Automated Bot Policy Synchronization Launches

Cloudflare's newly released Bot Preference Sync feature automatically keeps a site's robots.txt file aligned with AI bot policies covering search, agents, and training use cases. The capability eliminates the need to maintain static configuration files while giving administrators straightforward control over which bots can access their content.

OAuth Now Supports Granular Scope Controls

Cloudflare's OAuth implementation now includes optional scopes, giving users greater control over application permissions while enabling developers to construct task-specific authorization workflows with improved security properties.

Remote Spectre Attacks Against Workers Reassessed

Between 2024 and 2025, Cloudflare re-examined remote Spectre attack vectors targeting its Workers infrastructure. The analysis details novel attack primitives including Spectre gadgets, remote timers, and co-location techniques, alongside new defensive measures to strengthen the Workers platform.

MCP Traffic Detection and Protection

Cloudflare Gateway identifies MCP requests using protocol-level heuristics, enabling security teams to detect shadow MCP traffic, enforce portal-only access to approved servers, and block direct connections on managed network paths.

Access Policies Now Attach Directly to Workers

Cloudflare Access for Workers allows security policies to be attached directly to individual Workers, automatically applying across all deployment contexts—routes, custom domains, workers.dev subdomains, and preview environments.

Solar Eclipse Produces Measurable Internet Traffic Disruption

Cloudflare's network data showed significant internet traffic impact during the total solar eclipse on August 12, 2026, with disruption patterns following the eclipse's path from Iceland through Spain and Portugal.

Post-Quantum Signature Standards Cannot Wait

NIST is advancing nine new post-quantum signature algorithms as potential candidates for future standardization. While all nine show active development and considerable promise, Cloudflare argues that organizations should adopt ML-DSA today as the most mature available solution, rather than waiting for alternatives to mature.

Workers Cache Introduces Tiered Caching Layer

Cloudflare has launched Workers Cache, a regional tiered caching layer positioned in front of Worker entry points. The service offers unlimited composability and configuration through standard HTTP headers.

Monetization Gateway Enables Resource Charging via x402

Cloudflare is opening a waitlist for Monetization Gateway, a service allowing operators to charge for any web resource, dataset, API, or MCP tool behind Cloudflare's infrastructure. Payments settle in stablecoins through the x402 open protocol, eliminating the need to build custom payment infrastructure.

Agents Week Releases Summarized

Cloudflare's Agents Week concluded with a comprehensive set of product announcements spanning wallets, threat intelligence, and related capabilities.

DDoS Threats Surge in First Half of 2026

Cloudflare detected a 519% increase in hyper-volumetric DDoS attacks across its network during the first half of 2026, primarily driven by DNS and CLDAP reflection vectors. The threat report analyzes how major geopolitical conflicts are reshaping global network threat patterns.

Continuous Trust Assessment Replaces Point-in-Time Bot Risk Scoring

Cloudflare is shifting bot mitigation from single-moment risk assessment to continuous trust evaluation. The company's BotBase and Precursor systems evaluate emerging good and bad behavior from bots and agents, with the Precursor Trace simulation tool allowing operators to test how their own cursor movements would be classified as human or bot.

Building an Open Agent Internet

Agents represent a new class of visitor that do not render CSS or click ads, yet are backed by paying humans. Blocking them means blocking customers. Cloudflare is developing open tools and protocols enabling publishers and agents to cooperate rather than conflict.

Preparing Websites for the Agent Era

More than half of all requests now originate from machines rather than humans. Agent Readiness measures how well agents can discover and read a website, while Answer Engine Optimization tracks how frequently AI assistants recommend it.

Identity-Aware AI Gateway Enters Beta

The Identity-Aware AI Gateway is now available in beta testing. User Insights transforms this traffic into behavioral baselines for each user and agent, flagging anomalies as they emerge.

Cloudflare OS Provides Open Platform for Agents and Applications

Cloudflare OS is an open-source platform enabling every person in an organization to build applications, automate workflows, and securely access internal systems, designed with consideration for organizational knowledge and operations.

Agent Development Lifecycle Framework Introduced

Agents now write code faster than teams can review, deploy, and maintain it. Cloudflare has launched the Agent Development Lifecycle along with supporting infrastructure components to address this velocity challenge.

Cloudflare Wallets Enable Native Agent Payments

Cloudflare Wallets provide AI agents with native payment capabilities and verifiable identity on the internet. Using the x402 protocol, agents can autonomously purchase APIs and content within defined security guardrails.

Billable Usage API Offers Programmatic Cost Visibility

Cloudflare has released the Billable Usage API, allowing developers and FinOps teams to programmatically view costs and usage across all self-serve products through a single endpoint. Built around the FOCUS specification, the API integrates seamlessly with broader cloud cost tracking.

Source: Cloudflare Blog