Access - Access private hostname applications support all ports/protocols
Cloudflare Access for private hostname applications can now secure traffic on all ports and protocols. Previously, applying Zero Trust policies to private applications required the application to use HTTPS on port 443 and support Server Name Indicator (SNI). This update removes that limitation.
Also shipped Oct 28, 2025Cloudflare in October 2025 →
Tailscale Services
- New: Use Tailscale Services to decouple applications and services from the devices that host them ( beta ).
Export dashboards as images
Sharing your Grafana dashboards just got easier. You can now export any dashboard as a PNG image. Use the Export as image option to generate an image: A preview of the image is displayed. Click Download image : Using dashboard images, you can quickly send data to your team in chat, added to a presentation, or attached to an email.
GitHub Copilot agent
GitHub Copilot users can now work with the GitHub Copilot agent directly within Linear. Delegate any issue directly or mention GitHub Copilot in a comment, and the agent will use the full issue context to start an implementation in a draft PR. You can follow Copilot's progress on the Linear issue or on the PR in GitHub.
Custom Global Filters Available for Dashboards (Early Adopter)
Global filters can now be added for any of the same properties available when using widget builder.
Everything we covered at Schema by Figma
We announced new design systems features that drive consistency across design, code, and more.
Tailscale v1.90.4
All platforms Fixed: A deadlock issue no longer occurs in the client when checking for the network to be available. Linux Fixed: tailscaled no longer sporadically panics when a Trusted Platform Module (TPM) device is present. Windows Fixed: tailscaled no longer sporadically panics when a Trusted Platform Module (TPM) device is present.
More from Cloudflare developer platformEvery Cloudflare developer platform release →
AI Search - Reranking and API-based system prompt configuration in AI Search
AI Search now supports reranking for improved retrieval quality and allows you to set the system prompt directly in your API requests. Rerank for more relevant results You can now enable reranking to reorder retrieved documents based on their semantic relevance to the user’s query.
CASB introduces new granular roles
Cloudflare CASB (Cloud Access Security Broker) now supports two new granular roles to provide more precise access control for your security teams: Cloudflare CASB Read: Provides read-only access to view CASB findings and dashboards.
Gateway - New Application Categories added for HTTP Traffic Management
To give you precision and flexibility while creating policies to block unwanted traffic, we are introducing new, more granular application categories in the Gateway product.
Logs - Azure Sentinel Connector
Logpush now supports integration with Microsoft Sentinel ↗ .The new Azure Sentinel Connector built on Microsoft’s Codeless Connector Framework (CCF), is now available. This solution replaces the previous Azure Functions-based connector, offering significant improvements in security, data control, and ease of use for customers.
Radar - TLD Insights in Cloudflare Radar
Radar now introduces Top-Level Domain (TLD) insights, providing visibility into popularity based on the DNS magnitude metric, detailed TLD information including its type, manager, DNSSEC support, RDAP support, and WHOIS data, and trends such as DNS query volume and geographic distribution observed by the 1.1.1.1 DNS resolver.
Security Center - Cloudforce One RFI tokens are now visible in the dashboard
The Requests for Information (RFI) dashboard now shows users the number of tokens used by each submitted RFI to better understand usage of tokens and how they relate to each request submitted. What’s new: Users can now see the number of tokens used for a submitted request for information.
Cloudflare Fundamentals - Introducing email two-factor authentication
Two-factor authentication (2FA) is one of the best ways to protect your account from the risk of account takeover. Cloudflare has offered phishing resistant 2FA options including hardware based keys (for example, a Yubikey) and app based TOTP (time-based one-time password) options which use apps like Google or Microsoft's Authenticator app.
Cloudflare Fundamentals - Revamped Member Management UI
As Cloudflare's platform has grown, so has the need for precise, role-based access control. We’ve redesigned the Member Management experience in the Dashboard to help administrators more easily discover, assign, and refine permissions for specific principals.