Cloudflare
Latest Cloudflare news, announcements & analysis
Infra
Cloudflare Now Lets Developers Offer Optional Permissions
Cloudflare now lets developers designate certain app permissions as optional. This means users can decline non-critical requests without breaking the login process, giving them more control and reducing unnecessary data access for applications.
Ashish Kale ·
Infra
Cloudflare Workers Are No Longer Just for HTTP
Cloudflare Workers can now accept raw TCP connections, ending an eight-year limitation to just HTTP. This major update unlocks new, non-web use cases like gRPC, IoT, and gaming servers on Cloudflare's global edge network.
Ashish Kale ·
Infra
Cloudflare Gives Good Bots a Way to Identify Themselves
Cloudflare has launched a new self-service portal for bot operators to register their bots. This makes Cloudflare's bot directory more accurate, helping website owners better distinguish between helpful automated traffic and malicious activity.
Ashish Kale ·
Infra
Cloudflare Built a Lightweight Browser for Automation
Cloudflare has launched Kitesurf, a lightweight browser engine designed for automated tasks. It runs on serverless Workers, making it far more efficient for tools like Playwright and Puppeteer than running a full version of Chrome.
Ashish Kale ·
Infra
Cloudflare Reinvents CI/CD with Durable TypeScript
Cloudflare released a new tool for defining CI/CD pipelines in TypeScript. It uses serverless workflows to make each step durable, allowing for automatic retries and replays to create more resilient software build processes.
Ashish Kale ·
Infra
Cloudflare May Be Adding Code to Your Website
Cloudflare is reportedly adding its analytics script to websites automatically when users switch to its nameservers. This happens without explicit consent, raising concerns about transparency and site control for developers.
Ashish Kale ·
Infra
Your Cloudflare AI Traces May Be Incomplete
Cloudflare now offers agent tracing to help developers debug AI on its Workers platform. However, the company warns that traces are not lossless, data can be truncated, and the feature will become a paid service in 2026.
Ashish Kale ·
Infra
Cloudflare Now Lets You Override Server Cache Settings
Cloudflare's new Cache Response Rules let you control caching *after* your server responds. This gives developers powerful, fine-grained control to optimize performance and reduce origin server load, all from the Cloudflare dashboard.
Ashish Kale ·
Infra
Cloudflare Wants to Teach AI to Use Websites
Cloudflare is testing a new protocol, WebMCP, that lets AI agents interact with websites through a structured interface instead of scraping. Activated with a single switch, it aims to standardize how AI navigates the web.
Ashish Kale ·
Infra
Cloudflare Built a New Browser Just for AI
Cloudflare launched Kitesurf, a cloud-hosted browser built specifically for AI agents, not people. It uses less computing power than standard browsers, making it cheaper and more efficient for developers to build and run automated tasks.
Ashish Kale ·
Infra
Cloudflare Protects Servers From Future Quantum Threats
Cloudflare has enabled post-quantum authentication for connections to origin servers. This move protects user data against future 'harvest-now, decrypt-later' attacks, where encrypted traffic is stored today to be broken by quantum computers later.
Ashish Kale ·
Infra
Cloudflare Fixed a Bug That Stalled New Connections
Cloudflare discovered a subtle bug in its open-source QUIC code that failed to handle heavy packet loss at the start of a connection. The fix improves network reliability for services using their modern protocol implementation.
Ashish Kale ·
Infra
Cloudflare Tool Migrates Security Setups in Hours
Cloudflare has released a new open-source tool to help companies move to its Zero Trust security platform. It includes automated logic to migrate from competitors like Zscaler and Palo Alto Networks, cutting migration times from months to hours.
Ashish Kale ·
Infra
Cloudflare Replaces API Tokens with Secure Logins
Cloudflare now lets all developers use OAuth for third-party app integrations. This offers a more secure alternative to traditional API tokens, giving users granular control over what data and actions an application can access.
Ashish Kale ·
Infra
Cloudflare and Browsers Are Killing the CAPTCHA
Cloudflare is working with all major web browsers, including Chrome and Firefox, to create a new protocol called PACT. It aims to prove you're human without needing to solve annoying CAPTCHAs, using an anonymous token.
Ashish Kale ·
AI
Cloudflare Built an AI Team to Find Code Flaws
Cloudflare has detailed its new system that uses multiple AI models working together to find security vulnerabilities. This multi-agent approach offers a powerful blueprint for companies looking to automate and improve their own code security.
Neeraj Dhiman ·
AI
Cloudflare Adds Support for Claude Agents
Cloudflare has integrated support for Claude Managed Agents, allowing developers to build, deploy, and manage AI agents directly on its global network. This enables connecting agents to private systems, choosing runtime environments, and using Cloudflare's tools for monitoring and management.
Neeraj Dhiman ·
Security
Critical HTTP/2 Flaw Affects Servers
A new remote denial-of-service vulnerability, named HTTP/2 Bomb, affects major web servers including NGINX, Apache, Microsoft IIS, Envoy, and Cloudflare. The flaw exists in the default HTTP/2 configuration of these servers, making them susceptible to attack without any special setup, according to researchers.
Neeraj Dhiman ·
Security
Ghost CMS Flaw Hijacks Websites
A critical vulnerability in the Ghost CMS is being actively exploited to hijack over 700 websites. Attackers inject a fake Cloudflare verification page, tricking visitors into running a malicious Windows command. This social engineering tactic, dubbed "ClickFix," ultimately installs malware onto the user's system.
Neeraj Dhiman ·
Infra
Cloudflare Now Automates Defenses Against Live Threats
Cloudflare has launched a new feature that automatically converts its real-time threat intelligence into active security rules. This helps teams proactively block emerging attacks without manual intervention, saving time and improving security posture.
Ashish Kale ·
Data
How Cloudflare Fixed a Critical Database Bottleneck
Cloudflare traced a major billing system slowdown to a bottleneck in its ClickHouse database. The team fixed it by changing a single lock type, offering a key performance lesson for anyone running large-scale data systems.
Taranpreet Singh ·
AI
Cloudflare Tests AI for Code Security
Cloudflare tested Anthropic's security-focused AI model, Mythos Preview, on its own infrastructure. As part of Project Glasswing, they used the model to scan over fifty internal code repositories to identify potential vulnerabilities and understand how attackers might leverage similar advanced AI tools in the future.
Neeraj Dhiman ·