Cloudflare

Zone setting changes used to rebuild entire DNS zones, even ones with tens of millions of records. Here is how we built a planner that picks the smallest safe build, cutting full builds by 40%, peak memory by 85%, and halving build delay. https://blog.cloudflare.com/dns-targeted-zone-builds

Come join Cloudflare and US Sky Team on Nov. 9 at Shotski’s in SF as we launch a new winter sports technical challenge for builders. Learn how developers can use real ski/snowboard footage to build coaching tools on Cloudflare. RSVP: https://luma.com/kjs4cyal

Data residency shouldn't mean trade-offs. We're rebuilding our control plane and logging on Workers and Durable Objects, so you can choose where WAF rules, Workers, and logs live with a click, and change it with another. Apply for the beta: https://cloudflare.com/resource/dra-beta

Four, just four: that’s the key to break into any unpatched connection on the Internet that is using eMudhra certificates. Here’s how we quickly patched Cloudflare, what evidence we can see of attempted exploitation, and how much of the rest of the Internet remains exposed. https://blog.cloudflare.com/emudhra-patching/

Public traffic to private origins, with WAF, bot management, caching, and Workers, is now available to every customer with Cloudflare One connectivity. Read more: https://blog.cloudflare.com/private-origins-public-to-private/

Cloudflare Monetization Gateway is available as part of a closed beta.

With just a few clicks, it allows domain owners to charge agents for access to their website, APIs, MCP tools, or datasets. Request access today in the Cloudflare Dashboard. https://blog.cloudflare.com/monetization-gateway-beta/

It is the spooky season. Share a developer horror story that still keeps you awake at night. #CloudflareChat

Cloudflare mitigated over 8,200 DDoS attacks per hour in Q3 2026 as attackers shifted to shorter, high-frequency strikes. Explore the latest threat data, including the collapse of CLDAP vectors and the impact of recent botnet takedowns. https://blog.cloudflare.com/ddos-threat-report-2026-q3/

Build the future of winter sports tech! 🎿🏂 Cloudflare + usskiteam/ussnowboardteam are launching a developer challenge to build AI, computer vision & video tools for elite athletes. Winners get VIP tickets to events in Aspen or Sun Valley. Register: https://luma.com/kjs4cyal

We love a good community project! Like this fun personal leaderboard to track your journey to #CloudflareConnect. Claim your custom boarding pass and see how your miles stack up against other attendees: https://milestoconnect.com

An examination of global Internet disruptions observed by Cloudflare Radar during the third quarter of 2026. This review analyzes how power failures, natural disasters, and government shutdowns impacted network connectivity and traffic. https://blog.cloudflare.com/q3-2026-internet-disruption-summary

We are launching a PHP Capture the Flag challenge integrated with our Bug Bounty program to test our WAF protections. Security researchers are invited to bypass our defenses and capture the flag to help make the Internet safer. https://cfl.re/4iqHaQ1

A configuration mismatch in GLM 5.3 on Workers AI triggered an SGLang bug that exposed KV cache pages across requests. Here is how we addressed the issue. https://blog.cloudflare.com/kv-cache-exposure-remediation/

Couldn't make it to Cloudflare Connect 2026 in San Francisco? We've got you covered. Keynotes, breakout sessions, and resources from Connect are now available on demand — and new sessions are being added regularly. Explore what you missed: cloudflare.com/connect/2026/

Cloudflare's new post-quantum GeoKey Manager protects geographically fenced decryption keys from harvest now, decrypt later attacks. Learn how we redesigned our cryptography stack to support strict data sovereignty in a post-quantum world. https://blog.cloudflare.com/post-quantum-geo-key-manager

Cloudflare has achieved South Korea's ISMS certification following an audit across 80 controls. Learn how we localized user consent flows, adapted social sign-up paths at the edge, and validated our global security program. https://blog.cloudflare.com/k-isms/

Watch the official trailer for The Cold Start, Cloudflare's live startup pitch competition at Cloudflare Connect 2026 in San Francisco.

The judges' choice prize includes $500,000 in Cloudflare credits, a San Francisco billboard, and an invitation to a VIP dinner. The audience choice prize is $100,000 in Cloudflare credits.

Learn more: https://www.cloudflare.com/connect/cold-start/

#CloudflareConnect

Cloudflare's web application firewall can now correlate an HTTP request with its response. Full transaction detection helps every customer find successful exploits, data exposure, and risky misconfigurations that request-only inspection can miss. https://blog.cloudflare.com/full-transaction-waf/

Cloudflare has deployed default web application firewall (WAF) protections for newly disclosed PHP vulnerabilities before public disclosure. The rules use request and response signals to stop exploit attempts and prevent exposed data from reaching attackers. https://blog.cloudflare.com/php-vulnerabilities-waf-protection

That's a wrap on Day 2 of #CloudflareConnect.

Agents are already browsing, buying, and building for us, and they definitely aren’t filling out CAPTCHAs. Today put that new kind of Internet user front and center.

Thank you to everyone who joined us. See you tomorrow for Day 3!

Following the discovery that eight eMudhra intermediate certificates use weak keys, Cloudflare is deploying mitigations and releasing client updates. We explain the impact, our response, and what customers and developers should do next. https://blog.cloudflare.com/emudhra-certificate-compromise/

What happens when AI agents need to pay for the services they use?

We’re working with Mastercard and an ecosystem of partners to help answer that question through Mastercard Agent Pay for Machines, enabling trusted agent-to-agent payments within defined budgets and permissions.

See it in action: https://cfl.re/4sohRTe

Cloudflare is collaborating on tsrs, a Rust port of TypeScript that is up to 8x faster and uses 70% less memory. https://blog.cloudflare.com/typescript-rust-port/

You all loved having Common at #CloudflareConnect last year, so we brought the legend back. 🔥 He is on stage RIGHT NOW performing live to kick off Matthew Prince’s keynote. The energy in this room is unreal—if you aren’t here, you’re missing out. 🎤✨

When our AI code reviewer's cost per run doubled, we dug into the token usage to find out why. Learn how we used prompt caching and intelligent model routing to slash our inference bill by 68% while speeding up reviews. https://blog.cloudflare.com/obsessive-inference-optimization/

Introducing Clairic, from Cloudflare. A System One extraction modeI, capable of extracting, computing, estimating, and forecasting data from unstructured inputs. https://blog.cloudflare.com/clairic-extraction-model/

CVE-2026-88771 lets attackers run commands on NetScaler Gateway before anyone signs in. Patching takes time most teams don't have, so the sign-in decision has to move in front of the vulnerable code. Here’s what you need to do now: https://blog.cloudflare.com/protect-your-netscaler-gateway/

Good night, San Francisco! ✨

Moscone West is glowing and ready for #CloudflareConnect 🧡

We can’t wait to see you all starting tomorrow morning. Get some rest, and just look for the orange! ☁️

See you there!

Putting the final touches on Moscone West for #CloudflareConnect 2026! 🛠️🍊 From the big signs to the indoor setups, we’re getting everything ready for you. Can't wait to see you all! 👋☁️

Auto-reply: I'm heading to #CloudflareConnect from Oct 19–21. For urgent matters, find me in the hallway at Moscone West.

What is the wildest debugging mystery you solved using a basic tool like ⁠ping⁠, ⁠curl⁠, or ⁠grep⁠? #CloudflareChat

Throwback to an incredible day at Cloudflare Immerse Dubai! 🇦🇪

From insightful sessions on the future of cloud security and performance to connecting with industry leaders and tech innovators across the region, the energy in the room was unmatched.

A huge thank you to everyone who joined us, shared ideas, and made the event a massive success. The conversations may have ended, but the innovation doesn't stop here.

See the full recap and highlights from the day in this video.

Cloudflare Gateway and Data Loss Prevention have inherited the flexibility and power of Cloudflare Workers through our full-stack integration with the Cloudflare Developer platform. https://blog.cloudflare.com/programmable-gateway-dlp

Introducing Void: an open-source SDK, CLI, and self-hosted platform for building full-stack Vite apps and deploying them to Cloudflare. https://blog.cloudflare.com/deploy-with-void

Today, Cloudflare and OpenAI released the first findings from their joint research pilot, demonstrating how real-time network signals can make AI search drastically smarter, fresher, and safer without overloading website infrastructure. https://blog.cloudflare.com/cloudflare-openai-discovery-agentic-web

When strikes hit Yandex data centers, many assumed Russian bot operations went dark. Cloudflare data reveals that while search crawling stopped, malicious bots simply migrated to other networks. https://blog.cloudflare.com/yandex-outage/

While adding MySQL support to Hyperdrive, we found a subtle protocol bug when caching query results. Here is how we tracked down a 0.001% rate error and made Hyperdrive MySQL generally available. https://blog.cloudflare.com/hyperdrive-mysql

Ever wonder how Cloudflare builds its own control planes? 🛠️ Our latest blog takes you under the hood of D1, our serverless SQL database, detailing the architectural patterns we used to scale.

Dive into the technicals: https://blog.cloudflare.com/d1-control-plane/

What happens when traffic growth is exponential? You rewind it. ⏪ Read our latest engineering deep-dive on how Cloudflare's infrastructure tackles massive scale and keeps the Internet up and running.

Find out more: https://blog.cloudflare.com/rewinding-the-exponential/

Logpush now supports Transformers, allowing teams to filter, redact, and reshape log streams using SQL before export. Powered by Apache DataFusion and Apache Arrow, Transformers apply those changes directly to log data before it reaches the destination. https://blog.cloudflare.com/transformers-on-logpush/

Build the next GitHub. We'll give you the stage.

Finalists present at #CloudflareConnect next week, and their travel to San Francisco is on us. First place also wins $25K in Cloudflare credits.

Submissions close in 2 days: https://cfl.re/4hSVJeB

Don’t forget to enter our Build the next Git platform on Cloudflare competition!

We want you to build your vision for the Git platform of the agentic era using Cloudflare Workers and Artifacts.

Find out how to enter: https://cfl.re/4znlDON #CloudflareConnect

We are expanding the Clef decision model family with Clef-omni, natively processing audio, video, images, and text in a single pipeline. We’ve also lowered Clef-flash pricing and boosted Clef inference speeds by up to 2.0x. https://cfl.re/4s6nYeD

It’s National Curious Events Day! 🕵️✨

What’s the most bizarre, "how is this even possible?" tech mystery or ghost-in-the-machine bug you’ve ever had to debug?

Tell us your strangest story in the comments 👇 #CloudflareChat

On-demand CPU and memory profiling for Cloudflare Workers and Durable Objects is now available. Now you can quickly track down memory leaks and performance bottlenecks. https://blog.cloudflare.com/workers-on-demand-profiling/

We're making the Cloudflare developer platform the best place to run JavaScript, anywhere.

Big step toward that today: the Deno team is joining us to build what’s next.

https://blog.cloudflare.com/deno-joins-cloudflare

We redesigned Cloudflare Radar to make real-time global traffic and outage data accessible to a wider audience — including journalists, less technical researchers, and everyday users. By introducing an interactive map and standardized components, we simplified navigation while preserving technical depth. https://blog.cloudflare.com/radar-redesign/

Cloudflare Managed Defense uses a team of specialized AI agents built on Workers and global network telemetry to analyze security alerts. By separating deterministic evidence collection from model inference, the system delivers grounded recommendations to Managed Defense Analysts. https://blog.cloudflare.com/agentic-security-operations/

On October 11, 2026, the DNS root switches to a new key-signing key (KSK-2024). Learn what this means for you, and how RFC 8509 trust anchor sentinels allow you to test whether your DNS resolver is ready for the rollover. https://blog.cloudflare.com/root-ksk-2024-rollover/

Only 2 weeks to go until #CloudflareConnect! Experience it with your team: groups of 5+ get exclusive discounts, and 10+ get 50% off!

Register today at https://cloudflare.com/connect, then hit up [email protected] to claim your team discount.

Thrilled to be named to Fortune Magazine's 2026 #Future120! 🚀

For the 3rd year, Fortune recognized Cloudflare's long-term growth and innovation. Helping to build a better Internet is a long-term commitment, and we’re grateful to be recognized along the way. https://fortune.com/ranking/future/?q=cloudflare

46 announcements. 1 week.

If your feed moved too fast yesterday, here’s your refresher—every product, feature, and update we shipped for #BirthdayWeek 2026: https://blog.cloudflare.com/birthday-week-2026-wrap-up/https://blog.cloudflare.com/birthday-week-2026-wrap-up/

We celebrated our 16th birthday with 46 announcements across open source, post-quantum security, AI agents, and developer platform upgrades. Here’s a day-by-day roundup of everything we shipped. https://blog.cloudflare.com/birthday-week-2026-wrap-up/ #BirthdayWeek

A year after announcing our goal to hire 1,111 interns, more than 750 early-career builders have shipped real products across 48 teams at Cloudflare.

From Birthday Week launches to post-quantum security, our interns prove that AI amplifies human potential instead of replacing it. https://blog.cloudflare.com/one-year-later-1111-interns/ #BirthdayWeek

Real products, big impact, and unmatched energy. ⚡

From San Francisco to Lisbon and everywhere in between, our interns are driving massive impact! We’re so excited to watch them learn, and leverage cutting-edge tech to shape the future of the Internet.

More details, tomorrow.

Cloudflare #BirthdayWeek celebrations were happening around the world! See some snapshots from our hubs. Follow along for all announcements: https://cfl.re/4z7aNwe

Can you guess which Cloudflare office was each of the photos taken in?

#CloudflareConnect brings the people shaping the future of the Internet under one roof. Hear from Michelle Zatlyn, Co-Founder & President, on why that matters and what to expect next month. Join us October 19–21 at Moscone West in San Francisco. Register now: https://cfl.re/45aFML0

Today, we’re releasing a new developer playground, Streamline, that demonstrates how you can build a system to deliver bespoke video experiences on Cloudflare’s Developer Platform. https://cfl.re/4iVKGDM #BirthdayWeek

Cloudflare is launching eight major updates that bring logs, traces, analytics, alerts, dashboards, querying, and telemetry export into one observability platform, with simpler and more predictable pricing. https://blog.cloudflare.com/one-observability-platform/ #BirthdayWeek

During Birthday Week 2025, we announced the Cloudflare Data Platform, a suite of products that ingest, store, and query your analytical data. Today, we’re announcing that the platform is generally available, and we’re giving it a new name: Cloudflare Basin. https://blog.cloudflare.com/cloudflare-basin/ #BirthdayWeek

Welcome to Cybersecurity Awareness Month. If you could give one piece of security advice to your non-technical friends what would it be? #CloudflareChat

We secured a Grammy-nominated artist for the #CloudflareConnect closing party at Oracle Park on October 21.

We asked Alexis Gay to help us promote it.

Get $100 off Connect with code PLUS1 (expires Sunday midnight). Bring a +1 to the concert on us.

https://cloudflare.com/connect

This week, Cloudflare's Impact programs will reach $100 million in donated services. This milestone means that thousands of entities including journalists, civil society, state and local governments, election management bodies, and public schools are being protected from cyberattacks. https://blog.cloudflare.com/100-million-donations/

More than half the traffic reaching sites on Cloudflare is now automated, and AI agents are the fastest-growing part of it. We're giving site owners the tools to see who's visiting, decide who gets in, and charge for access. https://blog.cloudflare.com/agentic-web/

Thank you #CloudflareConnect Diamond sponsor Oracle! 💎

Build secure, high-performance application and AI experiences across hybrid and multicloud deployments with Cloudflare and Oracle Cloud Infrastructure (OCI).

Register to experience the event together: https://cfl.re/4yRYLYx

Twelve years after launching Universal SSL, Cloudflare is applying to become a certificate authority. By combining an established root, an ACME-first approach, and Merkle Tree Certificates, we are building a post-quantum CA for the open web. https://blog.cloudflare.com/cloudflare-certificate-authority/ #BirthdayWeek

First day of #BirthdayWeek was full of announcements and surprises. Today will be no less. Stay connected: https://blog.cloudflare.com/tag/birthday-week/

This week Cloudflare celebrates our 16th birthday. Like many 16 year olds, we find ourselves looking around at the world we grew up in and feeling caught between the past and future. Also like many 16 year olds, we look at all the change in the world and sometimes see risk. But, on balance, we come out incredibly optimistic for what lies ahead. What drives our optimism and fear is a recognition that change involves disruption. https://blog.cloudflare.com/cloudflares-2026-annual-founders-letter/ #BirthdayWeek

External security researchers at Accomplish identified a vulnerability in Cloudflare Containers that could expose residual disk data from previous workloads. We explain how the issue worked, how we investigated it, and the steps we took to remediate it. Cloudflare has fully remediated the vulnerability, and we have no evidence that customer data has been compromised. https://blog.cloudflare.com/containers-cross-tenant-vulnerability/

Humbled to share that Cloudflare is on FortuneMagazine’s 2026 Change the World list for the 3rd year! Thank you for recognizing our work to democratize cybersecurity and make tools available to everyone on the web. https://cfl.re/4ySrWcU

Are you watching from the sidelines, or are you building it?

#CloudflareConnect 2026 is bringing together the engineers, architects, and leaders shaping the future of the web. Connect with our product teams, get hands-on training, and swap insights with the minds powering over 20% of the Internet.

Only 4 weeks left until event day! Register now: https://cloudflare.com/connect

Vary support is now available in Cache Rules on every plan. You can normalize known negotiation headers, pass exact values through to the origin when those small differences matter, or bypass cache when the variation is too unpredictable. https://blog.cloudflare.com/vary-support/

Today we’re launching Worker Previews. Each Git branch gets a production-like place to run, with its own code, configuration, URL, observability, and state. https://blog.cloudflare.com/worker-previews/

We're excited to announce Accenture as a Diamond sponsor for #CloudflareConnect! 💎

A huge thank you for your continued partnership and support as we help build a better Internet.

Join us and let's experience the event together! Register today: https://cfl.re/connect2026

We're excited to announce that today Python Workers are generally available (GA). It means Python is now a first-class, fully supported language on the Cloudflare Developer Platform. Read everything about it: https://blog.cloudflare.com/python-workers-ga

We just launched Precursor! It uses continuous, session-based client signals to catch advanced bots that try to mimic human behavior over a full user journey. Check out the details here: https://blog.cloudflare.com/introducing-precursor/

What’s the oldest domain name you own that you still haven’t built anything on? #CloudflareChat

We ported a complete Matrix homeserver to Cloudflare Workers — delivering encrypted messaging at the edge with automatic post-quantum cryptography. https://blog.cloudflare.com/serverless-matrix-homeserver-workers/

We have declared “Code Orange: Fail Small” to focus everyone at Cloudflare on a set of high-priority workstreams with one simple goal: ensure that the cause of our last two global outages never happens again. https://blog.cloudflare.com/fail-small-resilience-plan/

Cloudflare is aware of, and investigating an issue which potentially impacts multiple customers. Further detail will be provided as more information becomes available. Follow our updates here: https://www.cloudflarestatus.com/incidents/8gmgl950y3h7

Perplexity is repeatedly modifying their user agent and changing IPs and ASNs to hide their crawling activity, in direct conflict with explicit no-crawl preferences expressed by websites. https://blog.cloudflare.com/perplexity-is-using-stealth-undeclared-crawlers-to-evade-website-no-crawl-directives/

Cloudflare Radar now shows how often a given AI model sends traffic to a site relative to how often it crawls that site. This helps site owners make decisions about which AI bots to allow or block. https://blog.cloudflare.com/ai-search-crawl-refer-ratio-on-radar/

Announcing Cloudflare and Rakuten Mobile strategic partnership! Together we are delivering Zero Trust and network access as a managed service to our customers. Our new MSSP offering will help secure more corporate clients in Japan. https://cfl.re/4itJOlW

Want to stay ahead of evolving cybersecurity threats? Check out IDC's latest research paper, "Powering Application Modernization with Comprehensive, Performant Security," and discover how organizations are leveraging Cloudflare’s global network with Accenture's holistic security services to drive innovation, protect their assets, and boost operational efficiency. https://idcdocserv.com/US52634724

Today, we are taking some big steps forward in our mission to help build a better Internet, by giving everyone free access to 10+ different website and network security products and features. https://blog.cloudflare.com/a-safer-internet-with-cloudflare/ #BirthdayWeek

Cloudflare brings visibility to the practice of connection tampering as observed from our global network. https://blog.cloudflare.com/connection-tampering/

Read through the latest milestones and expansions of Cloudflare's global backbone and how it supports our Connectivity Cloud and our services. https://blog.cloudflare.com/backbone2024 #ConnectivityCloud