Releasesby GlyphEmail security - Set expiration dates for Email security policies
Cloudflare Email security now allows administrators to assign expiration dates to allow or block policies for automatic removal of temporary policy rules.
Also shipped Nov 5, 2026Cloudflare in November 2026 →
Gemini Omni 1.2 Flash
Gemini Omni 1.2 Flash is now generally available, offering omni-modal processing for text, image, and video. New features include standalone video upscaling, extended generation durations, and reference-guided video editing.
Use GPT-6-Cyber to investigate vulnerabilities, reproduce them in an authorized test environment, and verify
OpenAI has released GPT-6-Cyber, a model designed to investigate vulnerabilities, reproduce them in authorized environments, and verify fixes.
Gemini Enterprise: Prepaid credits for Pay-as-you-go subscriptions and usage above quota
Prepaid credits are now generally available for self-serve Cloud Billing accounts, allowing users to pay for Gemini Enterprise usage without an invoiced billing account.
The BigQuery Metadata curation console page has been removed
The BigQuery Metadata curation console page has been deprecated. Users should now use Knowledge Catalog for data discovery, profiling, and governance tasks.
Conversational analytics in BigQuery is now available in the asia-northeast1 (Tokyo) location
Conversational analytics in BigQuery is now supported in the asia-northeast1 (Tokyo) region.
Announcing Web Answer on Amazon Bedrock AgentCore
Web Answer is now generally available on Amazon Bedrock AgentCore. It provides a managed tool that returns synthesized, cited answers grounded in web sources in a single call.
More from Cloudflare developer platformEvery Cloudflare developer platform release →
Durable Objects, Workers - Automatic retries for Durable Object calls
The Cloudflare Workers runtime now automatically retries failed fetch() and RPC calls to Durable Objects up to four times within 10 seconds before reaching the object.
Workers AI - Planned model deprecations on Workers AI
Cloudflare is deprecating several AI models on Workers AI, including select DeepSeek, Llama, Gemma, and Qwen variants, with complete removal scheduled for November 15, 2026.
Cloudflare Fundamentals - User API tokens have a redesigned creation experience
Cloudflare updated the creation flow for User API tokens to match the Account API token experience. This update provides a more consistent interface for creating and reviewing credentials, including inline policy editing and clearer restrictions.
AI Gateway - Review provider key activity in AI Gateway
AI Gateway now tracks usage activity for stored provider keys. Users can identify and rotate or remove keys that have been inactive for over 90 days.
Access, Cloudflare One - Sign in to Cloudflare Access with passkeys
Cloudflare Access now supports passkeys as a login method for protected applications. Users can authenticate using device-based security keys or password managers.
Cloudflare One adds fast flux detection to UEBA
Cloudflare One now includes fast flux detection as a risk behavior in its user and entity behavior analytics. This helps security teams identify malicious DNS infrastructure usage.
Bots - Granular access controls for the top Personal Agents
Cloudflare renamed its AI bot policies to AI Crawler and Agent access policies and added granular controls for managing access by specific Personal Agents.
AI Gateway - Route across a pool of models with model aliases
Cloudflare AI Gateway introduced model aliases, enabling applications to direct requests to configurable model pools with fallback and smart routing.