Ideas for building
better software.

Observability for Edge Requests now includes more traffic parameters

We’ve expanded the in to show additional request data by:Edge Request dashboardVercel Observability Available on all plans, these insights help you monitor traffic patterns and identify potential threats, which you can address using .Vercel Firewall Route-level data is available to customers.Observability Plus and learn more about .View your Edge Request dashboardVercel Observability Read more User agent IP address JA4 Referrer Hostname

Advisory on Software Bill of Materials and Real-time Vulnerability Monitoring for Open-Source Software and Third-Party Dependencies

The OWASP Foundation, in collaboration with the Cyber Security Agency (CSA) of Singapore, presents this advisory on using Software Bill of Materials (SBOM) for enhanced vulnerability management, highlighting OWASP CycloneDX—a format standardized by Ecma International as ECMA-424 —and underscoring OWASP’s joint efforts with both Ecma International and CSA. The advisory also features OWASP Dependency-Track the reference platform for how to consume and analyze SBOMs. For details, including GitHub a

Workers AI - Workers AI larger context windows

We've updated the Workers AI text generation models to include context windows and limits definitions and changed our APIs to estimate and validate the number of tokens in the input prompt, not the number of characters. This update allows developers to use larger context windows when interacting with Workers AI models, which can lead to better and more accurate results. Our catalog page provides more information about each model's supported context window.

WAF - WAF Release - 2025-02-24

RulesetRule IDLegacy Rule IDDescriptionPrevious ActionNew ActionComments Cloudflare Managed Rulesetf7b9d265b86f448989fb0f054916911e 100718ASonicWall SSLVPN 2 - Auth Bypass - CVE:CVE-2024-53704LogBlockThis is a New Detection Cloudflare Managed Ruleset77c13c611d2a4fa3a89c0fafc382fdec 100720Palo Alto Networks - Auth Bypass - CVE:CVE-2025-0108LogBlockThis is a New Detection

Cloudflare Images - Bind the Images API to your Worker

You can now interact with the Images API directly in your Worker. This allows more fine-grained control over transformation request flows and cache behavior. For example, you can resize, manipulate, and overlay images without requiring them to be accessible through a URL. The Images binding can be configured in the Cloudflare dashboard for your Worker or in the Wrangler configuration file in your project's directory: wrangler.jsonc { "images": { "binding": "IMAGES", // i.e. availab

R2 - Super Slurper now supports migrations from all S3-compatible storage providers

Super Slurper can now migrate data from any S3-compatible object storage provider to Cloudflare R2. This includes transfers from services like MinIO, Wasabi, Backblaze B2, and DigitalOcean Spaces. For more information on Super Slurper and how to migrate data from your existing S3-compatible storage buckets to R2, refer to our documentation.

Zaraz - Zaraz moves to the “Tag Management” category in the Cloudflare dashboard

Previously, you could only configure Zaraz by going to each individual zone under your Cloudflare account. Now, if you’d like to get started with Zaraz or manage your existing configuration, you can navigate to the Tag Management section on the Cloudflare dashboard – this will make it easier to compare and configure the same settings across multiple zones. These changes will not alter any existing configuration or entitlements for zones you already have Zaraz enabled on. If you’d like to edit ex

Remote VAEs for decoding with Inference Endpoints 🤗