We’re teaming up with Anthropic, Asana, Atlassian, Block, Intercom, Linear, PayPal, Sentry, Stripe, and Webflow to launch new remote MCP servers, built on Cloudflare, to enable Claude users to manage
Bringing streamable HTTP transport and Python language support to MCP servers
We're continuing to make it easier for developers to bring their services into the AI ecosystem with the Model Context Protocol (MCP) with two new updates: support for the new Streamable HTTP transport in remote MCP servers and the ability to deploy Python-based MCP servers using FastAPI-MCP.
How the April 28, 2025, power outage in Portugal and Spain impacted Internet traffic and connectivity
A massive power outage struck significant portions of Portugal and Spain at 10:34 UTC on April 28, disrupting everyday activities and services. The power outage also caused Internet outages across both countries, impacting Internet traffic and connectivity.
Targeted by 20.5 million DDoS attacks, up 358% year-over-year: Cloudflare’s 2025 Q1 DDoS Threat Report
DDoS attacks are surging. In 2025 Q1, Cloudflare blocked +20M attacks (a 358% YoY spike) along with 5.6 Tbps and 4.8 Bpps record-breaking attacks. And that's just the beginning. Read more in our latest DDoS Threat Report.
New year, no shutdowns: the Q1 2025 Internet disruption summary
In Q1 2025, we observed Internet disruptions around the world caused by cable damage, power outages, natural disasters, fire, a cyberattack, and technical problems. Interestingly, no government-directed shutdowns were observed during the quarter.
Why I joined Cloudflare- to build world-class partnerships in EMEA
The EMEA region is a patchwork of diverse markets, industries, and regulatory environments, and it demands a partner-centric approach. That’s why I joined Cloudflare as VP of EMEA Partnerships.
Developer Week 2025 wrap-up
We’ve closed out Developer Week 2025. Here’s a quick recap of the announcements and in-depth technical explorations that went out during the week.
Why I joined Cloudflare as Chief People Officer — Kelly Russell
After years navigating the world of high-growth tech I’ve learned to recognize a truly special opportunity when I see one. That’s exactly what I have found at Cloudflare and why I’m thrilled to join as Chief People Officer.
A global virtual private cloud for building secure cross-cloud apps on Cloudflare Workers
We’re announcing Workers VPC: a global private network that allows applications deployed on Cloudflare Workers to connect to your legacy cloud infrastructure. Now, you can unlock access to your existing APIs and data in external clouds and build global, modern, cross-cloud apps on Workers.
Startup spotlight: building AI agents and accelerating innovation with Cohort #5
Explore how developers are using Cloudflare to scale AI workloads and streamline automation. Learn more about what our participants in Workers Launchpad Cohort #4 have built, and check out the latest startups participating in Cohort #5.
A next-generation Certificate Transparency log built on Cloudflare Workers
Learn about recent developments in Certificate Transparency (CT), and how we built a next-generation CT log on top of Cloudflare's Developer Platform.
Workers AI gets a speed boost, batch workload support, more LoRAs, new models, and a refreshed dashboard
We just made Workers AI inference faster with speculative decoding & prefix caching. Use our new batch inference for handling large request volumes seamlessly. Build tailored AI apps with more LoRA options. Lastly, new models and a refreshed dashboard round out this Developer Week update for Workers AI.
Startup Program update: empowering every stage of the startup journey
Cloudflare’s Startup Program offers up to $250,000 in credits for companies building on our Developer Platform across 4 tiers: $5,000, $25,000, $100,000, and $250,000.
How we simplified NCMEC reporting with Cloudflare Workflows
We transitioned to Cloudflare Workflows to manage complex, multi-step processes more efficiently. This shift replaced our queues-based architecture in our National Center for Missing & Exploited Children (NCMEC) reporting system with a structured, retryable workflow that’s easier to debug and maintain.
Simple, scalable, and global: Containers are coming to Cloudflare Workers in June 2025
Cloudflare Containers are coming this June. Run new types of workloads on our network with an experience that is simple, scalable, global and deeply integrated with Workers.
Making Super Slurper 5x faster with Workers, Durable Objects, and Queues
We re-architected Super Slurper from the ground up using our Developer Platform — leveraging Cloudflare Workers, Durable Objects, and Queues — and improved transfer speeds by up to 5x.
Just landed: streaming ingestion on Cloudflare with Arroyo and Pipelines
We’ve just shipped our new streaming ingestion service, Pipelines — and we’ve acquired Arroyo, enabling us to bring new SQL-based, stateful transformations to Pipelines and R2.
R2 Data Catalog: Managed Apache Iceberg tables with zero egress fees
R2 Data Catalog is now in public beta: a managed Apache Iceberg data catalog built directly into your R2 bucket.
Sequential consistency without borders: How D1 implements global read replication
D1, Cloudflare’s managed SQL database, announces read replication beta. In this post, we do a technical deep dive of the read replication implementation and how your queries can remain consistent across all regions.
Make your apps truly interactive with Cloudflare Realtime and RealtimeKit
Announcing Cloudflare Realtime and RealtimeKit, a complete toolkit for shipping real-time audio and video apps in days with SDKs for Kotlin, React Native, Swift, JavaScript, and Flutter.
Introducing Cloudflare Secrets Store (Beta): secure your secrets, simplify your workflow
Securely store, manage and deploy account level secrets to Cloudflare Workers through Cloudflare Secrets Store, available in beta – with role-based access control, audit logging and Wrangler support.
Introducing Workers Observability: logs, metrics, and queries – all in one place
We’ve improved Observability for Workers by announcing the General Availability of Workers Logs and the introduction of the Query Builder to help you investigate log events across all of your Workers.
Your frontend, backend, and database — now in one Cloudflare Worker
You can now deploy static sites and full-stack applications on Cloudflare Workers – the primitives are all here. Framework support for React Router v7, Astro, Vue, and more are generally available today, as is the Cloudflare Vite plugin. Connect to Postgres and MySQL databases with Hyperdrive.
Skip the setup: deploy a Workers application in seconds
You can now add a Deploy to Cloudflare button to your repository’s README when building a Workers application, making it simple for other developers to set up and deploy your project!
Deploy your Next.js app to Cloudflare Workers with the Cloudflare adapter for OpenNext
With the 1.0-beta release of the Cloudflare adapter for OpenNext, you can host your Next.js 14 and 15 applications on Cloudflare Workers.
Pools across the sea: how Hyperdrive speeds up access to databases and why we’re making it free
Hyperdrive, Cloudflare's global connection pooler, relies on some key innovations to make your database connections work. We go deep into the details of what that looks like, in celebration of announcing its availability for Free Plan customers.
Piecing together the Agent puzzle: MCP, authentication & authorization, and Durable Objects free tier
Cloudflare delivers the toolkit for AI agents with new Agents SDK support for MCP (Model Context Protocol) clients, authentication/authorization/hibernation for MCP servers, and Durable Objects free tier.
Cloudflare Workflows is now GA: production-ready durable execution
Workflows — a durable execution engine built directly on top of Workers — is now Generally Available. We’ve landed new human-in-the-loop capabilities, more scale, and more metrics: just what you need for a production-ready service.
Cloudflare acquires Outerbase to expand database and agent developer experience capabilities
Cloudflare has acquired Outerbase, expanding our database and agent developer experience capabilities.
Introducing AutoRAG: fully managed Retrieval-Augmented Generation on Cloudflare
AutoRAG is here: fully managed Retrieval-Augmented Generation (RAG) pipelines powered by Cloudflare's global network and powerful developer ecosystem. Simplify how you build and scale RAG pipelines to power your context-aware AI chatbots and search applications.
Welcome to Developer Week 2025
We’re kicking off Cloudflare’s 2025 Developer Week — our innovation week dedicated to announcements for developers.
Meta Llama 4 now available on Workers AI
Llama 4 Scout 17B Instruct is now available on Workers AI: use this multimodal, Mixture of Experts AI model on Cloudflare's serverless AI platform to build next-gen AI applications. Build products that can understand images & text, accept large context, with high performance on model quality and inference latency.
Cloudflare’s commitment to CISA Secure-By-Design pledge: delivering new kernels, faster
Cloudflare’s commitment to the CISA pledge reflects our dedication to transparency and accountability to our customers. This blog post outlines how we deliver newly patched kernels across our infrastructure in order to keep Cloudflare secure.
Improve your media pipelines with the Images binding for Cloudflare Workers
Media-rich applications require image and video pipelines that integrate seamlessly with the rest of your technology stack. Here’s how the Images binding enables you to build more flexible, programmatic workflows.
A steam locomotive from 1993 broke my yarn test
Yarn tests fail consistently at the 27-second mark. The usual suspects are swiftly eliminated to no avail. A deep dive is taken to comb through traces, only to be derailed into an unexpected crash investigation.
“You get Instant Purge, and you get Instant Purge!” — all purge methods now available to all customers
Following up on having the fastest purge in the industry, we have now increased Instant Purge quotas across all Cloudflare plans.
Three chapters at Cloudflare: Programmer to CTO to Board of Directors
Today, after more than 13 years at the company, I am joining Cloudflare’s board of directors and retiring from my full-time position as CTO.
Project Jengo for Sable — final winners!
With Cloudflare’s victory against patent trolls Sable IP and Sable Networks in the books, it’s time to close out the case’s Project Jengo competition.