Cloudflare is rolling out Temporary Accounts on Cloudflare Workers, enabling AI agents to deploy live cloud functions without any pre-existing account or human involvement. The capability centers on a single command — wrangler deploy --temporary — that provisions a publicly accessible Worker in seconds. It removes a longstanding blocker for autonomous agents that can write production-ready code but cannot navigate the sign-up flows, email verification, and billing setup that cloud platforms traditionally require.
Cloudflare has introduced the Cloudflare One stack, a library of agent skills that gives AI agents the domain knowledge required to manage Zero Trust networking end-to-end. The tooling enables autonomous planning, deployment, and ongoing management of a Zero Trust environment without traditional migration consulting calls. By packaging its Zero Trust expertise as callable agent skills, Cloudflare is positioning AI-assisted infrastructure management as a fully self-service capability.
Cloudflare has moved its DMARC Management product to general availability, making it free for all customers regardless of plan tier. The tool centralizes email authentication visibility, offering deeper DMARC aggregate reporting, DNS record analysis, and SPF configuration audits within the existing Cloudflare dashboard. It gives organizations a structured path to achieve full DMARC enforcement without requiring separate third-party tooling.
Simon Willison was frustrated that even simple single-term searches on his site were triggering Cloudflare CAPTCHA challenges meant to deter aggressive crawlers. With help from Claude Code, he crafted a Cloudflare WAF Managed Challenge rule that activates only when a search URL contains at least one ampersand — the character that separates multiple query parameters. The result: ordinary searches like /search/?q=lemur pass through freely, while complex faceted queries with multiple parameters still face the challenge.
Cloudflare announced Application Services for Private Origins in closed beta. It routes public hostnames to private IP origins using existing IPsec, GRE, CNI, or Cloudflare Mesh paths. The feature is positioned for teams that want public application access without exposing origin public IPs or installing extra connector software.