Releasesby GlyphWAF - Enforce positive security with Application Profiles
Application Profiles add a positive-security layer to Cloudflare WAF. Instead of looking only for requests that resemble known attacks, Application Profiles learn what valid requests to your application look like and identify traffic that deviates from the expected structure.
Also shipped Sep 7, 2026Cloudflare in September 2026 →
Zerobus Ingest into default storage is now in Public Preview
Ingesting into tables backed by default storage with Zerobus Ingest in Lakeflow Connect is now in Public Preview . See Create or identify the target table .
Knowledge Catalog data domains enter preview
Data domains logically organize resources across an enterprise so teams can discover and curate data at scale.
Redesigned Cloud Advanced settings show when your database is under pressure
Your project's Cloud Advanced settings have a new layout. Three cards at the top, CPU , Memory , and Disk , show hour by hour whether your database was under pressure during the last 24 hours. Use them to check your database's resource health before you resize it. When a card shows pressure, select Ask Lovable .
Transfer primary ownership of your workspace
The primary owner of a workspace can now transfer primary ownership to another person from Settings → Workspace → Workspace access . Choose an active member or enter the email address of another Lovable account. That person becomes the primary owner, the account Lovable uses for billing and domain claims, and you remain an owner.
Connect your app to Gong
You can now connect your Lovable app to Gong to read sales call metadata, transcripts, conversation topics, interaction stats, and user data from your Gong account. It fits call review dashboards, transcript search, and sales coaching scorecards. Add it from Connectors , or ask Lovable in a project to connect it.
Send app emails from TanStack Start projects without Cloud
You can now set up app emails on TanStack Start projects without enabling Cloud first. React + Vite projects and authentication emails need Cloud. App emails are available on paid plans.
More from Cloudflare developer platformEvery Cloudflare developer platform release →
Radar search now includes Internet events
Cloudflare Radar search now includes Internet events and outages alongside existing results. Search event descriptions or related entities, such as locations, ASes, bots, and top-level domains, to find relevant events and open the most relevant Radar view.
WAF Release - 2026-09-08
This release enhances detection logic for existing rules targeting Next.js remote code execution (RCE) vulnerabilities by consolidating active beta rules into baseline signatures.
Workers - Miniflare v5 prepares local development for the cf CLI
Miniflare v5 prepares Cloudflare local development tooling for the upcoming cf CLI. Miniflare powers local Workers development behind wrangler dev , the Cloudflare Vite plugin, and @cloudflare/vitest-plugin . Most projects should use those tools instead of depending on Miniflare directly, and Miniflare v5 will not require any action.
Workers - Python 3.14 for Python Workers
Python workers now use Python 3.14 by default. This change applies to all new Python workers using compatibility date 2026-09-08 or later. Internally, this change updates the Pyodide runtime to 314.0.6.
Cloudflare One Client for macOS (version 2026.8.1290.1)
A new Beta release for the macOS Cloudflare One Client is now available on the beta releases downloads page . This beta release includes the following changes and improvements: Added support for routing non-RFC 1918 local IPv4 networks through the WARP tunnel when unrestricted LAN inclusion is enabled by policy or MDM.
Cloudflare One Client for Windows (version 2026.8.1290.1)
A new Beta release for the Windows Cloudflare One Client is now available on the beta releases downloads page . This beta release includes the following changes and improvements: Added support for routing non-RFC 1918 local IPv4 networks through the WARP tunnel when unrestricted LAN inclusion is enabled by policy or MDM.
AI Gateway custom costs support cache tokens
AI Gateway custom costs now support cache-read and cache-write token rates. This lets custom cost metrics reflect negotiated cache pricing across providers. Add per_cache_read_token or per_cache_write_token to the cf-aig-custom-cost header: { "per_token_in" : 0.000001 , "per_token_out" : 0.000002 , "per_cache_read_token" : 0.0000001 ...
Browser Isolation, Cloudflare One - Improved iOS tap-to-type experience for Browser Isolation
Browser Isolation has improved the tap-to-type experience for users on iOS devices. Previously, Browser Isolation displayed a full-screen overlay with the message tap to type when users focused a text field. The prompt now appears inline over the focused text field, reducing disruption when users enter text in isolated sessions.