Releasesby GlyphData Loss Prevention - Test Data Loss Prevention profiles without sending traffic through Gateway
Test scan lets you check how Data Loss Prevention (DLP) evaluates sample content before you apply a profile to production traffic. Paste text, upload a file, or upload a HAR file, then select the profiles you want to test. Test scan sends content directly to the DLP scanner.
Also shipped Aug 21, 2026Cloudflare in August 2026 →
Version targeting for Cortex Agent and Cortex Analyst evaluations (General availability)
Cortex Agent and Cortex Analyst evaluations now let you control the versioned configuration used for scoring: Version targeting pins the configuration under evaluation, not the agent behavior that gets evaluated: each run invokes the agent again and scores a newly generated trace.
CoCo automations in CLI and Snowsight (Preview)
CoCo automations in the CoCo CLI and CoCo in Snowsight are now available in public preview. Automations let you schedule recurring, unattended CoCo runs that execute in a Snowflake-managed sandbox. Each run creates a Cortex thread that you can inspect and continue in CoCo. Automations created from one surface can be monitored and managed from the other.
Upcoming end of life for the Supervisor API
The Supervisor API (Beta) reaches end of life on September 30, 2026. After that date, the API is no longer available. Databricks recommends migrating to custom agents on Databricks Apps . See Supervisor API (Beta) (deprecated) .
Consumer access to query Unity Gateway services will become generally available
Querying Unity Gateway model services and model provider services with Consumer access is currently opt-in through the Consumer access to Unity Gateway Public Preview . When this capability becomes generally available, consumer access users will be able to query these services without the preview enabled.
Monitor all AI activity with the unified trace table (Beta)
The unified trace table is in Beta . It captures every request and response across your Unity Gateway services into one Unity Catalog table in OpenTelemetry format, giving you a single place to monitor, debug, secure, and audit all AI activity. See Monitor all AI activity using the unified trace table .
Default Python package repositories are GA for Lakeflow pipelines and classic compute
Configuring default Python package repositories is now generally available for Lakeflow pipelines and for classic compute created via the UI and API. Workspace admins can set private or authenticated registries as the workspace default for these workloads. See Configure default package repositories .
More from Cloudflare developer platformEvery Cloudflare developer platform release →
CASB - Automatically remediate Microsoft 365 and Google Workspace findings with API-based CASB remediation policies
Cloudflare CASB is an API-based (agentless) tool that continuously scans your SaaS and cloud applications for security misconfigurations and data exposure. You can now use CASB remediation policies to automatically fix a finding or send a webhook the moment CASB detects it, without manual triage.
Cloudflare Fundamentals - Enriched 403 responses for the Cloudflare API
Cloudflare API 403 Forbidden responses now include a documentation_url field that links directly to the API documentation for the endpoint that was denied. This gives developers, administrators, and agents an immediate path to the relevant docs with role information instead of guessing at which role or permission they are missing for that endpoint.
Cloudflare Fundamentals - Saved login profiles for returning users
Cloudflare Dashboard users can now save login profiles on a device for faster sign-in on future visits. What's New Save login profiles on a device : After a successful sign-in, users can choose to save a login profile on that device. Saved profiles store the email address, login method, and last-used profile locally in the browser.
Cloudflare Fundamentals - Improved SCIM 2.0 group synchronization
Dashboard SCIM now supports replacing groups using HTTP PUT , as defined by RFC 7644 section 3.5.1 ↗ . This allows identity providers to synchronize a group's full state, including its display name, external ID, and members, in a single request.
Cloudflare Web Analytics - Web Analytics improves soft navigation measurement for Single Page Applications (SPAs)
Cloudflare Web Analytics (Real User Monitoring) is rolling out accuracy improvements to client-side soft navigations. Update: this update is complete as of 2026-09-04. This change may alter the volume of reported pageviews and visits in the dashboard and GraphQL API. The reported Largest Contentful Paint (LCP) metric may also fluctuate.
Agents, Workers - Choose OAuth scopes for Wrangler and the Cloudflare API MCP server
Wrangler and the Cloudflare API MCP server now use optional OAuth scopes. During authorization, you can choose which optional scopes to grant instead of approving every scope requested by each client.
Browser Run - Run more headless browsers concurrently with Browser Run
Browser Run lets you automate headless browsers on Cloudflare's global network. Run full browser sessions for interactive workflows, or use Quick Actions for one-request tasks such as screenshots, PDFs, and capturing page content.
Containers - Use FUSE in local Containers development
Miniflare now automatically grants local Containers the Docker privileges required for Filesystem in Userspace (FUSE). This applies to wrangler dev , the Cloudflare Vite plugin, and direct Miniflare use. Miniflare grants these privileges when the local Docker daemon runs inside a virtual machine (VM).