Releasesby GlyphSecurity Center - New Application Security reports (Closed Beta)
Cloudflare's new Application Security report , currently in Closed Beta, is now available in the dashboard. Go to Security reports ↗ The reports are generated monthly and provide cyber security insights trends for all of the Enterprise zones in your Cloudflare account.
Also shipped Oct 17, 2025Cloudflare in October 2025 →
What's new in Sigma
Admin IP Allowlist for UI/Application (GA) You can configure an IP allowlist for the Sigma UI. After enabling the allowlist, you can add individual IP addresses or ranges of addresses in CIDR notation. Only users in the allowlist are able to access the Sigma application through the user interface. For more information, see Restrict access to Sigma by IP .
Repo-aware settings, Secure DB queries, IPv4 Private Networks
Last week, [we merged a PR from a hot air balloon in Mexico City](https://railway.com/changelog/2025-10-10-retreat-v8) (yes, really). This week, we're back on the ground and back to shipping.
FGA Logging API Now Generally Available
__FGA Logging API Now Generally Available__ The Auth0 FGA Logging API is now Generally Available (GA). This dedicated endpoint provides a comprehensive audit trail for every interaction with the FGA system. You can now programmatically retrieve detailed logs for auditing, debugging, and monitoring.
Console improvements, infrastructure updates, and E2E testing guides release - Oct 17, 2025
Configure scale to zero in the console. Scale plan users can now adjust their scale to zero timeout directly in the Neon Console. Simply select Edit compute fro...
truss 0.11.13
- Allow run of precommit from GHA Web interface Add FP4_MLP_ONLY option in truss config Add truss-transfer-metrics on rust side. Bump up version since config changes not visible on rc3 Allow "truss watch" to succeed on external package dirs Revert "Allow "truss watch" to succeed on external package dirs " Use List type to make tests pass add prometheus...
Purchase Hub for Ecommerce Checkout Analysis
Purchase Hub is a resource for ecommerce users to master how to use Amplitude for checkout experiences, which are naturally more complex to track. The Purchase Hub teaches users how to: Connect the steps of an ecommerce checkout using consistent event properties (e.g., product ID).
More from Cloudflare developer platformEvery Cloudflare developer platform release →
Email security - On-Demand Security Report
You can now generate on-demand security reports directly from the Cloudflare dashboard. This new feature provides a comprehensive overview of your email security posture, making it easier than ever to demonstrate the value of Cloudflare’s Email security to executives and other decision makers.
WAF - New detections released for WAF managed rulesets
This week we introduced several new detections across Cloudflare Managed Rulesets, expanding coverage for high-impact vulnerability classes such as SSRF, SQLi, SSTI, Reverse Shell attempts, and Prototype Pollution.
Cloudflare One Client - WARP client for Windows (version 2025.9.173.1)
A new Beta release for the Windows WARP client is now available on the beta releases downloads page . This release contains minor fixes, improvements, and new features including Path Maximum Transmission Unit Discovery (PMTUD). With PMTUD enabled, the client will dynamically adjust packet sizing to optimize connection performance.
Cloudflare One Client - WARP client for macOS (version 2025.9.173.1)
A new Beta release for the macOS WARP client is now available on the beta releases downloads page . This release contains minor fixes, improvements, and new features including Path Maximum Transmission Unit Discovery (PMTUD). With PMTUD enabled, the client will dynamically adjust packet sizing to optimize connection performance.
Durable Objects, Workers - View and edit Durable Object data in UI with Data Studio (Beta)
You can now view and write to each Durable Object's storage using a UI editor on the Cloudflare dashboard. Only Durable Objects using SQLite storage can use Data Studio. Go to Durable Objects ↗ Data Studio unlocks easier data access with Durable Objects for prototyping application data models to debugging production storage usage.
Cloudflare Fundamentals - Increased HTTP header size limit to 128 KB
CDN now supports 128 KB request and response headers 🚀 We're excited to announce a significant increase in the maximum header size supported by Cloudflare's Content Delivery Network (CDN). Cloudflare now supports up to 128 KB for both request and response headers .
Load Balancing - Monitor Groups for Advanced Health Checking With Load Balancing
Cloudflare Load Balancing now supports Monitor Groups, a powerful new way to combine multiple health monitors into a single, logical group. This allows you to create sophisticated health checks that more accurately reflect the true availability of your applications by assessing multiple services at once.
Gateway - Schedule DNS policies from the UI
Admins can now create scheduled DNS policies directly from the Zero Trust dashboard, without using the API. You can configure policies to be active during specific, recurring times, such as blocking social media during business hours or gaming sites on school nights.