Unified Routing is generally available for Cloudflare WAN and Magic Transit. Configure Automatic Return Routing, BGP, and custom client subnets to streamline your network integration.
Show more
Browser Run Session Recordings now include an Inspect panel. View logs, network requests, and the DOM without reproducing the session.
cloudflared will stop supporting 32-bit Windows and Intel-based macOS builds in 2027. We are focusing our efforts on platforms still getting updates to keep you secure.
Create Free accounts programmatically via API or OAuth. Super Admins can now spin up to five accounts directly within an Enterprise Organization.
Workflows now supports deleting up to 100 instances at once via Wrangler 4.125.0. Use deleteBatch to stop runs and clean up storage state.
Workers AI now supports a `rejectIfBusy` option for synchronous inference. Requests fail immediately when capacity is full instead of waiting in a queue.
Workers traces can now follow JavaScript RPC calls across Worker boundaries into Durable Objects. See the full session and method calls in the dashboard without changing any code.
Show more
R2 Data Catalog now supports manual queueing and maintenance visibility right in the dashboard.
Inspect job status and run compaction directly from the table view.
Hyperdrive now supports Python Workers. Connect to PostgreSQL and MySQL databases faster.
Access for Infrastructure now supports tagged targets. Define policies with include, require, and exclude logic for tighter control.
Stream Workflow instance events with `.subscribe()`. React to attempts, sleeps, and rollbacks without polling.
WAF 2026-09-15 adds blocking for SSRF attacks on cloud metadata and command injection. Harden your setup against these specific cloud threats.
Cloudflare Access can now require fresh authentication for every SAML login. Enable force_authn in the API or dashboard to set ForceAuthn to true automatically.
Browser Run now supports guardrails to whitelist specific hostnames for sessions. You can also generate read-only Live View links to watch without interaction.
Passive Detection is now available for Cloudflare DLP. You can now see where sensitive data is going in your traffic before you even create a policy.
AI Search can now index R2 objects without filename extensions as long as they include valid Content-Type metadata. You can remove extensions from object keys while keeping validation intact.
Show more
Cloudflare Containers now power the OpenAI Agents API for self-hosted Codex execution. The Workers template manages sessions and auto-reconnects for you.
Emergency WAF release blocks critical RCE attacks on Magento stores. Apply the new block rule immediately to secure your storefronts.
New Workflows on Workers Paid now default to a seven day retention period. This lowers storage costs by default while still allowing a 30 day limit.
macOS WARP client beta 2026.8.1290.1 is live. It fixes service crashes on sleep/wake and improves DNS reliability so your tunnel stays stable.