Cloudflare marked its sixteenth anniversary last week by rolling out a sweeping set of 46 major product announcements, updates, and architectural initiatives aimed at reshaping the infrastructure of the Web for what executives describe as the "agentic Internet." In this year’s Founders’ Letter, co-founders Matthew Prince and Michelle Zatlyn reflected on a historic turning point: for the first time in the history of the digital landscape, automated machine traffic has officially surpassed human activity.
As artificial intelligence empowers individuals and enterprises to build at an unprecedented scale, the Internet is experiencing a massive expansion in volume, ambition, and creativity. Witnessing how agent-driven recommendations increasingly steer consumer behavior, Cloudflare leadership identified a pressing need to build new economic and structural models that ensure businesses, creators, and open-source developers can continue to thrive in a landscape dominated by autonomous systems.
Throughout the week-long celebration, the company dedicated each day to a distinct pillar of this emerging digital ecosystem, ranging from open-source commitments and post-quantum security to new monetization models for creators and expanded tools for developers. A notable highlight of the week was an update on the company’s intern program, launched one year after setting a goal to hire 1,111 interns. These contributors played direct, hands-on roles in building several of the core projects unveiled during the celebration, including the EmDash content management system, post-quantum visibility tools, the CryptoLabe security discovery engine, and Protected Quick Tunnels.
Open Source and the Rise of the Agentic CLI
Kicking off the week on Monday, September 28, Cloudflare reinforced its deep commitment to the open-source community by releasing a series of foundational tools designed to support both human developers and autonomous agents. Central to these announcements was the introduction of "cf," a new command-line interface that mirrors the Cloudflare API natively. Built with a JSON-first output and typed configuration, the tool provides humans and agents with a consistent, predictable way to manage infrastructure.
To support this release, the company open-sourced "Forge," a pluggable pipeline that runs in continuous integration environments to generate SDKs, command-line tools, documentation, and other interfaces directly from raw API definitions. In the web development space, Cloudflare introduced EmDash, an open-source, Astro-based serverless content management system that serves as a spiritual successor to traditional platforms like WordPress by executing plugins within isolated Worker sandboxes with strictly approved capabilities.
Additional momentum came from the company’s collaboration with VoidZero, which has delivered more than 80 releases across the Vite ecosystem over the past four months while transitioning its commercial Void platform into a fully open-source project. This was accompanied by the release of Vinext 1.0, turning an experimental AI-built concept into a production-ready framework for running Next.js applications seamlessly on Vite. Furthermore, the Kitesurf project—a Workers-based browser built specifically for autonomous agents—received major upgrades including WebMCP support, faster DOM operations, and terminal-based rendering. To help researchers analyze the global Web, Cloudflare launched BEACON, a public BigQuery dataset comprising billions of anonymized real-user performance measurements across 10,000 major websites.
Securing the Post-Quantum and AI-Driven Era
On Tuesday, September 29, the focus shifted to application security and the complex transition to post-quantum cryptography. In one of the week’s most significant strategic announcements, Cloudflare declared its intention to become a public certificate authority (CA) twelve years after introducing Universal SSL. This planned CA will issue free Merkle Tree Certificates, designed to make post-quantum authentication practical for the entire Internet without imposing prohibitive certificate sizes or handshake costs.
To safeguard its own codebase ahead of a targeted 2029 post-quantum migration completion, the company introduced CryptoLabe, an AI-powered system designed to discover and classify cryptography usage across repositories. Collaborating with international standards bodies, Cloudflare also helped develop an Internet Engineering Task Force extension that authenticates the full IKEv2 transcript to prevent quantum downgrade attacks against IPsec tunnels. For customers seeking real-time transparency, the company integrated post-quantum visibility directly into HTTP Analytics, Log Explorer, and Logpush, allowing organizations to verify whether their encrypted traffic successfully negotiates post-quantum key exchange.
On the application security front, Cloudflare introduced Application Profiles, a system that learns the expected structure of incoming HTTP requests to enforce positive security models. To counter sophisticated threats, the company tested its own Web Application Firewall using frontier AI models, leveraging an adaptive red-team system to identify and patch detection gaps. Finally, it launched Threat Signals, a feature that translates open-source threat intelligence reports into structured indicators connected directly to WAF rules, making advanced threat defense accessible to every account holder.
New Economic Models for the Agent Economy
Wednesday, September 30, was dedicated to establishing sustainable economic frameworks for a Web increasingly navigated by automated agents. Acknowledging that the Internet now serves a dual audience of humans and autonomous entities, Cloudflare announced the beta release of its Monetization Gateway alongside a new "Pay Per Use" model. These tools enable content creators and publishers to set clear access terms, track automated consumption, and collect payments using HTTP 402 protocols when verified AI agents utilize their digital assets.
To support the heavy computational needs of these systems, Cloudflare rebuilt its Container platform to deliver faster startup times, flexible image and instance selection, advanced scheduling controls, and filesystem snapshots for persistent agent workspaces. In parallel, the company enhanced its AI Gateway with an "Auto Router" feature that classifies requests at the edge and routes them to the most cost-effective model without sacrificing output quality. Alongside these commercial developments, the company announced that its philanthropic initiatives—including Project Galileo, the Athenian Project, and Cloudflare for Campaigns—have collectively delivered more than $100 million in donated security and infrastructure services to civil society organizations.
Expanding the Serverless Developer Stack
On Thursday, October 1, Cloudflare expanded the boundaries of its developer platform by announcing the general availability of Cloudflare Basin, an open serverless data platform built on Apache Iceberg and R2 for ingesting, managing, and querying massive analytical datasets. The company also introduced Cloudflare K2, a durable serverless event stream system designed to separate producers and consumers on R2 storage without the operational burden of managing complex broker clusters.
In the artificial intelligence space, AI Search reached general availability with advanced capabilities including visual search, optical character recognition for scanned PDFs, and support for arbitrary chat models. Developers were also invited to participate in a new contest to build the next-generation Git platform designed specifically for agentic development, alongside the introduction of Artifacts into open beta. Furthermore, Workers KV Instant was unveiled, leveraging the company’s Quicksilver technology to deliver sub-two-millisecond p99 read latencies and rapid global replication across more than 300 data center locations.
Streamlining Observability and Delivering Global Performance
Cloudflare concluded Birthday Week on Friday, October 2, by consolidating its telemetry offerings into a unified observability platform. Featuring eight major updates, the platform merges logs, traces, analytics, alerts, dashboards, custom querying, and telemetry export into a single streamlined interface. Among these additions, Cloudflare Traces was introduced to provide end-to-end request visibility across security rules, transformations, caching layers, and serverless workers without requiring external agents or SDKs.
In network performance updates, expanded real-user measurement methodologies revealed that Cloudflare currently ranks as the fastest provider across 74% of the top 1,000 networks globally. The company also expanded access to advanced enterprise features for smaller accounts, introduced the Cloudflare OHTTP Gateway in closed beta to broaden privacy-preserving infrastructure access, and updated its Account Abuse Protection dashboard to help organizations investigate credential stuffing and automated fake-account creation using privacy-preserving hashed identifiers.
Reflecting on sixteen years of collaborative innovation, Cloudflare executives emphasized that the underlying mission of the company remains unchanged: ensuring that the Internet continues to provide open opportunities for individuals to create, contribute, and succeed through resilient infrastructure and shared technological progress.
Leave a Reply