API Shield - New BOLA Vulnerability Detection for API Shield
Now, API Shield automatically searches for and highlights Broken Object Level Authorization (BOLA) attacks on managed API endpoints. API Shield will highlight both BOLA enumeration attacks and BOLA pollution attacks, telling you what was attacked, by who, and for how long.
Also shipped Nov 12, 2025Cloudflare in November 2025 →
Workflows graduate to beta! Product data, meet automation
Workflows has moved to beta, allowing users to automate product-led actions like emails and Slack alerts based on live event data.
Use Deepgram's Managed Cartesia TTS Models
We're excited to announce an easier way to use Cartesia's Text-to-Speech models inside Deepgram's voice agent – Deepgram-managed Cartesia models . Similar to our managed LLM's , simply specify Cartesia as your model provider and the correct model name to get started instantly.
🤖 Claude Haiku 4.5 LLM Support
We've added support for Anthropic's new Claude Haiku model in our Voice Agent API! Implementation: Configure your chosen model in your Voice Agent settings: { "type": "Settings", "agent": { "think": { "provider": { "type": "anthropic", "model": "claude-haiku-4-5" } } } } For complete information about supported LLMs including Claude Haiku 4.5, visit our...
DuckDB 1.4.2 Bugfix Release
This is a bug fix release for various issues discovered after we released 1.4.1. PR #19716 addresses the issues raised in CVE-2025-64429 . Users of the DuckDB encryption feature are encouraged to update.
New Dynamic Client Registration (DCR) Scope Added to Tenant ACL
Auth0 has added a __Dynamic Client Registration (DCR)__ scope to the __Tenant Access Control List (ACL)__. This enhancement allows administrators to control access to the /oidc/register endpoint based on a variety of network and client signals, helping prevent unauthorized or automated client creation. Configuration is available via the __Management API__.
New Management API endpoints to configure Bot Detection settings
Auth0 now provides Management API endpoints to manage Bot Detection configuration! __Key Capabilities:__ __Bot Detection Controls:__ Automate adjustments to the Bot Detection Level (low, medium, or high) and manage your trusted IP AllowList via API.
More from Cloudflare developer platformEvery Cloudflare developer platform release →
Digital Experience Monitoring - DEX Logpush jobs
Digital Experience Monitoring (DEX) provides visibility into WARP device metrics, connectivity, and network performance across your Cloudflare SASE deployment. We've released four new WARP and DEX device data sets that can be exported via Cloudflare Logpush .
Workers Analytics Engine, Workers - More SQL aggregate, date and time functions available in Workers Analytics Engine
You can now perform more powerful queries directly in Workers Analytics Engine ↗ with a major expansion of our SQL function library. Workers Analytics Engine allows you to ingest and store high-cardinality data at scale (such as custom analytics) and query your data through a simple SQL API.
Log Explorer - Fixed custom SQL date picker inconsistencies
We've resolved a bug in Log Explorer that caused inconsistencies between the custom SQL date field filters and the date picker dropdown. Previously, users attempting to filter logs based on a custom date field via a SQL query sometimes encountered unexpected results or mismatching dates when using the interactive date picker.
Log Explorer adds 14 new datasets
We've significantly enhanced Log Explorer by adding support for 14 additional Cloudflare product datasets. This expansion enables Operations and Security Engineers to gain deeper visibility and telemetry across a wider range of Cloudflare services.
Cloudflare One Client - WARP client for Windows (version 2025.9.558.0)
A new GA release for the Windows WARP client is now available on the stable releases downloads page . This release contains minor fixes, improvements, and new features including Path Maximum Transmission Unit Discovery (PMTUD) . When PMTUD is enabled, the client will dynamically adjust packet sizing to optimize connection performance.
Cloudflare One Client - WARP client for macOS (version 2025.9.558.0)
A new GA release for the macOS WARP client is now available on the stable releases downloads page . This release contains minor fixes, improvements, and new features including Path Maximum Transmission Unit Discovery (PMTUD) . When PMTUD is enabled, the client will dynamically adjust packet sizing to optimize connection performance.
Cloudflare One Client - WARP client for Linux (version 2025.9.558.0)
A new GA release for the Linux WARP client is now available on the stable releases downloads page . This release contains minor fixes, improvements, and new features including Path Maximum Transmission Unit Discovery (PMTUD) . When PMTUD is enabled, the client will dynamically adjust packet sizing to optimize connection performance.
Log Explorer - Resize your custom SQL window in Log Explorer
We're excited to announce a quality-of-life improvement for Log Explorer users. You can now resize the custom SQL query window to accommodate longer and more complex queries. Previously, if you were writing a long custom SQL query, the fixed-size window required excessive scrolling to view the full query.