Cloudflare corrected a tenant isolation flaw in its GLM-5.3 Workers AI model that briefly exposed data from other users' sessions in responses to long prompts between August 27 and September 9, 2026.
Cloudflare and Commerce.com integrate WebMCP, a browser standard from Google, to enable AI agents to interact with online storefronts more efficiently and securely.
Cloudflare disclosed a security incident on October 19, 2026, involving compromised private keys for eight eMudhra intermediate certificates, enabling potential forgery of domain certificates and traffic interception.
Cloudflare reduced its AI code reviewer inference costs by 68% through targeted optimizations, cutting average review expenses from $2.43 to $0.77 while improving speed and efficiency.
Cloudflare unveils Clairic, a new System One extraction model class hosted on Workers AI, designed for fast, typed value extraction from unstructured data with higher accuracy and lower cost than LLMs.
Cloudflare introduces programmable secure web gateway features, enabling customers to run custom code inline with security policies via Workers, addressing long-standing flexibility limitations in network security.
Cloudflare and OpenAI launched a 2026 pilot to improve AI-driven discovery of web content, with early results showing millions of new pages indexed for ChatGPT users.
Cloudflare’s Data team reduced hardware growth pressures by rearchitecting its data pipeline, cutting transit traffic by up to 40% through schema changes, compression shifts, and decentralized sampling since 2022.
Cloudflare expands its open-weight decision models with multimodal Clef-omni, faster Clef, and cheaper Clef-flash, enhancing workflow flexibility and accessibility.
Deno’s creators are joining Cloudflare to merge their open-source runtime with Cloudflare’s serverless platform, aiming to simplify distributed application development across any infrastructure.
Cloudflare introduces a multi-AI-agent security operations system to automate alert analysis, reduce human workload, and accelerate incident response across its Managed Defense platform.
Cloudflare marked its 16th birthday with Birthday Week 2026, unveiling 46 new products and initiatives to modernize internet infrastructure, enhance security, and support developers and agents.
Cloudflare launched Streamline, a developer playground demonstrating custom video pipelines using Workers, Containers, and media protocols to modify livestreams or hosted videos with features like burned-in subtitles.
Cloudflare integrates Web Search API into AI Gateway, enabling agents to fetch live web data via partners Ceramic.ai, Exa, and Linkup while enforcing crawler transparency standards.
Cloudflare reports it is now the fastest provider in 74% of the world’s top 1,000 networks, up from 60% in April 2026, based on real-user measurements via error pages and new Challenge Pages.
Cloudflare launched a new fraud dashboard for Account Abuse Protection to help teams investigate suspicious account activity using stateful trust models and hashed identifiers, replacing point-in-time identity checks.
Cloudflare broadens access to advanced features beyond its Enterprise tier, expanding Logpush, Transformers, Custom Dashboards, and RBAC while introducing multi-account management and Organizations for unified oversight.
Cloudflare releases open-source decision models Clef and Clef-flash, alongside a new reinforcement learning fine-tuning platform, to enable faster, structured AI decision-making for workflows.
Cloudflare expands AI model access with EuroLLM and Apertus while launching hands-on AI defense workshops for governments, emphasizing choice and sovereignty amid rising access restrictions.
Cloudflare has made its AI Search service generally available, expanding multimodal support with native image embeddings, OCR for PDFs, and larger file handling while introducing billing starting November 1, 2026.
Cloudflare invites developers to build the next Git platform using Workers and Artifacts, a versioned filesystem designed for agent-driven software development workflows.
Cloudflare has rebranded its Cloudflare Data Platform as Basin, a serverless analytics platform now generally available, built on Apache Iceberg and R2 Object Storage.
Cloudflare launches AI Gateway’s Auto Router in public beta to automate model selection and reduce AI spending by up to 30% without user intervention.
Cloudflare’s User Insights now provides deeper context on AI model usage, helping teams detect overuse and inefficiencies in AI Gateway traffic through task analysis and model-fit signals.
Cloudflare launches a closed beta for its Monetization Gateway, enabling domain owners to charge AI agents per request via HTTP 402 status codes, aligning payments with agent consumption patterns.
Cloudflare launches Pay Per Use beta, letting publishers license AI use of their content with verified buyers and usage-based payments, addressing revenue loss from AI answer engines.
Cloudflare rearchitected Containers to support agent workloads by enabling runtime image selection, faster startup times, and filesystem snapshots, replacing static deployments with dynamic, code-driven provisioning.
Cloudflare introduces an adaptive security framework to counter AI-driven cyberattacks by integrating code analysis, runtime protection, and threat intelligence across four interconnected stages.
Cloudflare introduces Application Profiles to enforce positive security by analyzing HTTP request structures, reducing attack surfaces without relying solely on patching vulnerabilities.
Cloudflare has introduced a mitigation for quantum downgrade attacks on IPsec, developed with the IETF and now in beta for its IPsec products, addressing vulnerabilities in post-quantum cryptography migration.