Access for Workers Brings Unified Policy Protection

Cloudflare has introduced Access for Workers, enabling organizations to attach Access policies directly to Worker instances. Once configured, these policies automatically apply across all deployment contexts—including routes, custom domains, workers.dev subdomains, and preview environments—without requiring separate policy declarations.

Bot Preference Sync Automates robots.txt Alignment

The new Bot Preference Sync feature automatically synchronizes robots.txt files with AI bot policies governing search engines, agents, and training activities. This eliminates the need to maintain static files while providing granular control over which bots can access content.

OAuth Now Supports Granular Scope Control

Cloudflare OAuth has expanded to support optional scopes, giving end users finer control over application permissions. Developers can now construct task-specific authorization flows that enhance security while maintaining user agency.

Remote Spectre Attacks Against Workers Re-examined

Between 2024 and 2025, Cloudflare reassessed remote Spectre attacks targeting Workers infrastructure. The analysis revealed new attack primitives including Spectre gadgets, remote timing techniques, and co-location exploitation methods, alongside enhanced defensive measures to strengthen Workers security.

Gateway Detects MCP Traffic to Prevent Shadow Deployments

Cloudflare Gateway uses protocol-layer heuristics to identify MCP requests, allowing security teams to discover unauthorized MCP traffic, enforce portal-only access to approved servers, and block direct connections on managed network paths.

Internet Traffic Disrupted During Total Solar Eclipse

Cloudflare data documented significant internet traffic impacts during the total solar eclipse on August 12, 2026, with effects concentrated along the path of totality extending from Iceland through Spain and Portugal.

Post-Quantum Cryptography: Why Waiting Is Not an Option

The National Institute of Standards and Technology (NIST) is advancing nine new post-quantum signature algorithms as potential standardization candidates. While these algorithms show promise, Cloudflare recommends immediate adoption of ML-DSA as the best currently available option rather than delaying implementation.

Workers Cache Brings Hierarchical Caching to Edge

Workers Cache introduces a regional hierarchical caching layer positioned directly in front of Workers. The system supports unlimited combinations and configuration through standard HTTP headers.

Monetization Gateway Enables Charging for Protected Resources

Cloudflare is opening the waitlist for Monetization Gateway, a tool enabling organizations to charge for any web page, dataset, API, or MCP tool protected by Cloudflare. Payments are processed through the x402 open protocol using stablecoins, eliminating the need to build custom payment infrastructure.

Agents Week Announcements Recap

Cloudflare's latest Agents Week concluded with multiple product announcements spanning from Wallets to Radar capabilities.

DDoS Attacks Surge 519% in First Half of 2026

Cloudflare detected a 519% increase in mega-scale DDoS attacks across its network during the first half of 2026, with most attacks leveraging DNS and CLDAP reflection techniques. The report examines how major geopolitical conflicts are reshaping the global threat landscape.

Continuous Trust Assessment Replaces Point-in-Time Bot Risk Evaluation

Cloudflare is transitioning bot mitigation from snapshot risk assessment to ongoing trust evaluation. The company's systems, including BotBase and Precursor, assess benign and malicious bot behavior, with Precursor Trace simulation available to demonstrate how cursor movements are evaluated as human or bot activity.

Agent Readiness and Answer Engine Optimization Reshape SEO

More than half of all requests now originate from machines rather than humans. Agent Readiness measures how easily agents can discover and read website content, while Answer Engine Optimization tracks how frequently AI assistants recommend a site.

Building an Open Agent Internet Through Cooperation

Agents represent a new class of visitor that do not render CSS or interact with ads, but represent paying human users on the other end. Blocking agents means blocking customers. Cloudflare is developing open tools and protocols enabling content publishers and agents to collaborate rather than conflict.

Identity-Aware Analytics Detect Anomalous AI Behavior

The identity-aware AI Gateway is now available in beta. User Insights converts traffic data into behavioral baselines for each person and agent, flagging internal risks as they emerge.

Cloudflare OS Provides Customizable Agent Platform

Cloudflare OS is an open-source platform customized to an organization's knowledge base and operational practices, enabling team members to build applications, automate workflows, and securely access internal systems.

Agent Development Lifecycle Addresses Deployment Challenges

Agents generate code at speeds that teams struggle to review, deploy, and maintain. Cloudflare has launched the Agent Development Lifecycle (ADLC) along with supporting primitives to address this gap.

Cloudflare Wallets Enable Native Agent Payments

Cloudflare Wallets provides AI agents with native web-based payment capabilities and verifiable identity. Using the x402 protocol, agents can autonomously purchase APIs and content within defined security guardrails.

Billable Usage API Brings Programmatic Cost Visibility

Cloudflare has released a new account-level Billable Usage API providing developers and FinOps teams with programmatic cost and usage visibility through a single endpoint across all self-service products. Built on the FOCUS specification, the API enables seamless integration of Cloudflare spending with other cloud services for unified tracking.

Source: Cloudflare Blog