GitHub is enabling broader access for developers in Syria following new government trade rules
With the relaxation of sanctions and export controls on Syria, GitHub will once again be broadly available to Syrian developers.
Building smarter interactions with MCP elicitation: From clunky tool calls to seamless user experiences
Explore how MCP elicitation transforms AI tool interactions by gathering missing information upfront.
Building Slack’s Anomaly Event Response
As cyberattacks evolve to unprecedented levels of sophistication and speed, the time gap between breach detection and response has never been more critical. Traditional security approaches often operate reactively, identifying compromises only after damage has occurred. This delay grants attackers a tactical advantage, forcing security teams to focus on damage assessment and remediation rather tha
Designing For TV: Principles, Patterns And Practical Guidance (Part 2) — Smashing Magazine
After covering in detail the underlying interaction paradigms of TV experiences in [Part 1](https://www.smashingmagazine.com/2025/08/designing-tv-evergreen-pattern-shapes-tv-experiences/), it’s time to get practical. In the second part of the series, you’ll explore the building blocks of the “10-foot experience” and how to best utilise them in your designs.
IDC study says the global workforce engaged in software design is expanding
IDC forecasts that the number of people involved in software design will increase from 2025 to 2029—signaling the rising importance of design as a competitive differentiator.
5 tips for writing better custom instructions for Copilot
This guide offers five essential tips for writing effective GitHub Copilot custom instructions, covering project overview, tech stack, coding guidelines, structure, and resources, to help developers get better code suggestions.
The impact of the Salesloft Drift breach on Cloudflare and our customers
An advanced threat actor, GRUB1, exploited the integration between Salesloft’s Drift chat agent and Salesforce to gain unauthorized access to Salesforce tenants of Cloudflare and many other companies.
Spec-driven development with AI: Get started with a new open source toolkit
Developers can use their AI tool of choice for spec-driven development with this open source toolkit.
A New Ranking Framework for Better Notification Quality on Instagram
We’re sharing how Meta is applying machine learning (ML) and diversity algorithms to improve notification quality and user experience. We’ve introduced a diversity-aware notification ranking framework to reduce uniformity and deliver a more varied and engaging mix of notifications. This new framework reduces the volume of notifications and drives higher engagement rates through more diverse […] Re
A Lean Syntax Primer
Programming with proofs.
Making the most of a dumb fax switcher box in the old days
A Breeze Of Inspiration In September (2025 Wallpapers Edition) — Smashing Magazine
Could there be a better way to welcome the new month than with a new collection of desktop wallpapers? We’ve got some eye-catching designs to make your September just a bit more colorful. Enjoy!
Cloudflare is the best place to build realtime voice agents
We're at a critical inflection point where conversational AI is moving from experimental demos to production-ready systems. If you’re already a developer in the real-time AI ecosystem, we want to build the best building blocks for you to get the lowest latency at a global scale.
Cloudy Summarizations of Email Detections: Beta Announcement
We're now leveraging our internal LLM, Cloudy, to generate automated summaries within our Email Security product, helping SOC teams better understand what's happening within flagged messages.
Troubleshooting network connectivity and performance with Cloudflare AI
Troubleshoot network connectivity issues by using Cloudflare AI-Power to quickly self diagnose and resolve WARP client and network issues.
The crawl-to-click gap: Cloudflare data on AI bots, training, and referrals
By mid-2025, training drives nearly 80% of AI crawling, while referrals to publishers (especially from Google) are falling. GPTBot and ClaudeBot surged, Amazonbot and Bytespider collapsed, and crawl-to-refer ratios show AI consumes far more than it sends back.
Under the hood: Exploring the AI models powering GitHub Copilot
Learn how GitHub Copilot’s evolving models and infrastructure center developer choice and power agentic workflows.
Prompting Is A Design Act: How To Brief, Guide And Iterate With AI — Smashing Magazine
Prompting is more than giving AI some instructions. You could think of it as a design act, part creative brief and part conversation design. This second article on AI augmenting design work introduces a designerly approach to prompting: one that blends creative briefing, interaction design, and structural clarity.
Evaluating image segmentation models for background removal for Images
An inside look at how the Images team compared dichotomous image segmentation models to identify and isolate subjects in an image from the background.
Make Your Website Conversational for People and Agents with NLWeb and AutoRAG
Bring conversational search to your website so people and AI agents can ask natural language questions and get direct answers. With NLWeb, an open project by Microsoft, and Cloudflare AutoRAG, conversational search is now a one-click setup for your website.
A deeper look at AI crawlers: breaking down traffic by purpose and industry
We are extending AI-related insights on Cloudflare Radar with new industry-focused data and a breakdown of bot traffic by purpose, such as training or user action. These new views help website owners better understand the impact of AI crawlers.
The age of agents: cryptographically recognizing agent traffic
Cloudflare now lets websites and bot creators use Web Bot Auth to segment agents from verified bots, making it easier for customers to allow or disallow the many types of user and partner directed bots the explosion of AI agents has created.
The next step for content creators in working with AI bots: Introducing AI Crawl Control
Cloudflare launches AI Crawl Control (formerly AI Audit) and introduces easily customizable 402 HTTP responses. Instead of blocking crawlers outright, content creators can now send "Payment Required" responses with custom messages, creating direct communication channels for AI partnerships.
From Black Box to Blueprint
A common enterprise problem: crucial legacy systems become “black boxes”—key to operations but opaque and risky to touch. We worked with a client to use AI-assisted reverse engineering to reconstruct functional specifications from UI elements, binaries, and data lineage to overcome analysis paralysis. We developed a methodical “multi-lens” approach—starting from visible artifacts, enriching increm
Some thoughts on LLMs and Software Development
I’m about to head away from looking after this site for a few weeks (part vacation, part work stuff). As I contemplate some weeks away from the daily routine, I feel an urge to share some scattered thoughts about the state of LLMs and AI.
How GitHub Models can help open source maintainers focus on what matters
Learn how GitHub Models helps open source maintainers automate repetitive tasks like issue triage, duplicate detection, and contributor onboarding — saving hours each week.
How we accelerated Secret Protection engineering with Copilot
Learn how the Secret Protection engineering team collaborated with GitHub Copilot coding agent to expand validity check coverage.
Preparing for the worst: Our core database failover test
On July 24, 2025, we successfully performed a full production failover of our core control-plane database from Azure West US to East US 2 with zero customer impact.
AI Gateway now gives you access to your favorite AI models, dynamic routing and more — through just one endpoint
AI Gateway simplifies AI app development with unified billing, secure key storage, and dynamic routing. Gain observability and control over costs, API keys, and traffic, connecting to major AI providers through a single endpoint.
How Cloudflare runs more AI models on fewer GPUs: A technical deep-dive
In order to support a growing catalog of AI models while maximizing GPU utilization, Cloudflare built an internal platform called Omni. This platform uses lightweight isolation and memory over-commitment to run multiple AI models on a single GPU, allowing us to serve inference requests closer to users and improve overall availability across our network.
How we built the most efficient inference engine for Cloudflare’s network
Existing LLM serving engines aren’t efficient enough when deployed across a globally distributed network, so we built our own, in Rust. Infire is an LLM inference engine that employs a range of techniques to maximize resource utilization, allowing us to serve AI models more efficiently and with better performance for Cloudflare workloads.
State-of-the-art image generation Leonardo models and text-to-speech Deepgram models now available in Workers AI
We're expanding Workers AI with new partner models from Leonardo.Ai and Deepgram. Start using state-of-the-art image generation models from Leonardo (Phoenix, Lucid Origin) and real-time TTS and STT models from Deepgram (Nova 3, Aura 1). Build full-stack, low-latency AI applications, all hosted on Cloudflare's global network.
Research, Review, Rebuild
The Bahmni open-source hospital management system started over nine years ago with a front end using AngularJS and an OpenMRS REST API. We wished to convert this to use a React + TypeScript front end with an HL7 FHIR API. In exploring how to do this modernization we used a structured prompting workflow of Research, Review, and Rebuild - together with Cline, Claude 3.5 Sonnet, Atlassian MCP server,
Building your own CLI Coding Agent with Pydantic-AI
CLI coding agents are a fundamentally different tool to chatbots or autocomplete tools - they're agents that can read code, run tests, and update a codebase. While commercial tools are impressive, they don't understand the particular context of our environment and the eccentricities of our specific project. Instead we can build our own coding agent by assembling open source tools, using our specif
How to use GitHub Copilot on github.com: A power user’s guide
Explore how to use GitHub Copilot on github.com to automate tasks, assign agents, prototype ideas, and streamline your entire workflow — all without an IDE.
Designing For TV: The Evergreen Pattern That Shapes TV Experiences (Part 1) — Smashing Magazine
TV interface design is a unique, fascinating, and often overlooked field. It’s been guided by decades of evolution and innovation, yet still firmly constrained by its legacy. Follow Milan into the history, quirks, and unshakable rules that dictate how we control these devices.
Introducing Cloudflare Application Confidence Score For AI Applications
Cloudflare will provide confidence scores within our application library for Gen AI applications, allowing customers to assess their risk for employees using shadow IT.
ChatGPT, Claude, & Gemini security scanning with Cloudflare CASB
GenAI tools bring power — and risk. Cloudflare CASB now scans ChatGPT, Claude, and Gemini for misconfigurations, sensitive data exposure, and compliance issues, helping organizations adopt AI with confidence.
Best Practices for Securing Generative AI with SASE
This guide provides best practices for Security and IT leaders to securely adopt generative AI using Cloudflare’s SASE architecture as part of a strategy for AI Security Posture Management (AI-SPM).
Securing the AI Revolution: Introducing Cloudflare MCP Server Portals
We’re excited to announce Cloudflare MCP Server Portals are now available in Open Beta. MCP Server Portals are a new capability that enable you to centralize, secure, and observe every MCP connection in your organization. This feature is part of Cloudflare One, our secure access service edge (SASE) platform that helps connect and protect your workspace.
Block unsafe prompts targeting your LLM endpoints with Firewall for AI
Cloudflare's AI security suite now includes unsafe content moderation, integrated into the Application Security Suite via Firewall for AI. Built with Llama, it detects and blocks harmful prompts before they reach your AI applications.
PGDay Hyderabad 2025: A Journey of History, Tech, and Community
This was my experience at PGday Hyderabad 2025, which included a lot of learnings and it was my first conference. Please dive in to check.
Conversation: LLMs and Building Abstractions
Unmesh and Martin exchanged some emails about building abstractions while working with an LLM. They talk about the influence of Brooks's framing of essential and accidental complexity, and how this carries over to thinking of programming as both growing and applying abstractions. An LLM is useful in both modes of working, but has to be used differently. We can't reduce growing abstractions to a st
Rediscovering joy in learning: Jason Lengstorf on the state of development
We sit down with Jason Lengstorf on the GitHub Podcast, where he shares his perspective on education, AI, open source, and more.
Enabling Kotlin incremental compilation on Buck2
The Kotlin incremental compiler has been a true gem for developers chasing faster compilation since its introduction in build tools. Now, we’re excited to bring its benefits to Buck2 – Meta’s build system – to unlock even more speed and efficiency for Kotlin developers. Unlike a traditional compiler that recompiles an entire module every time, […]
Building production-ready agentic systems: Lessons from Shopify Sidekick (2025) - Shopify
Learn how we evolved our AI assistant architecture and built robust evaluation frameworks for real-world deployment
Optimizing PWAs For Different Display Modes — Smashing Magazine
Progressive Web Apps (PWAs) are a great way to make apps built for the web feel native, but in moving away from a browser environment, we can introduce usability issues. This article covers how we can modify our app depending on what display mode is applied to mitigate these issues.
The conversion paradox: 3DS trends in regulated markets
Our analysis showed that even with very high two-factor authentication trigger rates—which traditionally add friction to the checkout flow—France, the UK, and Japan still maintain high conversion rates.
Unmasking the Unseen: Your Guide to Taming Shadow AI with Cloudflare One
The digital landscape of corporate environments has always been a battleground between efficiency and security. For years, this played out in the form of "Shadow IT" — employees using unsanctioned laptops or cloud services to get their jobs done faster. Security teams became masters at hunting these rogue systems, setting up firewalls and policies to bring order to the chaos. But the new frontier
Cloudflare Launching AI Miniseries for Developers (and Everyone Else They Know)
AI Avenue tackles fears, showcases AI's potential, and highlights positive human augmentation stories, even allowing hands-on interaction.
Version control: How Figma Make helped us figure out video playback
To get videos working just right in Figma Buzz, Product Designer Natasha Tenggoro used Figma Make to prototype complex ideas when words fell short. We show three of them here, prompts and all.
Safeguarding VS Code against prompt injections
When a chat conversation is poisoned by indirect prompt injection, it can result in the exposure of GitHub tokens, confidential files, or even the execution of arbitrary code without the user’s explicit consent. In this blog post, we’ll explain which VS Code features may reduce these risks.
MoQ: Refactoring the Internet's real-time media stack
For years, developers have been stitching together multiple protocols for real-time media, trading latency for scale and simplicity. Media over QUIC (MoQ) is a new IETF standard that resolves this conflict, creating a single foundation for sub-second, interactive streaming at a global scale.
3D Layered Text: Interactivity and Dynamicism
In this third and final chapter, we’re stepping into interactivity by adding JavaScript, starting with a simple :hover effect, and ending with a fully responsive bulging text that follows your mouse in real time.
The science of loudness
My watch has a “Noise” app: it shows d B , for decibels. Your browser does not support the video tag. My amp has a volume knob, which also shows decibels, although.. negative ones, this time. Your browser does not support the video tag. And finally, my video editing software has a ton of meters — which are all in decibel or decibel-adjacent units. Your browser does not support the video tag. How d
Building your first MCP server: How to extend AI tools with custom capabilities
Learn Model Context Protocol by building a turn-based game server that shows how to extend GitHub Copilot with custom tools, resources, and prompts.
A Week In The Life Of An AI-Augmented Designer — Smashing Magazine
If you are new to using AI in design or curious about integrating AI into your UX process without losing your human touch, this article offers a grounded, day-by-day look at introducing AI into your design workflow.
AI-powered prototyping with design systems
Why AI-native design systems unlock true brand-ready, production-aligned prototyping for teams using v0
How a volunteer-run wildfire site in Portugal stayed online during DDoS attacks
Fogos.pt, a volunteer-run wildfire tracker in Portugal, grew from a side project into a critical national resource used by citizens, media, and government. During 2025 fire season it was hit by DDoS attacks, but stayed online thanks to Cloudflare’s protections under Project Galileo.How a volunteer-run wildfire site in Portugal stayed online during DDoS attacks
Exploration: Migration to CNPG
This article explains how to migrate a database instance from anywhere to CNPG using pg_basebackup and its limitations for it.