What Cloudflare shipped in June 2026

Pricing change detected for Cloudflare

Pricing updated for Cloudflare: - Plan features or structure changed

Cloudflare adds account-scoped firewall events to Logpush

Cloudflare introduced an account-scoped `firewall_events` dataset in Logpush, allowing users to stream firewall events for all zones in an account via a single job instead of per-zone jobs. The datase…

Cloudflare adds Memory Usage chart for Workers and Durable Objects

Cloudflare introduced a Memory Usage chart in the Workers and Durable Objects Metrics tab, showing V8 isolate memory consumption across P50, P90, P99, and P999 percentiles. The feature helps developer…

Cloudflare adds resource-scoped roles for Gateway policies and lists

Cloudflare introduced resource-scoped roles to delegate access to specific Gateway firewall policies and Zero Trust lists without granting full product-level permissions. New roles include granular co…

Making sure you're not a bot!

Cloudflare launches GA version of Cloudflare One Client for Linux with DNSSEC and hardware-backed security

Cloudflare announced the general availability of Cloudflare One Client for Linux (version 2026.6.822.0), transitioning from beta to stable. The release adds hardware-backed device registration via TPM…

Cloudflare adds WebSocket analytics to Logpush dataset

Cloudflare introduced a new `websocket_analytics` dataset for Logpush, providing detailed metrics on WebSocket connections including bytes transferred, client/ASN data, connection close reasons, and t…

Cloudflare One Client for macOS reaches GA with DNSSEC, hardware-backed registration, and MDM improvements

Cloudflare released the general availability version 2026.6.822.0 of its Cloudflare One Client for macOS, transitioning features from beta to stable. Key additions include hardware-backed device regis…

Cloudflare One Client for Windows reaches GA with mandatory auth, DNSSEC, and MDM upgrades

Cloudflare released the general availability version 2026.6.822.0 of its Windows Cloudflare One Client, bringing mandatory authentication, DNSSEC passthrough, hardware-backed device registration, and …

Cloudflare Workers fetch requests now support cf.vary for cache control

Cloudflare added the `cf.vary` request option to Workers `fetch()` calls, enabling developers to control cache variants for subrequests receiving origin `Vary` responses. The feature allows granular n…

Cloudflare launches Think: opinionated AI agent framework with persistent memory

Cloudflare introduced Think, an opinionated framework for building stateful AI chat agents with built-in tools, persistent memory, and lifecycle hooks. The framework integrates with Workers AI for mod…

Cloudflare Agents SDK v0.17.0 adds background sub-agents and unified turn entry

Cloudflare released Agents SDK v0.17.0 introducing durable background sub-agent runs with live progress tracking, a unified `runTurn` entry point for all turn modes, and extensive reliability fixes. T…

Cloudflare adds service token support for MCP server portals

Cloudflare now allows autonomous agents and bots to connect to MCP server portals using Access service tokens, bypassing browser-based OAuth flows. This enables programmatic access to upstream MCP ser…

Cloudflare adds US jurisdiction support for Durable Objects

Cloudflare introduced a new `us` jurisdiction for Durable Objects, restricting compute and data storage to the United States. Developers can now create namespaces with US-only residency to meet data r…

How we built saga rollbacks for Cloudflare Workflows

Cloudflare Workflows now supports saga rollbacks, allowing developers to define compensation logic within each step to handle failures in multi-step workflows. This ensures consistency by automaticall…

Cloudflare adds Durable Object eviction test helpers for Vitest

Cloudflare introduced `evictDurableObject` and `evictAllDurableObjects` test helpers in `@cloudflare/vitest-pool-workers@0.16.20` to simulate Durable Object evictions in Vitest tests. These tools help…

Cloudflare Workers adds memory profiling in DevTools to prevent OOM errors

Cloudflare introduced memory profiling in Workers DevTools, allowing developers to take snapshots of memory usage, identify leaks, and optimize performance. The tool helps diagnose issues like string …

Cloudflare adds API token search by name in dashboard and API

Cloudflare introduced a search feature for API tokens by name, available in both the dashboard and via API endpoints. Users can now filter tokens without manual pagination, improving usability for lar…

Cloudflare details post-quantum cryptography support across products

Cloudflare is targeting 2029 for full post-quantum security across its suite, with key agreement (X25519MLKEM768) already deployed for inbound TLS, outbound origin pulls, and Cloudflare Tunnel. Signat…

Unlocking the Cloudflare app ecosystem with OAuth for all

Cloudflare opened self-managed OAuth to all customers, allowing developers to create and manage their own OAuth clients for delegated API access. This replaces reliance on API tokens and enables safer…

Matthew Prince June 9 Mad Money.mov - Google Drive

Cloudflare One Client for macOS beta adds hardware-backed registration and UI fixes

Cloudflare released a beta update for its macOS Cloudflare One Client (v2026.6.782.1) introducing hardware-backed device registration via Secure Enclave to prevent impersonation. The update also adds …

AI Search - Control AI Search similarity cache freshness

Cloudflare updated AI Search to give users control over similarity cache freshness, reducing the default cache duration from 30 days to 48 hours. Users can now set cache TTLs from 10 minutes to 6 days…

Cloudflare adds WebSocket Analytics Logpush dataset and updates fields

Cloudflare introduced a new WebSocket Analytics Logpush dataset with 17 fields including connection metrics and client details, expanded Firewall events dataset to account-scope Logpush with a new Zon…

Cloudflare adds organization-level audit logs in dashboard

Cloudflare introduced Audit Logs v2, enabling Organization Super Administrators to view organization-level audit logs directly in the Cloudflare dashboard. The feature provides enhanced monitoring of …

Cloudflare launches Code Mode for Agents to streamline multi-tool workflows

Cloudflare introduced Code Mode, an experimental tool-use pattern where AI models write executable code to compose, sequence, and process multiple tools in a single plan. This reduces round trips and …

Cloudflare AI Search launches similarity-based caching for faster, cheaper responses

Cloudflare introduced a similarity cache for its AI Search feature that reuses responses for semantically similar queries instead of generating new ones, reducing latency and costs. The system uses Mi…

Cloudflare launches Custom Origin Trust Store for origin server authentication

Cloudflare introduced Custom Origin Trust Store, enabling users to upload custom certificate authorities (CAs) to authenticate origin servers instead of relying solely on Cloudflare’s default trust st…

Cloudflare Radar IP page adds precise IP location and richer AS details

Cloudflare Radar’s IP page now displays precise IPv4 and IPv6 geolocation markers on a map, highlights the Cloudflare data center serving the connection, and provides expanded autonomous system (AS) d…

The post-quantum EO is an important milestone. Now it’s time to get to work

President Trump signed EO 14409 requiring federal agencies to transition sensitive systems to post-quantum encryption by 2030 and authentication by 2031, with federal contractors subject to similar FI…

Cloudflare Workflows introduces WorkflowStepContext for step execution

Cloudflare Workflows now provides a WorkflowStepContext object to expose runtime details in step execution, including step name, retry count, and resolved configuration. Developers can use this contex…

Cloudflare and beehiiv integrate AI Crawl Controls for independent publishers

Cloudflare and beehiiv launched an integration embedding Cloudflare’s AI Crawl Control into beehiiv, giving newsletter creators granular control over AI bot traffic and content discovery. Publishers c…

Cloudflare Workflows rollback handlers now include step context

Cloudflare Workflows rollback handlers now receive the original step context, including step name, count, attempt, and config, via a `ctx` object. The `rollbackConfig` is now limited to retry and time…

Cloudflare adds WAF protection for Ivanti Sentry CVE-2026-10520

Cloudflare released a new managed WAF ruleset to block a critical pre-authentication OS command injection vulnerability in Ivanti Sentry (CVE-2026-10520). The rule changes action from 'Log' to 'Block'…

Cloudflare AMP/SXG reaches end of life

Cloudflare’s AMP and Signed Exchanges (SXG) features have officially reached end of life as of June 23, 2026. The features were disabled in October 2025, and customers can no longer configure them via…

How we found a bug in the hyper HTTP library

Cloudflare discovered a race condition in the hyper HTTP library that caused intermittent truncation of image responses (200 OK with partial data) when using the Images binding in Workers. The bug, tr…

Cloudflare R2 SQL adds window functions, DISTINCT, and set operations

Cloudflare’s R2 SQL now supports window functions (e.g., ROW_NUMBER, RANK), QUALIFY, SELECT DISTINCT, set operations (UNION, INTERSECT), and exact aggregates (MEDIAN, PERCENTILE_CONT) for analytical q…

Cloudflare partners with browsers to launch privacy-first PACT protocol

Cloudflare, Mozilla, Google, Microsoft, and Shopify are collaborating to develop Private Access Control Tokens (PACT), a privacy-preserving protocol to authenticate human and bot traffic without invas…

Cloudflare Agents now support stateful LLM calls with persistent context and autonomous scheduling

Cloudflare introduced stateful Agents that maintain conversation history and context in a built-in SQL database, enabling persistent LLM interactions without client-side state management. Agents can a…

Cloudflare launches long-running agents with Durable Objects for stateful workloads

Cloudflare introduced long-running agents built on Durable Objects, enabling stateful, persistent agents that hibernate when idle and wake on demand without paying for compute during dormancy. The upd…

Cloudflare updates Durable Objects lifecycle with hibernation and eviction rules

Cloudflare detailed the lifecycle of Durable Objects, introducing hibernation after 10 seconds of inactivity (if no outbound connections or pending I/O exist) and eviction after 70-140 seconds of inac…

Cloudflare Workers adds temporary deployment and claim workflow for AI agents

Cloudflare Workers now supports `wrangler deploy --temporary` to deploy Workers from AI agents without requiring a Cloudflare account upfront. Deployments use a temporary preview account that must be …

Cloudflare adds apac-ne and apac-se location hints for Durable Objects

Cloudflare introduced two new Asia-Pacific location hints for Durable Objects: `apac-ne` (Northeast Asia-Pacific) and `apac-se` (Southeast Asia-Pacific). These allow finer-grained placement within the…

Workers - Temporary accounts for AI agent deployments

Cloudflare introduced temporary accounts for AI agents to deploy Workers without user sign-up or OAuth flows. Agents can deploy to a temporary preview account using Wrangler 4.102.0+, with deployments…

Cloudflare Durable Objects now stay alive during active outbound connections

Durable Objects now remain active for the duration of open outbound TCP sockets or WebSocket connections, preventing eviction during LLM streaming or long-running tasks. Previously, objects were evict…

Cloudflare One expands identity provider integrations for Zero Trust

Cloudflare One now supports broader identity provider (IdP) integrations for Zero Trust, including social, open-source, and corporate providers via SAML, OIDC, and OAuth. Users can add multiple IdPs, …

Cloudflare launches Temporary Accounts for AI agents on Workers

Cloudflare introduced Temporary Accounts for AI agents to deploy Workers instantly via `wrangler deploy --temporary`, bypassing human sign-up flows. Deployments last 60 minutes and can be claimed perm…

Cloudflare unifies routes page with interactive network map

Cloudflare introduced a unified Routes page in its dashboard consolidating routes for Mesh, Tunnel, WAN, and Magic Transit connectors into a single table with an interactive network map. Users can vis…

Cloudflare Workers AI adds summary_v2 endpoint for inference distribution analysis

Cloudflare introduced a new API endpoint (`/radar/ai/inference/summary/{dimension}`) in Workers AI that provides aggregated summaries of inference counts grouped by model or task. The endpoint support…

Cloudflare adds Workers AI inference time-series API v2 with dimension grouping

Cloudflare introduced a new API endpoint (`/radar/ai/inference/timeseries_groups/{dimension}`) for retrieving time-series distributions of Workers AI inference requests, grouped by either 'MODEL' or '…

Celebrating 12 years of Project Galileo

Cloudflare marked 12 years of Project Galileo by publishing its first comprehensive report on cyberattacks targeting civil society organizations, revealing that DDoS attacks and phishing attempts are …

Immerse Seattle

Cloudflare announced Immerse, a roadshow event in Bellevue, WA, on June 18, 2026, targeting security, IT, and digital leaders. The event focuses on application, security, and network modernization, in…

Cloudflare Fonts improves error handling and adds security validation

Cloudflare Fonts now forwards `/cf-fonts` requests to origin servers on errors instead of returning 4xx/5xx responses, improving reliability. It also adds stricter input validation to mitigate securit…

Cloudflare adds exec() to Containers for process control

Cloudflare introduced `exec()` for its Containers product, enabling users to start processes inside running containers, stream I/O, inspect exit codes, and signal processes from Durable Objects. The f…

Cloudflare makes identity provider default for new Zero Trust accounts

Cloudflare now sets the Cloudflare identity provider as the default login method for newly created Zero Trust organizations, replacing one-time PINs. Existing accounts retain their current configurati…

Cloudflare details multi-stage vulnerability harness architecture

Cloudflare unveiled a model-agnostic vulnerability discovery harness designed to replace single-model security agents, addressing context exhaustion, persistence gaps, and cross-repo dependency tracin…

Cloudflare updates Workers AI popularity metric to count inferences

Cloudflare changed how it measures Workers AI model and task popularity in Radar, switching from unique accounts to the number of inferences. This provides a more accurate view of actual usage volume …

Cloudflare integrates PlanetScale databases with unified billing for Workers

Cloudflare now lets users create PlanetScale Postgres and MySQL databases directly from its dashboard, with usage billed through Cloudflare accounts. The integration leverages Hyperdrive for connectio…

Bringing more agent harnesses and frameworks to Cloudflare, starting with Flue

Cloudflare introduced Flue 1.0 Beta, an open-source agent framework built on the Pi harness, and the Cloudflare Agents SDK to simplify deploying production-grade AI agents. The stack includes durable …

Cloudflare Artifacts: on-demand Git repos with built-in durability

Cloudflare Artifacts automatically provisions isolated Git repositories on demand, each with its own namespace, tokens, and durable state. Repos are replicated across data centers and object storage f…

Introducing the Cloudflare One stack: agent-powered deployment

Cloudflare introduced the Cloudflare One stack, a set of agent-ready skills to automate the deployment, management, and migration of Zero Trust networks using Cloudflare One. The stack includes tools …

Artifacts - Manage Artifacts from the Cloudflare dashboard

Cloudflare now lets users configure Artifacts namespaces, repos, and tokens directly from the Cloudflare dashboard. Artifacts is Git-compatible storage for repos on Cloudflare, supporting standard Git…

Cloudflare launches Cloudflare One Design Partner Designation with elite partners

Cloudflare introduced a new Design Partner Designation for its Cloudflare One suite, equipping select partners like Arctiq, Consortium, and Presidio with deep technical expertise to accelerate secure …

Cloudflare adds ML-DSA post-quantum certificates for origin security

Cloudflare now supports ML-DSA (FIPS 204) post-quantum certificates for Authenticated Origin Pulls and Custom Origin Trust Store, enabling end-to-end post-quantum authentication between Cloudflare’s e…

Cloudflare launches Codemode for AI agents with TypeScript sandbox

Cloudflare introduced Codemode, a beta feature enabling AI models to execute TypeScript code in a secure sandbox to interact with external systems. The model uses a single tool (`codemode`) to run cod…

Cloudflare Think agents expand tooling with workspace tools, MCP support, and approvals

Cloudflare’s Think agents now support a merged tooling system combining built-in workspace tools (read, write, edit, bash), custom tools, MCP server tools, and approval workflows. Workspace tools incl…

Cloudflare launches Browser Run for AI agents with full Chrome DevTools Protocol access

Cloudflare introduced Browser Run, a new toolset enabling AI agents to interact with live web pages via the Chrome DevTools Protocol (CDP). Agents can execute CDP commands for tasks like DOM inspectio…

Cloudflare launches real-time voice agent feature with WebSocket audio streaming

Cloudflare introduced a new voice agent feature enabling real-time voice interactions with speech-to-text, text-to-speech, and conversation persistence over WebSocket. The feature, built on Durable Ob…

Cloudflare Workers AI adds Zhipu AI’s GLM-5.2 agentic coding model

Cloudflare integrated Zhipu AI’s GLM-5.2, a flagship agentic coding model, into its Workers AI platform. The model supports a 262K token context window, function calling, and reasoning, priced at $1.4…

Cloudflare Workers adds custom spans for deeper observability

Cloudflare Workers now supports custom spans via the `tracing.enterSpan()` API, allowing developers to instrument their own application logic alongside automatic platform traces. The feature requires …

Cloudflare DMARC Management is now generally available

Cloudflare announced the general availability of DMARC Management, a free tool to help customers achieve full DMARC enforcement. The redesigned dashboard provides unified visibility into email authent…

Cloudflare launches GLM-5.2 on Workers AI for agentic coding

Cloudflare introduced GLM-5.2, Z.ai's flagship agentic coding model, on its Workers AI platform. The model supports function calling, reasoning, and a 262,144-token context window (scalable to 1M toke…

Cloudflare Agents SDK v0.16.1 adds Codemode runtime, durable CDP browser sessions, and voice output device selection

Cloudflare released Agents SDK v0.16.1, introducing the Codemode runtime for resumable code execution with approvals, durable Chrome DevTools Protocol (CDP) sessions for browser automation, improved T…

Workers - Workers tracing now supports custom spans

Cloudflare introduced custom trace spans in Workers via the `tracing.enterSpan()` API, allowing developers to manually instrument code for better observability. Custom spans integrate with existing pl…

Cloudflare Images - New optimization features in Images

Workers VPC - TCP connections via connect() over VPC Networks

Cloudflare Workers VPC bindings now allow raw TCP connections via the connect() Socket API to private services like Redis or MQTT, expanding beyond HTTP traffic. This enables Workers to interact with …

Cloudflare WAF adds threat intelligence detection from Cloudforce One

Cloudflare’s WAF now matches incoming requests against Cloudforce One’s threat intelligence database, flagging IPs involved in activity within the past seven days. New fields like attacker names, targ…

Growing the Cloudflare AI team with talent from Ensemble AI

Cloudflare announced the hiring of key members from Ensemble AI to strengthen its AI infrastructure team, focusing on model compression, efficient inference, and reducing AI serving costs. The move ai…

Cloudflare WAF release adds Ghost CMS SQLi protection and obfuscated boolean logic bypass rules

Cloudflare’s June 15, 2026 WAF release introduces new managed rules to block a critical SQL injection vulnerability in Ghost CMS (CVE-2026-26980) and a generic rule targeting obfuscated boolean logic …

WAF - Use Cloudforce One threat intelligence in WAF rules

Cloudflare now allows WAF rules to match incoming requests against Cloudforce One threat intelligence, populating new fields (cf.intel.ip.*) for custom and rate-limiting rules. The feature targets IPs…

Cloudflare adds enhanced metrics and analytics for Durable Objects

Cloudflare introduced namespace-level and request-level metrics, analytics, and logs for Durable Objects via the Cloudflare dashboard and GraphQL API. Users can now query datasets like durableObjectsI…

Cloudflare AI Gateway expands logging with DLP fields and per-request controls

Cloudflare’s AI Gateway now logs full request/response data by default, including prompts, responses, tokens, costs, and DLP actions. Users can override logging per request via headers, disable payloa…

Cloudflare launches kimi-k2.7-code AI model on Workers AI

Cloudflare introduced kimi-k2.7-code, a 1-trillion-parameter open-source AI model with a 262,144-token context window, multi-turn tool calling, vision inputs, and structured outputs. The model is pric…

Scaling Security Insights: how we achieved a 10x increase in global scanning capacity

Cloudflare increased Security Insights scanning throughput by 10x (from 10 to 100 scans/sec) to enable weekly scans for all accounts and double frequency for existing users. The improvements involved …

Cloudflare Sandbox SDK adds command execution and process management APIs

Cloudflare expanded its Sandbox SDK with new APIs for executing commands (`exec`, `execStream`) and managing background processes (`startProcess`, `listProcesses`, `killProcess`). The APIs support str…

Cloudflare launches Flagship feature flag service for Workers

Cloudflare introduced Flagship, a feature flag service enabling safe feature rollouts without code redeploys. It integrates natively with Workers via a binding and supports OpenFeature SDK for multi-r…

Cloudflare launches Browser Run for headless browser automation

Cloudflare introduced Browser Run, a new API for controlling headless Chrome on its global network, replacing Browser Rendering. It enables automated tasks like screenshots, PDF generation, and web sc…

Cloudflare Sandbox launches browser-based terminal via WebSocket

Cloudflare introduced a new terminal feature for its Sandbox SDK, enabling browser-based terminal UIs to connect to sandbox shells via WebSocket. The server-side `terminal()` method proxies WebSocket …

Cloudflare adds Moonshot AI Kimi K2.7 Code to Workers AI

Cloudflare integrated Moonshot AI’s Kimi K2.7 Code model into Workers AI, offering a 1T-parameter MoE model optimized for coding with a 262.1k token context window. It delivers up to 31.5% performance…

AI Gateway - View the user agent of requests in AI Gateway logs

Cloudflare’s AI Gateway logs now include the user agent of each client request, enabling users to distinguish traffic sources like openai-python, custom apps, or Cloudflare Workers. Logs can be filter…

Cloudflare adds per-object Durable Objects metrics filtering

Cloudflare introduced a feature to filter Durable Objects metrics by individual object ID or name in the dashboard, replacing namespace-level aggregates. This enables targeted debugging of high-traffi…

Cloudflare Terraform v5.20.0 adds 24 new resources including Secrets Store and Zero Trust DLP

Cloudflare released Terraform v5.20.0, adding 24 new resources such as Secrets Store, Zero Trust DLP classification, and Flagship feature flags. The update also upgrades the underlying Go SDK to cloud…

Cloudflare Sandbox SDK introduces RPC transport to replace HTTP default

Cloudflare’s Sandbox SDK now supports RPC transport, which multiplexes all SDK operations over a single WebSocket connection instead of separate HTTP requests. This reduces subrequest consumption from…

Cloudflare Sandbox adds port exposure for web services with stable URLs

Cloudflare Sandbox now supports exposing ports for web services via preview URLs, enabling developers to test frontend/backend apps, share demos, debug services, and build dev environments. Preview UR…

Cloudflare Sandbox SDK adds session control, keepAlive, and timeout customization

Cloudflare’s Sandbox SDK now supports configurable session behavior via `enableDefaultSession`, long-running container persistence with `keepAlive`, and granular timeout controls for container startup…

Cloudflare Sandbox adds Sessions API for isolated shell environments

Cloudflare introduced a Sessions API in its Sandbox product, enabling users to create and manage multiple isolated shell sessions with independent working directories, environment variables, and comma…

Cloudflare Sandbox SDK adds binary file streaming and enhanced file operations

Cloudflare’s Sandbox SDK now supports streaming binary files larger than 32 MiB and introduces new file operations like `exists()`, `mkdir()`, `deleteFile()`, `renameFile()`, `moveFile()`, and `gitChe…

Cloudflare launches Code Interpreter API for Python and JavaScript execution

Cloudflare introduced a Code Interpreter API enabling direct execution of Python and JavaScript code with rich outputs like charts, tables, and images. The API supports persistent state within executi…

Cloudflare Sandbox SDK features deprecated by July 2026

Cloudflare will remove HTTP, WebSocket, and desktop features from the Sandbox SDK after July 9, 2026, requiring migration to RPC transport, tunnels API, and base streaming APIs. Developers must update…

Cloudflare Sandbox SDK 2026 deprecation: RPC transport and API replacements required

Cloudflare will deprecate multiple Sandbox SDK features in June 2026, including HTTP/WebSocket transports, desktop APIs, and stream-specific file/command APIs. Developers must migrate to RPC transport…

@cloudflare/workers-auth@0.2.0

Minor Changes #14185 98c9afe Thanks @penalosa ! - Make the OAuth identity and token storage injectable, and add a shared env-credential resolver createOAuthFlow now takes the consumer's OAuth identity…

@cloudflare/vite-plugin@1.40.2

Patch Changes #14184 e305126 Thanks @penalosa ! - Drop the --config flag from the experimental internal cf-vite delegate binary. The wrangler config file is now discovered by cloudflare() itself rathe…

@cloudflare/vitest-pool-workers@0.16.15

Patch Changes Updated dependencies [ 98c9afe , e305126 , f3990b2 , 4597f08 , 25722ac , 41f75c0 , 10b5538 , 818c105 , 2ae6099 , 2047a32 , 2047a32 , e8561c2 ]: wrangler@4.100.0 miniflare@4.20260611.0

@cloudflare/deploy-helpers@0.1.3

Patch Changes #14259 2ae6099 Thanks @emily-shen ! - Move worker build step earlier in deploy/upload step, before upload specific config validation Updated dependencies [ f3990b2 , 4597f08 , 2047a32 ]:…

@cloudflare/pages-shared@0.13.145

Patch Changes Updated dependencies [ f3990b2 , 4597f08 , 2047a32 ]: miniflare@4.20260611.0

miniflare@4.20260611.0

Minor Changes #14119 2047a32 Thanks @tahmid-23 ! - Add support for serving R2 bucket objects publicly via the dev server Each local R2 bucket is now exposed under /cdn-cgi/local/r2/public/<bucket-id>/…

wrangler@4.100.0

Minor Changes #14119 2047a32 Thanks @tahmid-23 ! - Serve local R2 bucket objects publicly via the dev server When running wrangler dev locally, objects in each local R2 binding are now reachable under…

create-cloudflare@2.70.2

Patch Changes #14193 88519f9 Thanks @petebacondarwin ! - Fix create cloudflare exiting with code 0 even after an unhandled error #14235 13abd5a Thanks @dependabot ! - Update dependencies of "create-cl…

Cloudflare Browser Run /snapshot endpoint adds Markdown and accessibility tree formats

Cloudflare’s Browser Run /snapshot endpoint now supports a `formats` parameter to return Markdown and the accessibility tree alongside HTML and screenshots in a single API call. This change targets AI…

Data Loss Prevention - Define custom topics for AI prompt protection

Cloudflare introduced custom topics for AI prompt protection in its Data Loss Prevention (DLP) service, allowing users to define proprietary or unique concepts beyond predefined categories. The featur…

Cloudflare Workflows adds sleep and retry controls for step execution

Cloudflare Workflows now supports explicit sleep steps (`step.sleep`, `step.sleepUntil`) and configurable retry logic for workflow steps, including relative/absolute timers and exponential backoff. De…

Cloudflare adds Dynamic Workers usage tracking in dashboard and GraphQL API

Cloudflare introduced a feature to track the number of billable Dynamic Workers invoked during a billing period, visible in the Workers overview page and via the GraphQL Analytics API. Usage data is a…

Cloudflare AI Search introduces namespaces for instance grouping and isolation

Cloudflare AI Search now supports namespaces, allowing users to group and manage AI Search instances dynamically via Workers bindings. Namespaces enable domain separation, tenant isolation, and agent …

Cloudflare adds Wrangler CLI commands for AI Search management

Cloudflare introduced new Wrangler CLI commands to manage AI Search instances, including create, list, get, update, and delete operations. The commands support advanced configurations like embedding m…

Cloudflare adds Images binding for Workers to manage hosted images

Cloudflare introduced an Images binding for Workers that enables direct upload, list, retrieve, update, and delete operations for hosted images without REST API calls. The binding supports custom IDs,…

Route public traffic to private applications with Cloudflare

Cloudflare introduced Application Services for Private Origins, enabling Enterprise customers to route public traffic to private applications without exposing them to the public internet. This allows …

Cloudflare Immerse Vancouver

Cloudflare announced Immerse, its premier roadshow event in Vancouver on June 10, 2026, targeting security, IT, and digital leaders. The event focuses on Zero Trust, SASE, DDoS, application security, …

Pricing updated for Cloudflare: - New tier: Pay-as-you-go ($7/mo per user) - Removed: Free (Workers) tier - Removed: Paid (Workers) tier - Removed: Free (Workers KV) tier - Removed: Paid (Workers KV)

Cloudflare adds namespace-level Wrangler CLI commands for AI Search

Cloudflare introduced new Wrangler CLI commands to manage AI Search namespaces directly from the terminal, including create, list, get, update, and delete operations. Commands support structured JSON …

Cloudflare adds automated cease and desist templates to Brand Protection

Cloudflare introduced automated cease and desist (C&D) letter generation in its Brand Protection tool, enabling instant creation of custom-branded legal notices for infringing domains hosted outside C…

Cloudflare introduced an Images binding for Workers enabling direct upload, list, retrieval, update, and deletion of hosted images without API tokens or HTTP requests. Developers can now manage image

Cloudflare introduces account-level DNS records quota for Enterprise

Cloudflare now enforces DNS records quotas at the account level for Enterprise accounts, replacing per-zone limits with a single quota of 1,000,000 records across all zones. Public and internal zones …

Cloudflare launches Flagship API reference for programmatic feature flag management

Cloudflare introduced a new API reference enabling programmatic management of Flagship apps and feature flags, including CRUD operations for flags and app resources. The API supports boolean and varia…

Cloudflare Firewall Rules deprecated in favor of WAF custom rules

Cloudflare announced the deprecation of its legacy Firewall Rules product, directing users to migrate existing rules to WAF custom rules. The change affects rule creation, editing, and deletion workfl…

Cloudflare Firewall Rules API deprecated in favor of WAF custom rules

Cloudflare has deprecated its Firewall Rules API, migrating existing rules to WAF custom rules. The API will no longer be supported, and users are directed to upgrade via a provided guide.

Pricing updated for Cloudflare: - New tier: Free (Workers) ($0/mo) - New tier: Paid (Workers) (Custom pricing) - New tier: Free (Workers KV) ($0/mo) - New tier: Paid (Workers KV) (Custom pricing) - Ne

miniflare@4.20260609.0

Patch Changes #14192 d076bcc Thanks @dependabot ! - Update dependencies of "miniflare", "wrangler" The following dependency versions have been updated: Dependency From To workerd 1.20260603.1 1.202606…

wrangler@4.99.0

Minor Changes #14169 0706fbf Thanks @edmundhung ! - Introduce createTestHarness() for integration testing Workers It runs Workers in a local preview environment using production build output and works…

Cloudflare Email Service adds authenticated SMTP submission endpoint

Cloudflare introduced an authenticated SMTP submission endpoint (smtp.mx.cloudflare.net:465) for its Email Service, enabling SMTP-capable applications to send emails using Cloudflare API tokens. The e…

Cloudflare enables native email sending from Workers via Email Service binding

Cloudflare introduced a new Workers API binding (`send_email`) that allows developers to send emails directly from Cloudflare Workers using the `send()` method. The feature supports structured email b…

Cloudflare launches Email Service for transactional emails and routing

Cloudflare introduced Email Service, enabling outbound transactional email sending (beta) and incoming email routing via Workers or custom addresses. Email Sending is available on Workers Paid plans, …

Cloudflare launches REST API for email sending

Cloudflare introduced a new REST API endpoint (`POST /accounts/{account_id}/email/sending/send`) enabling email delivery via standard HTTP requests without requiring Cloudflare Workers bindings. The A…

Defend against frontier cyber models: Cloudflare's architecture as customer zero

Cloudflare introduced architectural changes to its security stack to address risks posed by frontier AI models, which accelerate vulnerability discovery and exploit generation. Key updates include ML-…

Cloudflare deprecates legacy Sandbox SDK features ahead of July 2026 removal

Cloudflare announced the deprecation of several Sandbox SDK features, including HTTP/WebSocket transports, desktop mode, expose ports, and default sessions, with removal set for July 9, 2026. The RPC …

WAF - WAF Release - 2026-06-09

Cloudflare’s June 9, 2026 WAF release introduces new detections for critical vulnerabilities including SQL injection in Drupal (CVE-2026-9082), unsafe deserialization in Mirasvit Cache Warmer (CVE-202…

Cloudflare launches RealtimeKit meetings API with AI-powered transcription and customizable summaries

Cloudflare introduced a new API endpoint to create meetings with granular control over AI-driven transcription and summarization. Features include customizable summary types (e.g., sales calls, code r…

Cloudflare RealtimeKit adds AI-powered meeting summaries

Cloudflare’s RealtimeKit now generates AI-powered meeting summaries from transcript data, configurable via API with options for word limits, formats, and meeting-specific types. Summaries can be trigg…

Cloudflare launches whisper-large-v3-turbo AI model for Workers AI

Cloudflare introduced whisper-large-v3-turbo, a new automatic speech recognition (ASR) model available on its Workers AI platform. The model supports batch processing, costs $0.00051 per audio minute,…

Cloudflare launches R2 SQL for distributed analytics on Iceberg tables

Cloudflare introduced R2 SQL, a serverless distributed SQL engine for querying Apache Iceberg tables stored in R2 Data Catalog. Currently in open beta, R2 SQL enables SQL-based analytics on large data…

Cloudflare AI Gateway adds Bring Your Own Keys (BYOK) for secure API key storage

Cloudflare AI Gateway now supports Bring Your Own Keys (BYOK), allowing users to securely store AI provider API keys in Cloudflare’s Secrets Store and reference them in gateway configurations. This el…

Turning Cloudflare’s threat indicators into real-time WAF rules

Cloudflare now allows customers to write proactive WAF rules using live threat intelligence data, enabling automated blocking of high-risk IPs based on threat actor names, targeted industries, attack …

Cloudflare enables one-click WAF rule creation from Threat Events saved views

Cloudflare introduced a feature allowing users to generate WAF rules directly from Threat Events saved views, automating the blocking of malicious IPs identified in threat patterns. The functionality …

Cloudflare launches Threat Actor Profiles in Threat Events dashboard

Cloudflare introduced Threat Actor Profiles in its Threat Events dashboard, providing real-time adversary context for blocked attacks. The feature integrates Cloudforce One’s research to reveal attack…

Cloudflare RealtimeKit adds Generally Available post-meeting transcriptions and AI summaries

Cloudflare’s RealtimeKit now offers Generally Available post-meeting transcriptions and AI-generated summaries for completed meetings, powered by Workers AI and Whisper Large v3 Turbo. The feature int…

Cloudflare adds authenticated SMTP submission to Email Service in beta

Cloudflare launched authenticated SMTP submission for its Email Service in beta, enabling transactional email delivery via smtp.mx.cloudflare.net:465. The feature supports existing SMTP libraries and …

Cloudflare R2 SQL adds UNION, INTERSECT, EXCEPT, and SELECT DISTINCT

Cloudflare’s R2 SQL now supports set operations (UNION, INTERSECT, EXCEPT) and SELECT DISTINCT for Apache Iceberg tables in R2 Data Catalog. These additions enable more complex analytical queries dire…

Pricing updated for Cloudflare: - Free: promotion ended (was: forever)

Your AI bill is out of control. Cloudflare can fix it now.

Cloudflare introduced spend limits and identity-driven budgets in AI Gateway to address uncontrolled AI costs. The new features allow setting dollar-based budgets by model, provider, user, team, or ap…

Cloudflare AI Gateway adds spend limits for cost-based budgeting

Cloudflare introduced spend limits in AI Gateway to enforce cost-based budgets by model, provider, or custom metadata like user or team. Requests exceeding limits trigger a 429 response or can fall ba…

Pricing updated for Cloudflare: - Free: new promotion — forever

Cloudflare extends Gateway policies to Workers' public Internet egress

Cloudflare now routes Workers using `cf1:network` VPC bindings through Cloudflare Gateway for public Internet egress, applying existing Zero Trust policies (DNS, HTTP, Network) to Worker traffic. This…

Cloudflare Radar adds daily granularity for 1-3 month traffic charts

Cloudflare Radar now offers daily granularity for 1-3 month traffic views and weekly granularity for views longer than 3 months, replacing previous weekly and monthly defaults. This increases data poi…

AI Gateway - Control AI costs with spend limits

Cloudflare’s AI Gateway now supports spend limits, allowing users to set cost-based budgets that block requests when exceeded. Limits can be scoped by model, provider, or metadata, with configurable t…

Cloudflare Workflows adds saga-style rollback support

Cloudflare Workflows now supports saga-style rollbacks, enabling developers to attach compensating logic to each step.do() call for downstream failures. Rollback handlers execute in reverse order if a…

Cloudflare launches IdP federation for Zero Trust Access

Cloudflare introduced IdP federation, enabling organizations to share a single identity provider (e.g., Okta or Entra ID) across multiple Cloudflare accounts via a bridge application. Recipient accoun…

VoidZero is joining Cloudflare

Cloudflare acquired VoidZero, the company behind Vite, Vitest, Rolldown, Oxc, and Vite+, with all team members joining Cloudflare. Vite and other tools will remain open source, vendor-agnostic, and co…

Pipelines, Workers - Pipeline binding configuration field renamed to stream

Cloudflare renamed the 'pipeline' field in Pipelines/Workers binding configurations to 'stream' in Wrangler config files, though the old field remains temporarily accepted. The change requires updates…

Cloudflare acquires VoidZero, creators of Vite and Vitest

Cloudflare announced the acquisition of VoidZero, the team behind Vite, Vitest, Rolldown, Oxc, and Vite+. Vite will remain open source and vendor-agnostic under Cloudflare's stewardship.

Cloudflare acquires VoidZero to build the future of the AI-native web

Cloudflare acquired VoidZero, the company behind Vite and its open-source JavaScript tooling ecosystem, for an undisclosed amount. The deal unifies Vite, Vitest, Rolldown, and Oxc into Cloudflare’s Wo…

Cloudflare enables IdP federation for multi-account identity provider sharing

Cloudflare Access now allows organizations to share a single identity provider configuration across multiple Cloudflare accounts via IdP federation. Instead of configuring Okta or Entra ID separately …

Cloudflare adds billable usage and budget alerts to product sidebars

Cloudflare introduced a new sidebar widget in product pages (Workers, D1, R2, KV, Queues, Vectorize, Durable Objects, Containers) showing real-time billable usage and billing cycle dates for pay-as-yo…

Cloudflare launches AI chat agent framework with Durable Objects and SQLite persistence

Cloudflare introduced a new AI chat agent framework via the `@cloudflare/ai-chat` package, featuring server-side `AIChatAgent` and React `useAgentChat` hook. The framework enables automatic message pe…

Cloudflare Workers adds bulk secret update API for scripts

Cloudflare introduced a new PATCH endpoint to bulk create, update, or delete secrets for Workers scripts in a single operation using JSON Merge Patch. The API supports text secrets and cryptographic k…

Cloudflare launches MCP server portals in Access for centralized AI tool management

Cloudflare introduced MCP server portals in Access, enabling centralized management of multiple Model Context Protocol (MCP) servers via a single HTTP endpoint. Admins can curate tools, enforce polici…

Enforcing the First AS in BGP AS_PATHs

Cloudflare details recent BGP route hijacks exploiting forged AS_PATHs, where attackers strip legitimate ASNs to impersonate origin networks. The company argues for widespread adoption of First AS enf…

Cloudflare WAN integrates with Cisco IOS XE for post-quantum IPsec tunnels

Cloudflare launched a documented integration enabling Cisco IOS XE routers to establish IPsec tunnels with Cloudflare WAN using post-quantum cryptography (ML-KEM 768). The setup supports active/active…

Cloudflare launches bulk secrets API for Workers

Cloudflare introduced a new bulk secrets API endpoint for Workers, enabling simultaneous creation, updates, and deletions of up to 100 secrets per request. The feature is accessible via REST API or Wr…

Cloudflare Access adds SAML assertion encryption for identity providers

Cloudflare Access now encrypts SAML assertions from identity providers using Cloudflare-managed certificates, preventing plaintext exposure even after TLS termination. The feature includes automatic c…

Cloudflare Fundamentals - Introducing self-managed OAuth clients

Cloudflare introduced self-managed OAuth clients, allowing developers to create and manage their own OAuth applications for secure third-party integrations with Cloudflare services. Users can grant sc…

Cloudflare adds new ways to trigger Workflows from Workers, REST API, and CLI

Cloudflare expanded how Workflows can be triggered, now supporting direct HTTP requests via Workers fetch handlers, Queue consumers, scheduled bindings in Wrangler, Cron Triggers, and Durable Objects.…

Workflows, Workers - Schedule Workflow instances directly from your Workflow binding

Cloudflare now allows attaching cron schedules directly to Workflow bindings in wrangler.jsonc, eliminating the need for separate Worker handlers to trigger recurring Workflow instances. This simplifi…

Cloudflare Agents SDK v0.14.0 adds Agent Skills, Telegram messengers, scheduled tasks, and hardened chat recovery

Cloudflare released Agents SDK v0.14.0 with experimental Agent Skills for modular on-demand capabilities, Telegram chat integration via messengers, declarative scheduled tasks with timezone support, a…

Cloudflare adds cron scheduling to Workflows bindings

Cloudflare introduced the ability to attach cron schedules directly to Workflow bindings in wrangler.jsonc, enabling automatic Workflow instance creation on recurring intervals without separate Cron T…

Cloudflare updates Cisco IOS XE integration with PQC, PBR, and IP SLA

Cloudflare expanded its Cisco IOS XE third-party integration guide to include Post-Quantum Cryptography, Policy-Based Routing, and IP SLA for Cloudflare WAN. The update enhances routing and security c…

How we reduced core unit boot time from hours to minutes

Cloudflare resolved a four-hour core server boot time issue caused by a firmware update that triggered a linear search through network boot interfaces. By declaring the correct boot interface upfront …

Cloudflare Sandbox adds tunnels API for zero-config service exposure

Cloudflare’s Sandbox SDK now includes a `sandbox.tunnels` namespace that exposes sandbox services on auto-generated `*.trycloudflare.com` URLs without requiring Cloudflare accounts, DNS records, or cu…

Cloudflare adds Turnstile Events dataset to Logpush

Cloudflare introduced a new Turnstile Events dataset in its Logpush service, enabling detailed logging of bot mitigation events with fields like ASN, Action, BrowserMajor, and CountryCode. This datase…