Releasesby GlyphAPI Shield - New Zombie API detection for API Shield
API Shield now automatically detects zombie endpoints , saved endpoints that have not received traffic for an extended period. When detected, the cf-risk-zombie risk label is applied. The scan runs daily alongside existing risk scans. Endpoints are labeled after 32 days without traffic.
Also shipped Nov 25, 2025Cloudflare in November 2025 →
8 learnings from 1 year of agents – PostHog AI
PostHog AI is an integrated agent that can access product data, write SQL queries, manage feature flags, and perform multi-step analyses of product usage.
Code Review Now Available in the EU
Code Review is now in beta for organizations using Sentry’s EU data region. Try it for free.
TRC General Availability
The TRC feature has been generally available (GA) and is on for all applicable organizations.
Tailscale v1.90.9
All platforms Fixed: tailscaled no longer deadlocks during event bursts. Fixed: The client no longer hangs after wake up when port mapping is in use and interfaces are slow to become available. Android Fixed: DNS continues working when switching from cellular to Wi-Fi connections.
Tailscale container image v1.90.9
A new release of the Tailscale container image is available. You can download it from Docker Hub or from our GitHub packages repository . Fixed: tailscaled no longer deadlocks during event bursts. Fixed: The client no longer hangs after wake up when port mapping is in use and interfaces are slow to become available.
Tailscale Kubernetes operator v1.90.9
A new release of the Tailscale Kubernetes operator is available. For guidance on installing and updating, refer to our installation instructions . Note: This version contains no changes except for library updates.
More from Cloudflare developer platformEvery Cloudflare developer platform release →
Cache - Audit Logs for Cache Purge Events
You can now review detailed audit logs for cache purge events, giving you visibility into what purge requests were sent, what they contained, and by whom. Audit your purge requests via the Dashboard or API for all purge methods: Purge everything List of prefixes List of tags List of hosts List of files Example The detailed audit payload is visible within...
Workers AI - Launching FLUX.2 [dev] on Workers AI
We've partnered with Black Forest Labs (BFL) to bring their latest FLUX.2 [dev] model to Workers AI! This model excels in generating high-fidelity images with physical world grounding, multi-language support, and digital asset creation. You can also create specific super images with granular controls like JSON prompting.
Agents, Workers - Agents SDK v0.2.24 with resumable streaming, MCP improvements, and schedule fixes
The latest release of @cloudflare/agents ↗ brings resumable streaming, significant MCP client improvements, and critical fixes for schedules and Durable Object lifecycle management. Resumable streaming AIChatAgent now supports resumable streaming, allowing clients to reconnect and continue receiving streamed responses without losing data.
Radar - Cloud Services Observability in Cloudflare Radar
Radar introduces HTTP Origins insights, providing visibility into the status of traffic between Cloudflare's global network and cloud-based origin infrastructure. The new Origins API provides provides the following endpoints: /origins - Lists all origins (cloud providers and associated regions).
WAF Release - 2025-11-24
This week highlights enhancements to detection signatures improving coverage for vulnerabilities in FortiWeb, linked to CVE-2025-64446, alongside new detection logic expanding protection against PHP Wrapper Injection techniques. Key Findings This vulnerability enables an unauthenticated attacker to bypass access controls by abusing the CGIINFO header.
Containers, R2 - Mount R2 buckets in Containers
Containers now support mounting R2 buckets as FUSE (Filesystem in Userspace) volumes, allowing applications to interact with R2 using standard filesystem operations.
Containers - New CPU Pricing for Containers and Sandboxes
Containers and Sandboxes pricing for CPU time is now based on active usage only, instead of provisioned resources. This means that you now pay less for Containers and Sandboxes. An Example Before and After Imagine running the standard-2 instance type for one hour, which can use up to 1 vCPU, but on average you use only 20% of your CPU capacity.
Security Center - Threat insights are now available in the Threat Events platform
The threat events platform now has threat insights available for some relevant parent events. Threat intelligence analyst users can access these insights for their threat hunting activity.