Cloudflare Marks 16th Birthday with 46 Launches Across Developer Tools, Post-Quantum Security, and the Agentic Web

Cloudflare Marks 16th Birthday with 46 Launches Across Developer Tools, Post-Quantum Security, and the Agentic Web During its 2026 Birthday Week, Cloudflare rolled out 46 announcements centered on supporting an Internet where automated traffic has officially overtaken human activity, introducing new developer tooling, cryptographic upgrades, agent monetization protocols, and data infrastructure. Cloudflare revealed plans to become a public certificate authority issuing free post-quantum Merkle Tree Certificates. New monetization tools such as Pay Per Use and the HTTP 402 Monetization Gateway were introduced to let publishers charge AI agents. Cloudflare Basin entered general availability alongside the debut of K2 durable serverless event streams. Network performance metrics show Cloudflare ranking fastest across 74% of the top 1,000 networks. Open Source and Agentic Developer Tooling Cloudflare launched the 'cf' agentic CLI alongside Forge, an open-source pipeline running in CI to generate SDKs, CLIs, and documentation directly from API definitions. The company also introduced EmDash, an Astro-based serverless CMS isolating plugins in Worker sandboxes, Vinext 1.0 to run Next.js on Vite, and Kitesurf browser enhancements including WebMCP support. Post-Quantum Cryptography and Application Security Marking twelve years since Universal SSL, Cloudflare announced its intention to become a public certificate authority delivering post-quantum Merkle Tree Certificates. Other security additions include CryptoLabe AI for codebase cryptographic audits ahead of a 2029 migration target, post-quantum IPsec downgrade prevention, HTTP request structure enforcement via Application Profiles, and Threat Signals intelligence. Economic Models and Infrastructure for AI Agents To address AI consumption of web resources, Cloudflare introduced Monetization Gateway in beta using HTTP 402 and x402 headers, alongside Pay Per Use payouts for enrolled content publishers. Complementing these are rebuilt Cloudflare Containers with persistent workspace snapshots, domain registrar APIs geared toward automated agents, and cost-reduction tools like AI Gateway's Auto Router. Data Platforms, Storage, and AI Capabilities Cloudflare expanded its developer runtime with the general availability of Cloudflare Basin, an Apache Iceberg- and R2-based serverless analytics engine, and K2 serverless event streams. Workers gained native Web Crypto support for ML-KEM and ML-DSA post-quantum algorithms, Workers KV Instant delivered sub-two-millisecond p99 reads, and the company unveiled Clef open-source decision models. Observability, Network Upgrades, and Platform Access Cloudflare unified logs, traces, and metrics under eight Observability platform updates, launched agentless Cloudflare Traces across all edge execution stages, and added an Account Abuse Protection dashboard. Network tests showed Cloudflare as the fastest provider across 74% of the top 1,000 networks, while access initiatives expanded Logpush and enterprise controls to broader subscription tiers.

Cloudflare 2026 年 Birthday Week 发布总览：46 项关键更新与代理互联网基础设施布局 Cloudflare 在其 16 周年 Birthday Week 期间集中发布了 46 项产品与技术更新。伴随自动化流量首次超过人类活动，Cloudflare 围绕开源生态、后量子密码与应用安全、代理经济体系、开发者数据平台以及网络性能和可观测性五大方向展开全面布局。 自动化网络流量首次超过人类活动，AI 驱动的代理正重塑网络交互与商业模式。 宣布计划成为公共证书颁发机构（CA），并推进基于默克尔树证书与 ML-KEM 等算法的后量子迁移计划。 推出基于 HTTP 402 与 x402 的 Monetization Gateway 及 Pay Per Use，探索面向 AI 代理的内容计费经济模型。 开源无服务器数据平台 Basin 与无服务器事件流 K2 正式发布，Workers KV Instant 实现亚两毫秒 p99 读取。 上线统一可观测性平台与 Cloudflare Traces，网络性能在排名前 1000 的网络中有 74% 位列最快。 开源生态与代理 CLI 工具 周一聚焦开源生态建设与开发工具革新。Cloudflare 推出了对标官方 API 的结构化命令行工具 cf，并开源了用于构建 SDK 和文档的 Forge 流水线。同时发布了在 Worker 沙盒中运行插件的无服务器 CMS EmDash、基于 Vite 运行 Next.js 应用的 Vinext 1.0，以及针对代理优化的 Kitesurf 浏览器与数十亿条真实用户性能数据集 BEACON。 应用安全与后量子时代迁移 周二主要涵盖安全架构与后量子密码学。Cloudflare 宣布拟成为公共证书颁发机构（CA），计划通过免费默克尔树证书降低后量子认证成本，并设定 2029 年完成自身后量子迁移的目标。安全防护方面，推出了防范 IPsec 降级攻击的 IETF 扩展、学习 HTTP 结构特征的 Application Profiles，以及基于自适应 AI 红队的 WAF 漏洞检测机制和免费 Threat Signals 情报系统。 代理互联网时代的经济模型与基础设施 周三围绕 AI 代理崛起下的创作者变现与运行环境推出解决方案。测试版 Monetization Gateway 支持通过 HTTP 402 与 x402 协议对资源收费，Pay Per Use 则为接入的内容发布者向经核准的 AI 买家收费并结算。此外，重构后的 Cloudflare Containers 增强了代理工作区沙盒能力，AI Gateway 增加了自动路由器与用户分析以降低模型开销，Cloudflare Impact 累计捐赠服务价值也达到 1 亿美元。 开发者平台：数据、存储与 AI 能力扩展 周四进一步扩充了无服务器开发能力。基于 Apache Iceberg 和 R2 构建的开源数据分析平台 Cloudflare Basin 正式 GA，持久化有序事件流服务 K2 发布；Workers 原生支持 ML-KEM 与 ML-DSA 后量子密码算法，Workers KV Instant 实现了亚两毫秒 p99 读取延迟。AI 领域则推出了开源决策模型 Clef 及强化学习微调平台，AI Search 也实现 GA。 可观测性、网络提速与普惠服务 周五收官发布聚焦网络观测与基础服务易用性。Cloudflare 整合日志、指标、追踪与报警为统一的 Observability 平台，并推出免 Agent 和 SDK 的全链路追踪工具 Cloudflare Traces。最新真实用户测评显示，Cloudflare 在前 1000 大网络中的 74% 排名第一。此外还推出了自建 OHTTP 网关闭测版、账户防滥用分析仪表板，以及支持免账户邮箱认证的 Protected Quick Tunnels。

We celebrated our 16th birthday last week by sharing how we’re building a better Internet for today’s world. As Matthew and Michelle reflected in [this year’s Founders’ Letter](https://blog.cloudflare.com/cloudflares-2026-annual-founders-letter/), this year saw some of the most consequential changes in the history of the Internet. For the first time, automated traffic surpassed human activity. AI is empowering people to build like never before, leading the Internet to grow massively in scale and unlocking more ambition and creativity. As we witnessed the influence that agent-driven recommendations have on consumer choices, we identified the need for a new approach that creates space for new businesses to succeed. Each day of Birthday Week explored a different way we are helping to build the future of the Internet. We began on Monday by strengthening our commitment to open source. Tuesday focused on application security and the post-quantum transition. On Wednesday, we explored new economic models for the agentic Internet. Thursday, we expanded the Developer Platform with new tools for data analysis, storage, AI, and agent development. Finally, we closed out the week by launching features that make Cloudflare faster, easier to operate, and more accessible to everyone. As a special Birthday Week follow-up, we [shared an update](http://blog.cloudflare.com/one-year-later-1111-interns) on our intern program, [one year after announcing our goal to hire 1,111 interns](https://blog.cloudflare.com/one-year-later-1111-interns/). Interns directly contributed to many of the projects launched this week, including EmDash, post-quantum visibility, CryptoLabe, and Protected Quick Tunnels. We shipped 46 announcements this week. In case you missed any, here’s the full list of everything we announced during Birthday Week 2026. With the announcement of our new CLI, which we released alongside the pipeline we use to generate it and our SDKs and docs, we shared how we’re building to support agents and developers as they use Cloudflare — and supporting the projects that you rely on, too. | **What** | **In a sentence…** | | [Introducing cf: the agentic CLI for the entire Cloudflare API](https://blog.cloudflare.com/cloudflare-cf-cli-launch/) | The new cf CLI mirrors the Cloudflare API, uses JSON-first output and typed configuration, and gives people and agents one consistent command-line interface. | | [Introducing Forge: the open source pipeline for generating SDKs, CLIs, docs, and more](https://blog.cloudflare.com/forge-open-source-generation-pipeline/) | Forge is a pluggable, open-source pipeline that runs in CI to generate SDKs, CLIs, documentation, and other interfaces directly from API definitions. | | [Introducing EmDash - the spiritual successor to WordPress that solves plugin security](https://blog.cloudflare.com/emdash-cms-plugin-registry) | EmDash is an open-source, Astro-based serverless CMS that runs plugins in isolated Worker sandboxes with explicitly approved capabilities. | | [Four months of VoidZero at Cloudflare: making the open-source JavaScript toolchain faster for all humans and agents](https://blog.cloudflare.com/voidzero-update/) | Since joining Cloudflare, VoidZero has delivered more than 80 releases across the Vite ecosystem, and its previously commercial Void platform will become fully open source. | | [Next.js applications, powered by Vite: introducing Vinext 1.0](https://blog.cloudflare.com/vinext-nextjs-on-vite/) | Vinext 1.0 turns an AI-built experiment into a production-ready, portable way to run Next.js applications on Vite. | | [The road to the agentic browser: A Kitesurf update](https://blog.cloudflare.com/kitesurf-update/) | Kitesurf, our Workers-based browser for agents, adds WebMCP support, faster DOM operations, broader web compatibility, and terminal-based rendering. | | [How fast is the web? Explore billions of real-user measurements with BEACON](https://blog.cloudflare.com/how-fast-is-the-web/) | BEACON makes billions of anonymized real-user performance measurements from 10,000 major websites available as a public BigQuery dataset. | | [Supporting native Rust in Workers with the new Emscripten target for wasm-bindgen](https://blog.cloudflare.com/rust-workers-emscripten-target/) | Experimental Emscripten target support lets developers bring more native Rust libraries and applications, including progress toward Tokio support, to Workers. | | [Introducing The Cold Start: pitch your startup live at Cloudflare Connect](https://blog.cloudflare.com/introducing-the-cold-start/) | The Cold Start gives five early-stage companies the opportunity to pitch live at Cloudflare Connect and compete for resources to help them grow. | Technological progress is rapidly changing how we think about application security. We announced our intention to become a certificate authority, as well as how we’re preparing foundational Internet cryptography for the post-quantum era and adapting application security to counter AI-driven attacks. | **What** | **In a sentence…** | | [Building a certificate authority for the whole Internet](https://blog.cloudflare.com/cloudflare-certificate-authority/) | Twelve years after launching Universal SSL, Cloudflare announced its intention to become a public certificate authority (CA) and add resilience to free, automated certificate issuance. | | [Building a post-quantum certificate authority with Merkle Tree Certificates](https://blog.cloudflare.com/pq-ca-with-mtcs/) | Our planned CA will issue free Merkle Tree Certificates designed to make post-quantum authentication practical without imposing large certificate and handshake costs. | | [Using AI to chart a course for our post-quantum migration](https://blog.cloudflare.com/ai-driven-cryptography-discovery/) | CryptoLabe uses AI to find and classify cryptography across our codebase as Cloudflare works toward completing its post-quantum migration by 2029. | | [Preventing quantum downgrade attacks against IPsec](https://blog.cloudflare.com/ipsec-downgrade-protection/) | Cloudflare helped develop an IETF extension that authenticates the full IKEv2 transcript and prevents attackers from downgrading post-quantum IPsec tunnels. | | [Is your domain using post-quantum encryption? Now you can see for yourself](https://blog.cloudflare.com/post-quantum-visibility/) | HTTP Analytics, Log Explorer, and Logpush now show whether requests negotiated post-quantum key exchange, giving customers evidence they can inspect and report. | | [Enforce positive security with Cloudflare Application Profiles](https://blog.cloudflare.com/application-profiles/) | Application Profiles learns the expected structure of HTTP requests so customers can identify deviations and enforce what valid application traffic should look like. | | [We tested our own WAF with frontier AI models. Here's what we found](https://blog.cloudflare.com/adaptive-ai-waf-testing/) | An adaptive AI red-team system found WAF detection gaps across six attack categories, helping us improve normalization and managed rules for customers. | | [Introducing Threat Signals: agentic skills for open-source threat intelligence, free for every Cloudflare account](https://blog.cloudflare.com/threat-signals/) | Threat Signals turns open-source reporting into structured indicators and connects the context to WAF rules, while the Threat Events Platform expands to every account. | | [Adaptive application security for the AI era: how Cloudflare connects code, traffic, and intelligence to stop attacks](https://blog.cloudflare.com/ai-era-framework/) | Our application-security framework connects discovery, governance, runtime protection, investigation, and response in a continuous learning loop. | With our announcements of Pay Per Use and the release of our Monetization Gateway in beta, we shared how we’re building support for a new economic model that empowers creators to monetize their content and services. | **What** | **In a sentence…** | | [The Internet has a second audience](https://blog.cloudflare.com/agentic-web/) | AI agent requests have grown rapidly, and our strategy helps creators see agents, set terms for access, and get paid when agents use their work. | | [Cloudflare Containers, rebuilt to scale agent sandboxes](https://blog.cloudflare.com/faster-agent-sandboxes/) | Containers now has faster startup, flexible image and instance selection, new scheduling controls, and filesystem snapshots for persistent agent workspaces. | | [Monetization Gateway beta: charge AI agents for consumption with HTTP 402](https://blog.cloudflare.com/monetization-gateway-beta/) | Monetization Gateway lets sellers put a price on resources behind Cloudflare and collect agent payments using HTTP 402 and x402. | | [Pay Per Use: when AI uses your work, you should get paid](https://blog.cloudflare.com/pay-per-use/) | Pay Per Use gives enrolled publishers usage reports, billing, and payouts when verified AI buyers use their content. | | [Simplifying domains for people and agents](https://blog.cloudflare.com/simplifying-domains/) | A new domain-search experience and expanded Registrar APIs make it easier for both people and agents to search, register, transfer, and manage domains. | | [Identify AI model overuse with User Insights](https://blog.cloudflare.com/ai-model-overuse-user-insights/) | AI Gateway User Insights identifies tasks, model fit, and overuse, so teams can understand where a smaller or less expensive model may work. | | [Detect and send production issues straight to your agent](https://blog.cloudflare.com/real-time-issue-detection/) | Issues groups Workers errors and sends the relevant stack traces, logs, and traces to coding agents or any webhook for faster investigation. | | [Cut your AI spend with AI Gateway's Auto Router](https://blog.cloudflare.com/auto-router/) | Auto Router classifies each request at the edge and sends it to a suitable model, reducing cost while preserving response quality. | | [Cloudflare Impact reaches $100 million in donations](https://blog.cloudflare.com/100-million-donations/) | Initiatives including Project Galileo, the Athenian Project, and Cloudflare for Campaigns have now delivered more than $100 million in donated services. | We expanded what is possible to achieve on Cloudflare’s platform with the general availability launch of Cloudflare Basin, our data analytics platform, the launch of K2, a durable serverless event stream, and the announcement of our new contest — inviting developers to build a Git platform designed for agentic development. | **What** | **In a sentence…** | | [Introducing Cloudflare Basin: an open, serverless data platform, now generally available](https://blog.cloudflare.com/cloudflare-basin/) | Basin is now generally available, giving developers a serverless platform built on Apache Iceberg and R2 for ingesting, managing, and querying large datasets. | | [Support for modern cryptographic algorithms in Workers](https://blog.cloudflare.com/workers-ml-kem-ml-dsa-support/) | Workers adds opt-in native Web Crypto support for ML-KEM and ML-DSA, giving developers post-quantum primitives without bundling their own implementations. | | [AI Search is now generally available](https://blog.cloudflare.com/ai-search-ga/) | AI Search reaches general availability with visual search, OCR for scanned PDFs, larger files, and support for any chat model. | | [We want you to build the next Git platform on Cloudflare](https://blog.cloudflare.com/next-git-platform-on-cloudflare/) | Artifacts enters open beta and a new competition invites developers to build a Git platform designed for the era of AI agents. | | [Announcing Cloudflare K2: serverless event streams](https://blog.cloudflare.com/cloudflare-k2-streams/) | K2 provides durable, ordered event streams on R2, separating producers and consumers without the operational overhead of managing broker clusters. | | [Cloudflare OS: your company's agent workspace, managed for you](https://blog.cloudflare.com/managed-cloudflare-os/) | Cloudflare OS provides an agent workspace connected to an organization’s data and systems, with a waitlist open for fully managed deployments. | | [Introducing Workers KV Instant - powered by Quicksilver](https://blog.cloudflare.com/workers-kv-instant/) | Workers KV Instant delivers sub-two-millisecond p99 reads and fast global replication across more than 300 locations using the familiar Workers KV API. | | [One year later: Sovereign AI and the fight for choice](https://blog.cloudflare.com/sovereign-ai-choice-one-year-later/) | We are expanding local open-source model choice and model-agnostic security tools, so nations can pursue AI sovereignty without isolation. | | [Introducing Clef: our open-source decision models, and new RL fine-tuning platform](https://blog.cloudflare.com/clef-decision-models/) | Clef and Clef-flash are open-source decision models for fast classification and agent workflows, accompanied by a platform for reinforcement-learning fine-tuning. | We wrapped up the week with major updates to Cloudflare Observability, alongside adding Cloudflare Traces, network performance improvements that make Cloudflare faster, and an announcement on how we’re supporting civil society organizations. | **What** | **In a sentence…** | | [8 major updates to Cloudflare Observability](https://blog.cloudflare.com/one-observability-platform/) | Eight updates bring logs, traces, analytics, alerts, dashboards, querying, and telemetry export into one observability platform with simpler pricing. | | [Introducing Cloudflare Traces: follow requests through our entire platform](https://blog.cloudflare.com/cloudflare-tracing/) | Cloudflare Traces provides request-level visibility across security rules, transformations, cache, Workers, services, and origins without requiring an agent or SDK. | | [Updates on our pledge to make Cloudflare features accessible to everyone](https://blog.cloudflare.com/enterprise-for-all-update/) | One year after our pledge, Logpush, multi-account governance, higher platform limits, and other capabilities are available to more customers across plans. | | [Announcing Cloudflare OHTTP Gateway - expanding access to Cloudflare's privacy-preserving infrastructure](https://blog.cloudflare.com/announcing-cloudflare-ohttp-gateway/) | A self-serve OHTTP Gateway enters closed beta, while Privacy Gateway becomes Cloudflare OHTTP Relay to distinguish the two roles. | | [Follow the thread: a new dashboard to investigate account abuse](https://blog.cloudflare.com/account-abuse-protection-dashboard/) | Account Abuse Protection uses stateful analysis and privacy-preserving Hashed User IDs to help teams investigate credential stuffing and fake-account creation. | | [Protected Quick Tunnels: simple accountless authentication for your next dev project](https://blog.cloudflare.com/protected-quick-tunnels/) | Quick Tunnels now support email authentication, letting developers share a local application with selected people or domains without requiring Cloudflare accounts. | | [Building for good: How civil society organizations are automating on Cloudflare](https://blog.cloudflare.com/civil-society-automation/) | Civil society organizations are using Cloudflare’s developer platform to automate and scale work that protects human rights and the public interest. | | [2026 Birthday week: network performance update](https://blog.cloudflare.com/network-performance-birthday-week-2026/) | Using an expanded real-user measurement methodology, Cloudflare now ranks as the fastest provider across 74% of the top 1,000 networks. | | [Introducing Web Search API via AI Gateway](https://blog.cloudflare.com/introducing-web-search-api/) | AI Gateway’s Web Search API brings current web context from multiple providers into model calls through REST APIs, Workers bindings, or customer-managed keys. | | [Streamline: custom video pipelines with Cloudflare Stream and Workers](https://blog.cloudflare.com/streamline/) | Streamline is an open-source example for building continuous video pipelines by combining Workers, Durable Objects, and a containerized media engine. | Across this week’s announcements, we kept returning to a consistent theme: the Internet should continue to open up more opportunities for people to create, contribute, and succeed. That means open tools developers can shape, security that keeps pace with new threats, a fairer exchange between agents and the people whose work they use, and infrastructure designed for the agentic Internet. For 16 years, we have been building alongside developers, creators, researchers, customers, partners, and open-source communities. Your ideas, feedback, and willingness to challenge us have shaped Cloudflare, and that collaboration matters now more than ever.