Cloudflare Radar now includes Zero Wire, a hub of briefings on critical vulnerabilities and threats, with confirmed facts, open questions, remediation steps, and related Cloudflare data.

The Configure AI bot policies setting is now named AI Crawler and Agent access policies. Personal agents act on a person's behalf, fetching information or browsing in response to a request. The ...

AI Search billing now begins on December 1, 2026 instead of November 1, 2026. New instances sync every 24 hours by default.

You can now assign key-value tags to Access service tokens and use those tags to organize credentials or control application access. Each token supports up to five tags, such as environment: ...

JavaScript Workers with compatibility dates on or after November 17, 2026 will use URL-based module resolution and import.meta by default.

Active Durable Objects get up to 5 minutes to finish work before adopting new code. You can configure the delay or apply ...

The new DNS records experience announced in May is now the default for all users on all plans, including Enterprise. The ...

Keyless SSL supports TLS 1.3 for ECDSA certificates. When TLS 1.3 is enabled on your zone, visitors connecting to a hostname ...

Cloudflare WAN traffic can now use a Gateway processing region with Regional Services. HTTPS traffic enters a Cloudflare data ...

Cloudflare One users must first authenticate to Access or register a device with the Cloudflare One Client before SCIM ...

The D1 undelete API now only accepts requests for databases that were deleted within the last 7 days. Requests to undelete a ...

Workers Builds retains each build and its build logs for 90 days. Versions, deployments, and rollbacks are not affected.