Cloudflare One now includes fast flux detection as a predefined risk behavior for user and entity behavior analytics (UEBA).

We are refreshing the Workers AI model catalog. Twenty-four older models will be deprecated on November 15, 2026.

Account Abuse Protection (in early access) now shows which recognized AI assistants make login and sign up requests, and ...

The Configure AI bot policies setting is now named AI Crawler and Agent access policies. Personal agents act on a person's behalf, fetching information or browsing in response to a request. The ...

Cloudflare Radar now includes Zero Wire, a hub of briefings on critical vulnerabilities and threats, with confirmed facts, open questions, remediation steps, and related Cloudflare data.

AI Search billing now begins on December 1, 2026 instead of November 1, 2026. New instances sync every 24 hours by default.

You can now assign key-value tags to Access service tokens and use those tags to organize credentials or control application access. Each token supports up to five tags, such as environment: ...

JavaScript Workers with compatibility dates on or after November 17, 2026 will use URL-based module resolution and import.meta by default.

Monetization Gateway is in closed beta. Request access in the Cloudflare Dashboard ↗︎. Monetization Gateway applies x402 payment requirements to matching traffic. You define the shape of the request ...

Web Assets automatically discovers operations in web applications proxied through Cloudflare. Operation context helps you define security protections against application-specific functionalities. For ...

Spin up Workers at runtime to execute code on-demand in a secure, sandboxed environment. Dynamic Workers let you spin up an unlimited number of Workers to execute arbitrary code specified at runtime.