Account Abuse Protection (in early access) now shows which recognized AI assistants make login and sign up requests, and ...

Cloudflare Radar now includes Zero Wire, a hub of briefings on critical vulnerabilities and threats, with confirmed facts, open questions, remediation steps, and related Cloudflare data.

The Configure AI bot policies setting is now named AI Crawler and Agent access policies. Personal agents act on a person's behalf, fetching information or browsing in response to a request. The ...

AI Search billing now begins on December 1, 2026 instead of November 1, 2026. New instances sync every 24 hours by default.

You can now assign key-value tags to Access service tokens and use those tags to organize credentials or control application access. Each token supports up to five tags, such as environment: ...

Active Durable Objects get up to 5 minutes to finish work before adopting new code. You can configure the delay or apply ...

JavaScript Workers with compatibility dates on or after November 17, 2026 will use URL-based module resolution and import.meta by default.

The new DNS records experience announced in May is now the default for all users on all plans, including Enterprise. The ...

Keyless SSL supports TLS 1.3 for ECDSA certificates. When TLS 1.3 is enabled on your zone, visitors connecting to a hostname ...

Cloudflare WAN traffic can now use a Gateway processing region with Regional Services. HTTPS traffic enters a Cloudflare data ...

The D1 undelete API now only accepts requests for databases that were deleted within the last 7 days. Requests to undelete a ...

Cloudflare One users must first authenticate to Access or register a device with the Cloudflare One Client before SCIM ...