Cloudflare has made generally available to all customers, including Free plans, two new WAF capabilities: full transaction detections, which correlate each HTTP request with the origin's response to confirm exploitation, and response rules, which block the origin's response before it reaches the requester. The first managed protections ta…
Cloudflare and Commerce.com describe enabling WebMCP, an experimental Google browser standard that exposes structured tools (e.g. searchproducts, addtocart) to AI shopping agents, across almost 100,000 Commerce.com storefronts. Cloudflare injects a script at the edge, so merchants do not have to edit their themes. This is product and part…
Cloudflare has redesigned the landing page of Cloudflare Radar, its public platform for real-time global Internet trends. The goal is to make the platform easier to use for journalists, human rights advocates, policymakers and general users, while keeping the depth that network operators and academic researchers rely on. The new page lead…
Cloudflare announced on-demand CPU and memory profiling for Workers and Durable Objects. Developers can request a profile of a live production Worker from the Observability page or the cf CLI, inspect it as an interactive flamegraph, and download the .pprof file. This is a product and observability announcement with no vulnerability, thre…
Cloudflare announced Clef-omni, an open-weight decision model that accepts text, image, audio (wav/mp3) and video (mp4/webm) input in a single API call. It is built on a Qwen3-Omni-30B-A3B-Instruct mixture-of-experts backbone with LoRA adapters. Cloudflare also cut the price of Clef-flash to $0.038 per M input tokens, at the cost of a sma…
Cloudflare announced general availability of Logpush Transformers, and made Logpush available on all self-serve plans. The feature lets teams filter, redact, and reshape logs with a SQL query before export to SIEMs, analytics platforms, or object storage. The article is a product and engineering post with no vulnerability, incident, or th…
Cloudflare announced general availability of Hyperdrive support for MySQL, its database connection pooler for Cloudflare Workers, and detailed a rare caching bug found during the beta. A high-volume customer saw empty query responses in about 0.001% of cases, only on instances with caching enabled. The root cause was a flawed assumption i…
Cloudflare and VoidZero announced the open-source release of three products, Void Platform, Void SDK and Void CLI. They bring server routing, typed data access and Cloudflare deployment into a single Vite workflow, and ship as one npm package and Vite plugin (npm install void). The release follows VoidZero joining Cloudflare. The stated m…
Cloudflare and OpenAI report early results from a research pilot launched in July 2026. The pilot tests whether signals from Cloudflare's network can help OpenAI's search crawler find more useful pages for ChatGPT Search. Using a cohort of about 1% of Cloudflare's network, OpenAI discovered and indexed hundreds of millions of previously u…
Cloudflare announced a product update that integrates Cloudflare Workers with Cloudflare Gateway and DLP, making its secure web gateway programmable. A new Forward action (public beta) routes matched HTTP traffic to a Worker acting as inline middleware, while Custom Functions (expected before year-end) let Workers return typed values used…
Cloudflare announced a system that continuously evaluates whether Verified bots keep honoring website preferences after their identity is verified. The system produces an explainable "trust band" from observed behavior. It currently looks at two signals: whether a bot's traffic is consistent with published robots.txt rules (RFC 9309), and…
Cloudflare published defensive guidance following the disclosure of actively exploited Citrix NetScaler vulnerabilities. CVE-2026-88771 allows unauthenticated command execution on affected appliances, including in the default configuration. CVE-2026-88772 affects configurations using DTLS. Citrix's September 27, 2026 bulletin reported obs…