Engineering Insights

Access - Access private hostname applications support all ports/protocols

Cloudflare Access for private hostname applications can now secure traffic on all ports and protocols. Previously, applying Zero Trust policies to private applications required the application to use HTTPS on port 443 and support Server Name Indicator (SNI). This update removes that limitation. As long as the application is reachable via a Cloudflare off-ramp, you can now enforce your critical security controls — like single sign-on (SSO), MFA, device posture, and variable session lengths — to a

Node.js v12 to v14

Access - Access private hostname applications support all ports/protocols

Cloudflare Access for private hostname applications can now secure traffic on all ports and protocols. Previously, applying Zero Trust policies to private applications required the application to use HTTPS on port 443 and support Server Name Indicator (SNI). This update removes that limitation. As long as the application is reachable via a Cloudflare off-ramp, you can now enforce your critical security controls — like single sign-on (SSO), MFA, device posture, and variable session lengths — to a

AI Search - Reranking and API-based system prompt configuration in AI Search

AI Search now supports reranking for improved retrieval quality and allows you to set the system prompt directly in your API requests. Rerank for more relevant results You can now enable reranking to reorder retrieved documents based on their semantic relevance to the user’s query. Reranking helps improve accuracy, especially for large or noisy datasets where vector similarity alone may not produce the optimal ordering. You can enable and configure reranking in the dashboard or directly in your

CASB - CASB introduces new granular roles

Cloudflare CASB (Cloud Access Security Broker) now supports two new granular roles to provide more precise access control for your security teams: Cloudflare CASB Read: Provides read-only access to view CASB findings and dashboards. This role is ideal for security analysts, compliance auditors, or team members who need visibility without modification rights. Cloudflare CASB: Provides full administrative access to configure and manage all aspects of the CASB product. These new roles help you bett

Gateway - New Application Categories added for HTTP Traffic Management

To give you precision and flexibility while creating policies to block unwanted traffic, we are introducing new, more granular application categories in the Gateway product. We have added the following categories to provide more precise organization and allow for finer-grained policy creation, designed around how users interact with different types of applications: Business Education Entertainment & Events Food & Drink Health & Fitness Lifestyle Navigation Photography & Graphic Design Travel The

Voice Cloning with Consent

Vercel Ship AI 2025 recap

Earlier this year we introduced the foundations of the : a platform for building intelligent systems that think, plan, and act. , we showed what comes next.AI CloudLast week at Ship AI We launched new SDKs, infrastructure, and open source templates that make building production-ready agents as intuitive as building a standard feature. You can now define, deploy, and operate intelligent workflows on the same platform that powers your apps. Whether you're building your first agent or delivering it