Field notes from the edge.
What our engineers learned this week. Hands-on technical deep-dives, postmortems, and strategy frameworks.
AIUnveiling good and bad behaviors on the Agentic Internet
Cloudflare's Web Integrity & Trust team is shifting from binary bot detection to behavioral analysis as the line between human and automated traffic blurs in the 'Agentic Internet.' The company distinguishes between ephemeral 'Risk' and reputation-based 'Trust,' using tools like BotBase for transparent bot verification and Precursor for continuous client-side behavioral detection throughout user s
AIThe next generation of MCP
The Model Context Protocol (MCP) has released a major update (specification 2026-07-28) that transforms it from a stateful to a fully stateless protocol, eliminating the need for complex session management and sticky connections. This architectural shift allows MCP servers to run on simpler, serverless infrastructure like Cloudflare Workers instead of requiring stateful servers, reducing operation
AICloudflare AI Search: give your agents a search engine for your data
Cloudflare has enhanced its AI Search platform to simplify deployment of search solutions for AI agents, eliminating the need to manually integrate multiple Cloudflare primitives. The service now offers automatic indexing, public endpoints for multi-instance searching, custom domain support, and predictable pricing with free embedding and reranking when using default models. Cloudflare demonstrate
AICloudflare is the only vendor named a Visionary in 2026 SASE and SSE reports
Cloudflare has been recognized as the only vendor named a Visionary in both Gartner's 2026 Magic Quadrant reports for SASE Platforms and Security Service Edge. The company differentiates itself through unified architecture built on a single global network, contrasting with competitors' fragmented, acquisition-based platforms. Cloudflare emphasizes its leadership in emerging security challenges inc
AIHow we’re rethinking work at Cloudflare with Cloudflare OS
Cloudflare's CIO describes the company's journey building 'Cloudflare OS,' an internal platform that enables employees to safely deploy AI agents while maintaining security controls. The initiative emerged from employee demand to use AI tools for transforming workflows, requiring Cloudflare to balance innovation enablement with data protection and access governance. The platform combines existing
AICloudflare OS: an open platform for agents, apps, and work
Cloudflare has open-sourced Cloudflare OS, an enterprise platform that provides AI agents and workspaces grounded in company-specific context, terminology, and systems. The platform enables employees across all functions to create documents, automate tasks, build apps, and run workflows while maintaining security and governance over internal data access. After internal deployment to thousands of C
AIThe Agent Access Model
The Agent Access Model (AAM) proposes a new security framework for AI agents that addresses the inadequacies of existing Zero Trust controls designed for human users. Unlike BeyondCorp's identity-based approach, AAM requires authorizing every individual agent action against the specific task scope and accumulated state, rather than trusting the entire task execution. This shift is necessary becaus
AIAnnouncing Cloudflare Wallets: The programmable wallet for the agentic Internet
Cloudflare has launched Cloudflare Wallets, a programmable payment solution designed to enable AI agents to autonomously purchase and test APIs without human intervention. The system features Account Wallets for human administrators and Virtual Wallets for AI agents, with configurable spending limits and guardrails to enable safe, autonomous exploration of services. This initiative complements Clo
AIThe Agent Development Lifecycle has arrived on Cloudflare
Cloudflare introduces the Agent Development Lifecycle (ADLC) to replace the traditional Software Development Lifecycle (SDLC), arguing that AI agents have made code implementation fast and cheap but overwhelmed other development phases. The company is releasing new tools including @cloudflare/ci, OpenTelemetry traces for local development, and Cloudflare Agents to enable AI agents to manage the en
AIYour agent needs a computer, not a container — introducing @cloudflare/computer
Cloudflare has introduced @cloudflare/computer, an open-source package that provides agents with a unified compute environment combining isolates and containers with a shared filesystem. The solution addresses scalability challenges in agentic AI systems by leveraging Cloudflare's isolate technology, which can scale horizontally to support billions of concurrent agents more efficiently than tradit
AIIntroducing the Billable Usage API: programmatic cost visibility for Cloudflare
Cloudflare has launched a Billable Usage API that provides programmatic access to cost and usage data across all usage-based products, designed specifically for automated systems and agents that deploy infrastructure. The API follows FinOps Open Cost and Usage Specification (FOCUS) standards and integrates with third-party cost management platforms like Vantage, enabling enterprises to track Cloud
AICloudflare Workers and Containers now support inbound TCP connections and gRPC
Cloudflare has announced support for inbound TCP connections and gRPC in Workers and Containers, enabling developers to build low-latency, real-time applications like voice AI assistants. The new capabilities include a connect(socket) handler for direct TCP socket acceptance, full-duplex bidirectional gRPC support in Containers, and automatic gRPC-to-gRPC-web conversion for Workers. These features
AIWelcome to Agents Week
This announcement introduces 'Agents Week,' a series exploring the concept of an 'Agent Cloud'—infrastructure purpose-built for AI agents rather than humans. The initiative examines how cloud computing primitives, development lifecycles, security controls, and web interactions must evolve to serve agent-native workflows while bridging today's human-centric systems.
AIAn API for MoQ: provision your own isolated relays
Cloudflare has launched a provisioning API for Media over QUIC (MoQ) that enables enterprises to create isolated relays with granular access controls for publishers and subscribers. Unlike traditional relay deployments requiring dedicated servers, Cloudflare's approach provisions isolated scopes across its existing global network, making relays available instantly across 330+ cities without infras
AIDogfooding at scale: migrating cdnjs to Cloudflare’s Developer Platform
Cloudflare successfully migrated cdnjs, serving 9 billion requests daily across 12% of all websites, entirely onto its Developer Platform using Workers, Workflows, D1, Queues, and other services. The migration addressed critical pain points in the previous GCP-based architecture, including poor observability, split-brain storage between KV and GitHub, and fragmented pipeline orchestration. The pro
AIPost-quantum authentication to origins is now supported
Cloudflare has achieved a major milestone in post-quantum cryptography by enabling ML-DSA (Module-Lattice-Based Digital Signature Algorithm) authentication for connections between Cloudflare and customer origin servers through its Authenticated Origin Pulls and Custom Origin Trust Store products. This deployment addresses the growing threat of quantum computers breaking classical credentials for i
AINatural disasters and government interference: examining Q2 2026’s major Internet disruption event
Cloudflare's Q2 2026 analysis reveals significant Internet disruptions from both natural disasters and government interventions, with Super Typhoon Sinlaku causing an 80% traffic drop in Guam and Iran's 88-day Internet shutdown partially ending with connectivity restored to only 59% of pre-shutdown levels. The report highlights critical infrastructure vulnerabilities, including AWS data center dam
We’re open sourcing our privacy proxy CLI
Debugging privacy-preserving protocols is hard. Oblivious HTTP has several different steps across four different parties, not to mention binary HTTP encoding and details spread across many draft RFCs. We've taken what we've learned operating protocols like Oblivious HTTP at the scale of millions of requests per second, and wrapped it up in a nice, clean CLI tool — that we are o
BGP ORIGIN attribute manipulation and its impact on the Internet
Border Gateway Protocol ( BGP ) is the de facto routing protocol of the Internet. It offers built-in mechanisms to allow entities, represented by Autonomous Systems (ASes), to express how they want to send and receive traffic on the Internet. One such mechanism is path attributes , which carry essential routing information and metadata for their associated route. The path selec