What Cloudflare shipped in 2026

Pricing change detected for Cloudflare

Pricing updated for Cloudflare: - Free: now includes 1 website - Pro: $25/mo → $20/mo (20% decrease) - Pro: annual price $20/mo → $15/mo - Pro: now includes 1 website - Business: $250/mo → $200/mo (20…

Pricing updated for Cloudflare: - Pro: $20/mo → $25/mo (25% increase) - Pro: annual price $15/mo → $20/mo - New tier: Contract (Custom pricing) - New tier: Pay-as-you-go ($7/mo per user) - Removed: En

Cloudflare launches Qwen 3.8 27B model on Workers AI

Cloudflare added Qwen 3.8 27B, a 27-billion-parameter instruction-tuned language model from Alibaba's Qwen family, to its Workers AI platform. The model supports vision, general-purpose text generatio…

Cloudflare adds origin settings configuration to Tunnel dashboard

Cloudflare now lets users configure origin parameters like TLS verification, HTTP Host headers, and connection timeouts directly in the dashboard for Cloudflare Tunnel applications. Previously, these …

Pricing updated for Cloudflare: - Free: allowance changed from forever to 100k requests/day - Pro: $25/mo → $20/mo (20% decrease) - Pro: annual price $20/mo → $15/mo - Pro: now includes 100k requests/

Cloudflare load balancing analytics now filters by pool name

Cloudflare updated its load balancing analytics to filter traffic data by pool name instead of pool ID, aligning the query behavior with the UI dropdown. This change resolves confusion caused by misma…

Cloudflare updates WAF rulesets for WordPress CVE-2026-65640

Cloudflare released an update to its Managed Ruleset and Free Ruleset to address CVE-2026-65640, a remote code execution vulnerability in WordPress. The changes refine rule metadata for detecting the …

Cloudflare R2 adds US data residency with `us` jurisdiction

Cloudflare introduced a new `us` jurisdiction for R2, ensuring all bucket data storage and processing occurs within the United States. The feature uses a dedicated endpoint and Workers binding configu…

Cloudflare adds post-quantum key exchange to Email Security MX deployments

Cloudflare Email Security now supports post-quantum hybrid key exchange (X25519MLKEM768) on inbound and outbound SMTP connections, protecting against harvest-now, decrypt-later attacks. The feature is…

Workers AI - Qwen 3.8 27B now available on Workers AI

Cloudflare introduced Qwen 3.8 27B, a 27-billion-parameter vision-language model from Alibaba's Qwen family, on its Workers AI platform. The model supports multimodal input (images + text) and include…

Cloudflare adds DeepSeek v4 Pro 0813 to Workers AI

Cloudflare introduced the DeepSeek v4 Pro 0813 model to its Workers AI platform, offering a 1M-token context window, function calling, reasoning, and vision capabilities. The model is available via Cl…

Cloudflare launches DeepSeek-V4-Flash-0731 with enhanced agentic capabilities on Workers AI

Cloudflare officially released DeepSeek-V4-Flash-0731 on its Workers AI platform, replacing the preview version with significantly improved agentic capabilities. The model supports function calling, r…

Cloudflare adds MCP traffic detection and control to Cloudflare One

Cloudflare announced new capabilities in Cloudflare One to identify, monitor, and control Model Context Protocol (MCP) traffic, addressing risks posed by AI agents making rapid, nondeterministic decis…

Secure all your internal vibe-coded applications — in one click

Cloudflare launched new tools to apply Access authentication directly to Workers, ensuring all applications are private by default. Policies can now be attached to individual Workers or account-wide, …

Pricing updated for Cloudflare: - Free: now includes forever

Cloudflare fixes WebSocket data transfer reporting in analytics

Cloudflare restored accurate WebSocket data transfer reporting in HTTP Traffic Analytics and HTTP request logs, now counting full connection data instead of just the initial handshake. The fix correct…

Cloudflare Gateway adds package registry security for seven ecosystems

Cloudflare Gateway now detects and controls software package downloads across seven major ecosystems (npm, PyPI, RubyGems, Cargo, Go, Maven, NuGet) via HTTP policies. Admins can block or allow package…

Cloudflare enables Access policies for Workers at account and per-Worker levels

Cloudflare introduced two new ways to apply Cloudflare Access policies to Workers: one policy per Worker (covering all domains) and a default policy for all Workers in an account. This simplifies secu…

Cloudflare launches DeepSeek V4 Flash and Pro on Workers AI with 1M token context

Cloudflare added DeepSeek V4 Flash and Pro to Workers AI, the first models on the platform with a 1,048,576 token context window. Both support reasoning, function calling, and agentic workflows, with …

Cloudflare enables granular access control for Workers via Cloudflare Access

Cloudflare introduced Cloudflare Access for Workers, allowing account-level or per-Worker sign-in requirements for preview and production deployments. Users can protect all Workers, a single Worker, o…