
Meta has developed an open-source AI tool to design concrete mixes that are stronger, more sustainable, and ready to build with faster—speeding up construction while reducing environmental impact. The AI tool leverages Bayesian optimization, powered by Meta’s BoTorch and Ax frameworks, and was developed with Amrize and the University of Illinois Urbana-Champaign (U of I) […]

Shopify’s Global Catalogue demonstrates the impact of multimodal LLMs on one of commerce’s hardest problems: building a unified, structured, and continuously evolving understanding of billions of product listings created by millions of merchants. At the International Conference on Learning Representations (ICLR) 2025 Expo in Singapore, we presented the core engineering behind this initiative

Learn why flip phones still matter in 2025, and how you can build and launch web apps for these tiny devices.

Welcome to the 22nd edition of the Cloudflare DDoS Threat Report. Published quarterly, this report offers a comprehensive analysis of the evolving threat landscape of Distributed Denial of Service (DDoS) attacks based on data from the Cloudflare network. In this edition, we focus on the second quarter of 2025.

On July 14th, 2025, Cloudflare made a change to our service topologies that caused an outage for 1.1.1.1 on the edge, resulting in downtime for 62 minutes for customers using the 1.1.1.1 public DNS Resolver as well as intermittent degradation of service for Gateway DNS. We’re deeply sorry for this outage. This outage was the result of an internal configuration error and not the result of an attack
AP
Ash Pallarito, Joe Abley·July 15, 2025Security 
Gartner has recognized Cloudflare as a Visionary in the 2025 Gartner® Magic Quadrant™ for SASE Platforms report. We view this evaluation as a significant recognition of our strategy to help connect and secure workspace security and coffee shop networking, through our unique connectivity cloud approach.
AC
Abe, Corey Mahan·July 15, 2025Security 
Explore how you can set Copilot coding agent up for success with custom instruction and Copilot setup steps.
CR
Chris Reddington·July 15, 2025AI & ML 
The many ways to juggle line length when working with text... including two proposed properties that could make it easier in the future.

When it comes to merging code, developers will always make the final decision. But we’re rethinking how tools like GitHub Copilot can help.

Designing a new AI feature? Where do you even begin? Here’s a simple, practical overview with useful design patterns for better AI experiences.
VF
Vitaly Friedman·July 14, 2025AI & ML 
Layout. It's one of those easy-to-learn, difficult-to-master things, like they say about playing bass. Not because it's innately difficult to, say, place two

Brands like Nuuly, Ruggable, and GitHub are designing multidimensional experiences that build customer trust, serve employee needs, and uphold core values.

This blog post is the first of a series, in which we share our journey in redesigning Quicksilver — Cloudflare’s distributed key-value store that serves over 3 billion keys per second globally. Here we discuss how we migrated from full datasets on each machine to a more scalable distributed design.
AD
Anton Dort Golts, Marten Van De Sanden·July 10, 2025Distributed 
This post is an introduction for CNPG(Cloud Native PG) and describes how to create a single instance cluster.

Discover how to increase the coverage of your CodeQL CORS security by modeling developer headers and frameworks.

The Wizard of Oz method is a proven UX research tool that simulates real interactions to uncover authentic user behavior. Victor Yocco unpacks the core principles of the WOZ method, explores advanced real-world applications, and highlights its unique value, including its relevance in the emerging field of agentic AI.

Ensuring quality code suggestions from Copilot goes beyond the perfect prompt. Context is key to success when working with your AI pair programmer.
CH
Christopher Harrison·July 9, 2025AI & ML 
Cloudflare chose TimescaleDB to power its Digital Experience Monitoring and Zero Trust Analytics products. TimescaleDB is a PostgreSQL extension designed for real-time analytics and time series data, and it helped us reduce query latency by 5–35x and cut storage footprint by 33x.

This blog describes the experience related to Swiss PGday 2025. Dive in and checkout some captivating moments from the event.

Today, the Git project released new versions to address seven security vulnerabilities that affect all prior versions of Git.

Traditional page builders have shaped how we build WordPress sites for years. Let’s take a closer look at [Droip](https://droip.com/), a modern, no-code visual builder, and explore how it redefines the experience with cleaner performance, full design freedom, and zero plugin dependency.

Cloudflare's SASE platform now offers egress policies by hostname, domain, content category, and application in open beta. This makes it easy to author simple and secure policies that control the source IP addresses that an organization's Internet traffic uses to connect to external services.


As always in design, timing matters, and so do timely notifications. Let’s explore how we might improve the notifications UX. More design patterns in our Smart Interface Design Patterns, a friendly video course on UX and design patterns by Vitaly — from complex data tables and nested filters to FAQs and error messages.

Discover how Shopify uses machine learning, data, and advanced tools to help merchants succeed in the ever-changing game of commerce.
SEShopify Engineering·July 4, 2025AI & ML 
Figma’s Brand Studio designed an immersive conference that celebrated the spirit of makership at every turn.

DjVuLibre has a vulnerability that could enable an attacker to gain code execution on a Linux Desktop system when the user tries to open a crafted document.
KB
Kevin Backhouse, Antonio Morales·July 3, 2025Security 
Here's how we scaled Santa, an open-source binary authorization tool, across all Figmates’ laptops to boost endpoint security while keeping workflows seamless.

Latin American Spanish becomes Figma’s latest language for product and support localization.

As computer systems get more sophisticated we've seen a growing trend to value deep specialists. But we've found that our most effective colleagues have a skill in spanning many specialties. We are thus starting to explicitly recognize this as a first-class skill of “Expert Generalist”. We can identify the key characteristics of people with this skill - and thus recruit and promote based on it. We
UJUnmesh Joshi, Gitanjali Venkatraman, and Martin Fowler·July 2, 2025Engineering 
Learn how to streamline your development workflow with five different MCP use cases.

The mission of Open Connect, our dedicated content delivery network (CDN), is to deliver the best quality of experience (QoE) to our members. By localizing our Open Connect Appliances (OCAs), we…

CSS has evolved from a purely presentational language into one with growing logical powers — thanks to features like container queries, relational pseudo-classes, and the `if()` function. Is it still just for styling, or is it becoming something more? Gabriel Shoyombo explores how smart CSS has become over the years, where it is heading, the challenges it addresses, whether it is becoming too comp

From May 2024 to May 2025, crawler traffic rose 18%, with GPTBot growing 305% and Googlebot 96%. This blog post explores crawling activity focused on AI and search web crawlers, and how 14% of top domains now use robots.txt rules to manage them.
JT
Joao Tome, Jorge·July 1, 2025AI & ML 
Cloudflare Radar now shows how often a given AI model sends traffic to a site relative to how often it crawls that site. This information can help site owners make decisions about which AI bots to allow or block, and enables users to understand how AI usage in aggregate impacts Internet traffic.
DB
David Belson, Sam·July 1, 2025AI & ML 
It’s Content Independence Day: Cloudflare, along with a majority of the world's leading publishers and AI companies, is changing the default to block AI crawlers unless they pay creators for content.
MP
Matthew Prince·July 1, 2025AI & ML 
Pay per crawl is a new feature to allow content creators to charge AI crawlers for access to their content.
WA
Will Allen, Simon Newton·July 1, 2025AI & ML 
Bots can start authenticating to Cloudflare using public key cryptography, preventing them from being spoofed and allowing origins to have confidence in their identity.
MA
Mari, Akshat Mahajan·July 1, 2025Security 
Cloudflare is making it easier for publishers and content creators of all sizes to prevent their content from being scraped for AI training by managing robots.txt on their behalf, and allowing targeted blocking of AI crawling on sites that serve ads.
JH
Jin Hee Lee, Dipunj Gupta·July 1, 2025AI & ML 
Styling the space between layout items — the gap — has typically required some clever workarounds. But a new CSS feature changes all that with just a few simple CSS properties that make it easy, yet also flexible, to display styled separators between your layout items.

An update on Figma's path to becoming a publicly traded company: our S-1 is now public.

Bill McDermott, the Chairman and CEO of ServiceNow, is joining Figma’s Board of Directors.

A practical guide to GitHub Copilot’s agentic coding agent, chat modes, and remote MCP server so you turn issues into tested PRs with clear steps (and no hype).
CR
Chris Reddington·July 1, 2025AI & ML 
The GitHub dependency graph maps every direct and transitive dependency in your project, so you can identify risks, prioritize fixes, and keep your code secure.

Have you ever worked is legacy code? Are you curious what it takes to modernize systems at a massive scale? Pascal Hartig is joined on the latest Meta Tech Podcast by Elaine and Buping, two software engineers working on a bold project to rewrite the decades-old C code in one of Meta’s core messaging libraries […]

Bridging the gap between user research insights and actual organizational action — with a clear roadmap for impact.

We are proud to announce that Meta has officially joined the Kotlin Foundation as a gold member, marking a significant milestone in our ongoing commitment to Kotlin and the broader Android development ecosystem. Over the past several years, Meta engineers have been actively migrating our extensive Android codebase—comprising tens of millions of lines—from Java to […]

Learn how we just made Shopify's Admin 30% faster while setting it up for AI superpowers. Behind the scenes, we completely transformed how admin.shopify.com works—rebuilding a system that powers 67 million daily page views and merchants live inside to run their business.

July is just around the corner, and that means it’s time for a new collection of desktop wallpapers. Created with love by artists and designers from across the globe, they are bound to bring some good vibes to your screen. Enjoy!

AI companies are rewriting the rules of growth. In our new report, *Indexing the AI economy*, we explore the latest trends and strategies in the AI space.
LT
Lauren Thomas·June 30, 2025AI & ML 

To celebrate United Nations Micro, Small, and Medium Sized Enterprises Day, Cloudflare is sharing success stories of small businesses building and growing on our platform and providing security guides to help protect their digital presence worldwide.
JS
Jocelyn, Smrithi Ramesh·June 27, 2025Security 
Blob, Blob, Blob. What's the most effective way to create blob shapes in CSS? Turns out, as always, there are many. Let's compare them together!
JD
Juan Diego Rodríguez·June 27, 2025Frontend 
I do not come to you with answers today, but rather some observations and a lot of questions. The weird glitch Recently I was editing some video and I noticed this: Not what the finger is pointing at — the dots. Here are the separate layers this image is made up of: the background is a stock image I’ve licensed from Envato Elements: Because I use it as a background image, I’ve cranked down the exp

Use these insights to automate software security (where possible) to keep your projects safe.

Since June 9, 2025, Internet users located in Russia and connecting to the open Internet have been throttled by Russian Internet Service Providers (ISPs).

Orange Meets, our open-source video calling web application, now supports end-to-end encryption using the MLS protocol with continuous group key agreement
MR
Michael Rosenberg, Kevin Kipp·June 26, 2025Security 
KelpUI is new library that Chris Ferdinandi is developing, designed to leverage newer CSS features and Web Components. I've enjoyed following Chris as he's published an ongoing series of articles detailing his thought process behind the library, getting deep into his approach. You really get a clear picture of his strategy and I love it.

Figma’s Vice President of Software Engineering Marcel Weekes and Developer Advocate Jake Albaugh share the crucial skills engineers should learn to meet the moment.