Build your own vulnerability harness
…Critical Exposure Containment : The system isolates the critical, high, and exploitable bugs (avg. 10 out of 80). We fast-track these for a human review and introduce them into release cycles, getting…
Search
Introducing Cloudflare Browser Isolation beta
…access and web browsing activity from known malicious websites. But what about unknown and unforeseeable threats? Cloudflare Browser Isolation answers this question by sandboxing a web browser in a remote container that…
The Edge Computing Opportunity: It’s Not What You Think
…Containers provided a lighter weight option to run multiple customers’ workloads on the same machine, with dotCloud, which went on to become Docker , leading the way and nearly everyone else eventually following…
How Cloudflare responded to the “Copy Fail” Linux vulnerability
…AF_ALG and the kernel crypto API The Linux kernel's internal crypto API manages functions like kTLS and IPsec. Userspace programs access this via the AF_ALG socket family, allowing unprivileged…
When DNSSEC goes wrong: how we responded to the .de TLD outage
…DNS is a decentralized system, no single organization controls all of it, and keeping it running reliably depends on mutual trust and open lines of communication between registries, resolver operators, and the…
Workers AI Update: Hello, Mistral 7B!
…Multi-query attention uses only a single K and V vector. Grouped-query attention , the type used in the Mistral 7B model, divides the Q vectors evenly into groups containing “G” vectors…
Privacy Gateway: a privacy preserving proxy built on Internet standards
…a service that relays encrypted HTTP requests and responses between a client and application server. With Privacy Gateway, Cloudflare knows where the request is coming from, but not what it contains, and…
Better HTTP/2 Prioritization for a Faster Web
…The
of the document is at the beginning and contains stylesheets, scripts and other instructions for the browser that are needed to display the content. The of the document comes…Migrating cdnjs to serverless with Workers KV
…We split the metadata into four namespaces—one for package-level metadata, one for version-specific metadata, one containing aggregated metadata, and one for file SRIs. Similar to cdnjs’s serverless design…
Protecting your APIs from abuse and data exfiltration
…Users can access analytics and logs by visiting the Overview page where they can then drill down data using the flexibility of our GraphQL-powered dashboard. Schema validation performs checks on the…