
With Cloudflare for AI, developers, security teams and content creators can leverage Cloudflare’s network and portfolio of tools to secure, observe and make AI applications resilient and safe to use.
MT
Michael Tremante·March 19, 2025Security 
It's becoming increasingly difficult to tell the difference between web content produced by humans and web content produced by AI. In this post, we're going to look at a promising new approach to making AI content distinguishable as such without impacting the performance of the model.
TB
Teresa Brooks Mejia, Christopher Patton·March 19, 2025Performance 
By building and integrating a new heuristics framework into the Cloudflare Ruleset Engine, we now have a more flexible system to write rules, deploy new releases rapidly, and give Bot Management customers the explainability and control they were asking for.
CL
Curtis Lowder, Brian Mitchell·March 19, 2025SRE & Ops 
Learn more about how Cloudflare developed an AI model to uncover malicious JavaScript intent using a Graph Neural Network, from pre-processing data to inferencing at scale.This AI model is part of our Page Shield offering, helping make web surfing safer.
JM
Juan Miguel Cejuela, Xmflsct·March 19, 2025AI & ML 
How Cloudflare uses generative AI to slow down, confuse, and waste the resources of AI Crawlers and other bots that don’t respect “no crawl” directives.
RH
Reid, Harsh Saxena·March 19, 2025AI & ML 
Firewall for AI discovers and protects your public LLM-powered applications, and is seamlessly integrated with Cloudflare WAF. Join the beta now and take control of your generative AI security.
RC
Radwa, Clement Bertier·March 19, 2025Security 
Gain real-time insights into the ever-evolving landscape of cyber threats with our new threat events platform. This tool empowers your cybersecurity defense with actionable intelligence, allowing you to stay ahead of attacks and protect your critical assets.

Cloudflare introduces a single platform for unified security posture management, helping protect SaaS and web applications deployed across various environments. With asset discovery and threat detection, security risks can be easily managed for predictive security.
XN
Xmflsct, Noelle·March 18, 2025Security 
For Security Week 2025, we are adding several new DDoS-focused graphs, new insights into leaked credential trends, and a new Bots page to Cloudflare Radar. We are also refactoring Radar’s Security & Attacks page, breaking it out into Application Layer and Network Layer sections.

Log Explorer provides the ability to store and query Cloudflare logs natively within the Cloudflare network. Today we are excited to announce support for Zero Trust datasets, and custom dashboards where customers can monitor critical metrics for suspicious or unusual activity.

Introducing new Turnstile Analytics: Gain insight into your visitor traffic, bot behavior patterns, traffic anomalies, and attack attributes. Stay equipped with visitor attributes and the outcome of Turnstile challenges against ever-evolving attacks.
SA
Sallylee, Ana Foppa·March 18, 2025Security 
We’re thrilled to announce that organizations can now protect their sensitive corporate network traffic against quantum threats by tunneling it through Cloudflare’s Zero Trust platform. Let us worry about your corporate network’s upgrade to post-quantum cryptography so that you don’t have to.

Cloudflare is now using a wall of waves in our Lisbon, Portugal office to create entropy and strengthen Internet security, turning liquid chaos into secure, unpredictable encryption.
JT
Joao Tome, Caroline·March 17, 2025Security 
Nearly half of observed login attempts across websites protected by Cloudflare involved leaked credentials. The pervasive issue of password reuse is enabling automated bot attacks and account takeovers on a massive scale.

Enhanced security, simplified control! This Security Week, Cloudflare unveils automated botnet protection, flexible cipher suites, and an upgraded URL Scanner.

We’re excited to announce that Cloudflare for Campaigns now includes Email Security, adding an extra layer of protection to email systems that power political campaigns.

A year after signing CISA’s Secure by Design pledge, Cloudflare has made significant progress in boosting multi-factor authentication (MFA) adoption. With the recent addition of Apple and Google social logins, we’ve made secure access easier for our users.
KG
Kristina Galicova, Justin Hutchings·March 17, 2025Security 
The layer of security around today’s Internet is essential to safeguarding everything. Over the next week, we will discuss the latest trends in cyber security, announce new products and partnerships, and showcase the latest in Cloudflare technology. Welcome to Security Week 2025!

This post examines which Generative AI services are more popular, new entrants into the space, how these services have grown in traffic, where that traffic originates, and the evolution of cyberattacks targeting these services.

With Cloudflare Stream’s new Media Transformations, content owners can resize, crop, clip, and optimize short-form video, all without migrating storage.

Cloudflare Waiting Room is improving the user experience through the addition of Turnstile and Session Revocation, keeping wait times low and protecting against bot traffic.

Cloudflare’s 2024 Transparency Reports are now live — with new topics, new data points, and a new format, consistent with the EU’s Digital Services Act. Read on to learn more about Cloudflare’s longstanding commitment to transparency reporting and the key updates we made in this year’s reports.
AV
Abby Vollmer, Despina Papageorge·February 28, 2025Engineering 
The new Cloudflare Radar DNS page provides increased visibility into aggregate traffic and usage trends seen by our 1.1.1.1 resolver. In addition to global, location, and ASN traffic trends, we are also providing perspectives on protocol usage, query/response characteristics, and DNSSEC usage.
DB
David Belson, Carlos Rodrigues·February 27, 2025Networking 
Today we’re excited to share a few announcements on how we’re making it even easier to build AI agents on Cloudflare, including a new agents-sdk, a new JavaScript agents framework, and updates to Workers AI.
RS
Rita, Sunil·February 25, 2025AI & ML 
At Cloudflare, we’re proud to collaborate with the CyberPeace Institute by powering its latest initiative, the CyberPeace Tracer, a platform that enables civil society organizations to proactively report cyber threats.

The Linux kernel can produce a hung task warning. Searching the Internet and the kernel docs, you can find a brief explanation that the process is stuck in the uninterruptible state. That explains the warning’s meaning, but doesn’t provide the reason it occurred. In this blog post we’re going to explore how the warning works.
OJ
Oxana, Jesper Brouer·February 14, 2025Systems 
This blog examines how diverse cultural celebrations — from Western Christmas to Orthodox and Lunar New Year festivities — shape global Internet traffic, revealing consistent offline patterns, and compares these trends with those observed in 2023.

Cloudflare was recently contacted by researchers who discovered a broadcast amplification vulnerability through their QUIC Internet measurement research. Since being notified about this vulnerability, we've implemented a mitigation to help secure our infrastructure.
JC
Josephine Chow, June Slater·February 10, 2025Networking 
On Thursday, February 6, 2025, we experienced an outage with our object storage service (R2) and products that rely on it. Here's what happened and what we're doing to fix this going forward.
SJ
Silverlock, Javier·February 7, 2025SRE & Ops 
Cloudflare achieves ENS certification, and intends to pursue FedRAMP High and IRAP.
WE
Wesley, Emily Bragaw·February 5, 2025Security 
Media and journalism companies can now build end-to-end workflows that support Content Credentials by using Cloudflare Images.

After a rather busy third quarter, the fourth quarter of 2024 saw significantly fewer Internet disruptions. This quarter, notable outages were caused by cable cuts, power outages, natural disasters, military action, maintenance, and government direction. Read on for the details.

Cloudflare is the first organisation globally to announce we have been successfully audited against the brand-new international ‘Global Cross-Border Privacy Rules’ system and the brand new ‘Global Privacy Rules for Processors’. Cloudflare will be certified from day one when the certifications launch later in 2025.

Here we explain how we made our data pipeline scale to 700 million events per second while becoming more resilient than ever before. We share some math behind our approach and some of the designs of our systems, as well as issues that we had to face and bugs we had to chase.
CP
Constantin Pan, Jim Hawkridge·January 27, 2025Distributed 
January 27 marks the International Holocaust Remembrance Day — a solemn occasion to honor the memory of the six million Jews who perished in the Holocaust, along with countless others who fell victim

2024 ended with a bang. Cloudflare mitigated another record-breaking DDoS attack peaking at 5.6 Tbps. Overall, Cloudflare mitigated 21.3 million DDoS attacks in 2024, representing a 53% increase compared to 2023.

On January 19, 2025, ByteDance suspended TikTok and related apps for US users. We examine the 14-hour traffic plunge, recovery near Donald Trump’s inauguration, and how alternatives like RedNote surged.

On January 19, 2025, ByteDance shut down access to TikTok and other owned/operated apps for US users, causing an 85% traffic plunge and a rapid shift to alternatives like RedNote.

At Cloudflare, we treat developer content like an open source product. This collaborative approach enables global contributions to enhance quality and relevance for a wide range of users. This year, we scaled our documentation site to better meet the needs of users by migrating to the Astro ecosystem.

Multi-Path TCP (MPTCP) leverages multiple network interfaces, like Wi-Fi and cellular, to provide seamless mobility for more reliable connectivity. While promising, MPTCP is still in its early stages, with limited support and practical use cases. This post explores its potential and current limitations.

Let’s talk about Stream Live’s design, and how it leverages the distributed nature of Cloudflare’s network, rather than centralized locations as many other live services do.
KB
Kyle Boutette, Jacob Curtis·January 2, 2025Networking 
Follow along as I build a custom weather display using Cloudflare Workers and a popular e-paper display. While the embedded electronics I used have their limitations, Workers provided an elegant solution to overcome these challenges and bring the project to life.

Read about the motivation and background for h3i, along with practical examples that you can build upon for your own purposes.
LE
Lucas, Evan Rittenhouse·December 30, 2024Networking 
This roundup blog post shares the latest new features and capabilities at Cloudflare. Learn more about how our cross-platform 1.1.1.1 & WARP apps now use MASQUE, a cutting-edge HTTP/3-based protocol, to secure your Internet connection. Additionally, DEX is now generally available.

If you want to know what cache revalidation is, how it works, and why it can involve rolling a die, read on. This blog post presents a lock-free probabilistic approach to cache revalidation, along with its implementation.

How I used Workers AI to translate Cloudflare Stream’s auto-generated captions and what I learned along the way.

From Christmas Eve dinners in Europe to New Year’s Eve countdowns in Asia, Cloudflare data reveals how global festivities have typically shaped Internet usage and cultural rhythms, drawing insights from the previous holiday season.

In 2024, as elections took place across over 60 countries, the Internet became both a battleground for cyberattacks and a vital platform for democratic engagement.

Cloudflare observed a 4x increase in bot-related traffic on Black Friday in 2024. 29% of all traffic on our network on Black Friday was Grinch Bots wreaking holiday havoc.
AJ
Avi Jaisinghani, Adam Martinetti·December 23, 2024Networking 
Want Claude to interact with your app directly? Build an MCP server on Workers. That will enable you to connect your service directly, allowing Claude to understand and run tasks on your behalf.

Bring ChatGPT to your next video meeting with Cloudflare Calls.
WA
Will Allen, Astroza·December 20, 2024AI & ML 
As threats evolve, SOC teams must adapt their operations. With Cloudflare’s holistic approach to managing user-based risk, SOC teams can operate more efficiently and reduce the likelihood of a breach.
AJ
Ayush, Justin Knapp·December 19, 2024Security 
The 2024 Cloudflare Radar Year in Review is our fifth annual review of Internet trends and patterns at both a global and country/region level. For 2024, we added several new metrics, as well as the ability to do year-over-year and geographic comparisons for selected metrics.

The 2024 popular Internet services landscape highlights rising generative AI, e-commerce shifts, and the continued dominance of platforms like Google and Facebook, as revealed by Cloudflare’s rankings.
JT
Joao Tome·December 9, 2024AI & ML 
How significant are Cyber Week shopping days on the Internet? Is it a global phenomenon? Does E-commerce interest peak on Black Friday or Cyber Monday, and are attacks increasing during this time? We try to answer these questions and more.

On November 14, 2024, Cloudflare experienced a Cloudflare Logs outage, impacting the majority of customers using these products. During the ~3.5 hours that these services were impacted, about 55% of the logs we normally send to customers were not sent and were lost. The details of what went wrong and why are interesting both for customers and practitioners.
JT
Jamie, Tom Walwyn·November 26, 2024SRE & Ops 
If we plot the metrics associated with large DDoS attacks observed in the last 10 years, does it show a straight, steady increase in an exponential curve that keeps becoming steeper, or is it closer to a linear growth? Our analysis found the growth is not linear but rather is exponential, with the slope varying depending on the metric (rps, pps or bps).
JS
Jose Salvador·November 20, 2024Security 
Two recent cable cuts that occurred in the Baltic Sea resulted in little-to-no observable impact to the affected countries, in large part because of the significant redundancy and resilience of Internet infrastructure in Europe.

We used Cloudflare’s Developer Platform and Durable Objects to build authentication and a WebSockets API that developers can use to call AI Gateway, enabling continuous communication over a single, persistent connection.
CP
Catarina Pires Mota, Gabriel Massadas·November 19, 2024Security 
Cloudflare customers can now create Account Owned Tokens, allowing more flexibility around access control for their Cloudflare services. Additionally, Zaraz Automation Actions streamlines event tracking and third-party tool integration.