Data and AI releases

811 this month · 176 companies

Workers - Workers tracing , new getActiveSpan(), recordException(), startSpan(), and setAttributes() APIs

UpdateNot yet verified

Custom spans in Workers now support more of the OpenTelemetry span API, so you can instrument more of your code and record errors directly on your spans. tracing.startSpan(name) creates a span without making it the active span, and returns it. Other spans do not nest under it. Call span.end() when the operation is complete.

PricingObservabilityDeveloper tools

Also shipped Sep 25, 2026Cloudflare in September 2026 →

CLI v0.8.1 | CLI

CLI v0.8.1 Continue local work in the cloud: Use cr code handoff --summary to start a new cloud Coding Agent task with your session summary, an optional plan, and an automatically discovered transcript when available. Clearer handoff results: See transfer progress, the branch and commit, transferred filenames, and a direct link to the cloud task.

Preview
Source ↗

More from Cloudflare developer platformEvery Cloudflare developer platform release →

Email Service - Suppress recipients for one sending domain

Email Sending suppressions now have a scope : account : The suppression applies to every sending domain and subdomain in your account. This is the default. sending_domain : The suppression applies to one sending domain only. A suppression for mail.myappexample.com does not block mail from myappexample.com .

Update
Source ↗

WAF Release - 2026-09-25 - Emergency

This update provides immediate defense against critical vulnerabilities affecting WordPress and JFrog Artifactory, including path traversal, local file inclusion (LFI), cross-site scripting (XSS), and authentication bypass exploits. Key Findings CVE-2026-87902: A high-severity Path Traversal and Local File Inclusion (LFI) vulnerability affecting WordPress.

Update
Source ↗

1.1.1.1 - RFC 8509 root key trust anchor sentinel support

1.1.1.1 now supports RFC 8509 ↗ root key trust anchor sentinels. They let you check whether the responding resolver trusts a DNSSEC root key ahead of a key rollover. To check for KSK-2024 (key tag 38696), query DNSSEC-signed names in dnstest.dev : # On a sentinel-aware resolver that trusts KSK-2024: # Returns NOERROR with an A answer.

Update
Source ↗

R2 - R2 bandwidth usage metrics

New R2 product-level Metrics page in the Cloudflare dashboard shows bandwidth usage. You can view usage across all buckets or per bucket. Go to R2 Metrics ↗ Bandwidth throughput is split by object upload and download. The GraphQL Analytics API exposes the same bandwidth usage metrics that power the dashboard for your queries and analytics.

Update
Source ↗