Skip to content

TAG

Zero Trust

August 14, 2026

How Cloudflare detects MCP traffic and helps secure it

Cloudflare Gateway identifies MCP requests using protocol-level heuristics. Security teams can use that signal to find shadow MCP traffic, enforce Portal-only access for approved servers, and block direct connections on managed network paths.

[AJ Gerstenhaber][Kenny Johnson]

AJ Gerstenhaber and Kenny Johnson

August 14, 2026

Secure all your internal vibe-coded applications — in one click

Introducing Cloudflare Access for Workers. Attach an Access policy directly to a Worker and it applies everywhere that Worker runs — routes, custom domains, workers.dev, and previews — automatically.

[Chythra Malapati][Matt Rothenberg][Matt Provost]

Chythra Malapati,Matt Rothenberg, and Matt Provost

August 10, 2026

Everything we launched during Agents Week

Our latest Agents Week has come to a close. Here’s a recap of all the announcements we made from Wallets to Radar.

[Shelley Jones][Ann Ming Samborski][Kathy Liao]

Shelley Jones,Ann Ming Samborski, and Kathy Liao

August 5, 2026

Cloudflare is the only vendor named a Visionary in 2026 SASE and SSE reports

We're honored to announce that Cloudflare is the only vendor that has been recognized as a Visionary in both the 2026 Gartner® Magic Quadrant™ for SASE Platforms and the 2026 Gartner® Magic Quadrant™ for Security Service Edge reports.

[Michael Keane]

Michael Keane

August 5, 2026

The Agent Access Model

The Agent Access Model proposes a new architecture to secure task-scoped agents using strict identity brokering, continuous mediation, and stateful trust.

[Matt Silverlock]

Matt Silverlock

August 5, 2026

How we’re rethinking work at Cloudflare with Cloudflare OS

We built Cloudflare OS to equip our teams to safely rethink how they get work done with AI. The platform brings together the best of our technologies, from our Compute primitives to our Zero Trust suite. This post walks through our journey to give our users the best AI tools available.

[Sam Rhea]

Sam Rhea

July 20, 2026

Cloudflare Internal DNS is now generally available

Cloudflare Internal DNS brings authoritative and recursive DNS for private networks to the same global network and control plane that runs Cloudflare's Zero Trust, networking, and public DNS.

[Enrique Somoza][Hannes Gerhart]

Enrique Somoza and Hannes Gerhart

June 17, 2026

Introducing the Cloudflare One stack: agent-powered deployment

The Cloudflare One stack is a library of agent skills that gives any AI agent the knowledge it needs to plan, deploy, and manage a Zero Trust environment — no migration calls required.

[AJ Gerstenhaber][Abe Carryl]

AJ Gerstenhaber and Abe Carryl

June 10, 2026

Route public traffic to private applications with Cloudflare

Application Services for Private Origins is available now in closed beta. Route public hostnames to private IP origins over your existing IPsec, GRE, CNI, or Cloudflare Mesh paths. No public IPs or extra connector software required.

[Enrique Somoza][Steve Welham][Shruti Mittal]

Enrique Somoza,Steve Welham, and Shruti Mittal

June 9, 2026

Defend against frontier cyber models: Cloudflare's architecture as customer zero

In our post about Project Glasswing, we made the argument that the architecture around a vulnerability matters more than the speed of the patch. Here we walk through what that architecture looks like, the threats it defends against, and how we run it ourselves as Cloudflare's customer zero.

[Rohit Chenna Reddy][Chase Catelli][Dan Jones]

Rohit Chenna Reddy,Chase Catelli, and Dan Jones

May 21, 2026

Announcing Claude Compliance API support with Cloudflare CASB

Cloudflare now integrates with the Claude Compliance API, so that security teams can monitor Claude Enterprise activity directly in the Cloudflare Dashboard.

[Abe Carryl]

Abe Carryl

April 14, 2026

Managed OAuth for Access: make internal apps agent-ready in one click

Managed OAuth for Cloudflare Access helps AI agents securely navigate internal applications. By adopting RFC 9728, agents can authenticate on behalf of users without using insecure service accounts.

[Eduardo Gomes][James Royal][Ann Ming Samborski]

Eduardo Gomes,James Royal, and Ann Ming Samborski

April 14, 2026

Secure private networking for everyone: users, nodes, agents, Workers — introducing Cloudflare Mesh

Cloudflare Mesh provides secure, private network access for users, nodes, and autonomous AI agents. By integrating with Workers VPC, developers can now grant agents scoped access to private databases and APIs without manual tunnels.

[Nikita Cano][Thomas Gauvin]

Nikita Cano and Thomas Gauvin

March 5, 2026

A QUICker SASE client: re-building Proxy Mode

By transitioning the Cloudflare One Client to use QUIC streams for Proxy Mode, we eliminated the overhead of user-space TCP stacks, resulting in a 2x increase in throughput and significant latency reduction for end users.

[Koko Uko][Logan Praneis][Gregor Maier]

Koko Uko,Logan Praneis, and Gregor Maier

March 5, 2026

Ending the "silent drop": how Dynamic Path MTU Discovery makes the Cloudflare One Client more resilient

The Cloudflare One Client now features the ability to actively probe and adjust packet sizes. This update eliminates the problems caused by tunnel layering and MTU differences, providing more stability and resiliency. 

[Koko Uko][Rhett Griggs][Todd Murray]

Koko Uko,Rhett Griggs, and Todd Murray

March 4, 2026

Mind the gap: new tools for continuous enforcement from boot to login

Cloudflare’s mandatory authentication and independent MFA protect organizations by ensuring continuous enforcement, from the moment a machine boots until sensitive resources are accessed.

[Alex Holland][Shahed El Baba][Yi Huang][Rhett Griggs]

Alex Holland,Shahed El Baba,Yi Huang, and Rhett Griggs

March 3, 2026

From reactive to proactive: closing the phishing gap with LLMs

Email security is a constant arms race. Like WWII engineers reinforcing only the planes that returned, survivorship bias hides real gaps. But LLMs can help us find the invisible weaknesses.

[Sebastian Alovisi][Ayush Kumar]

Sebastian Alovisi and Ayush Kumar

March 2, 2026

The truly programmable SASE platform

As the only SASE platform with a native developer stack, we’re giving you the tools to build custom, real-time security logic and integrations directly at the edge.

[Abe Carryl]

Abe Carryl

Load more