CASB - New SaaS Security weekly digests with API CASB
You can now stay on top of your SaaS security posture with the new CASB Weekly Digest notification. This opt-in email digest is delivered to your inbox every Monday morning and provides a high-level summary of your organization's Cloudflare API CASB findings from the previous week.
Also shipped Nov 14, 2025Cloudflare in November 2025 →
Data masking, Read-Only mode for MCP Server, branch auto-deletion, and more release - Nov 14, 2025
Data masking (Beta) Neon now offers a data masking feature that makes it easy to create anonymized branches for development and testing. Define masking rules th...
What's new in Sigma
Admin Audit log support for GCP KSA region Sigma now supports audit log events for organizations hosted in the GCP KSA (ME Central 2) region. For a list of all supported regions, see Enable or disable audit logging .
- DuckDB 1.4.2: MotherDuck supports DuckDB 1.4.2, a bugfix release
- DuckDB 1.4.2: MotherDuck supports DuckDB 1.4.2, a bugfix release. Learn more in the official DuckDB Labs 1.4.2 announcement and changelog . Full command menu now at Cmd/Ctrl+K : Access common MotherDuck UI actions from your keyboard, including generating query edits, adding notebook cells, creating notebooks, and navigating between pages.
Transform How You Work: Real-Time Voice, Seamless Context, Full Command
We’re thrilled to announce Saga Web , the browser-based version of Saga, designed for instant, hands-free productivity. Whether you’re a longtime Saga power user or just getting started, Saga Web lets you: Dictate and see your words appear with real-time speech-to-text.
Better Webhooks, Better Service Settings, Office Hours
Between year-end shipping sprints and Black Friday load tests, it’s peak alert fatigue season. This week we’re shipping better webhooks so you only get pinged when it matters, smarter service settings that catch misconfigurations before they bite you, and [open office hours](https://cal.com/team/railway/railway-office-hours) with the Railway team for folks...
More from Cloudflare developer platformEvery Cloudflare developer platform release →
Access - Generate Cloudflare Access SSH certificate authority (CA) directly from the Cloudflare dashboard
SSH with Cloudflare Access for Infrastructure allows you to use short-lived SSH certificates to eliminate SSH key management and reduce security risks associated with lost or stolen keys. Previously, users had to generate this certificate by using the Cloudflare API ↗ directly.
Log Explorer - Fixed custom SQL date picker inconsistencies
We've resolved a bug in Log Explorer that caused inconsistencies between the custom SQL date field filters and the date picker dropdown. Previously, users attempting to filter logs based on a custom date field via a SQL query sometimes encountered unexpected results or mismatching dates when using the interactive date picker.
Log Explorer adds 14 new datasets
We've significantly enhanced Log Explorer by adding support for 14 additional Cloudflare product datasets. This expansion enables Operations and Security Engineers to gain deeper visibility and telemetry across a wider range of Cloudflare services.
API Shield - New BOLA Vulnerability Detection for API Shield
Now, API Shield automatically searches for and highlights Broken Object Level Authorization (BOLA) attacks on managed API endpoints. API Shield will highlight both BOLA enumeration attacks and BOLA pollution attacks, telling you what was attacked, by who, and for how long.
Digital Experience Monitoring - DEX Logpush jobs
Digital Experience Monitoring (DEX) provides visibility into WARP device metrics, connectivity, and network performance across your Cloudflare SASE deployment. We've released four new WARP and DEX device data sets that can be exported via Cloudflare Logpush .
Workers Analytics Engine, Workers - More SQL aggregate, date and time functions available in Workers Analytics Engine
You can now perform more powerful queries directly in Workers Analytics Engine ↗ with a major expansion of our SQL function library. Workers Analytics Engine allows you to ingest and store high-cardinality data at scale (such as custom analytics) and query your data through a simple SQL API.
Cloudflare One - New Cloudflare One Navigation and Product Experience
The Zero Trust dashboard and navigation is receiving significant and exciting updates. The dashboard is being restructured to better support common tasks and workflows, and various pages have been moved and consolidated.
WAF Release - 2025-11-17
This week highlights enhancements to detection signatures improving coverage for vulnerabilities in DELMIA Apriso, linked to CVE-2025-6205. Key Findings This vulnerability allows unauthenticated attackers to gain privileged access to the application. The latest update provides enhanced detection logic for resilient protection against exploitation attempts.