Everything we launched during Birthday Week 2026

Cloudflare marked its 16th birthday with Birthday Week 2026, running Monday, September 28 through Friday, October 2, and shipped 46 announcements across the five days, according to the company's recap.

The week opened with open-source commitments: a new cf CLI that mirrors the Cloudflare API with JSON-first output and typed configuration; Forge, a pluggable open-source pipeline that runs in CI to generate SDKs, CLIs and documentation from API definitions; and EmDash, an Astro-based serverless CMS that runs plugins in isolated Worker sandboxes with explicitly approved capabilities. Cloudflare also said VoidZero delivered more than 80 releases across the Vite ecosystem in its first four months and that the previously commercial Void platform will become fully open source. Vinext 1.0 was introduced as a production-ready way to run Next.js applications on Vite.

Tuesday covered security and post-quantum work. Cloudflare announced its intention to become a public certificate authority, twelve years after launching Universal SSL, and said the planned CA would issue free Merkle Tree Certificates. CryptoLabe, which uses AI to find and classify cryptography in the codebase, supports a post-quantum migration target of 2029. HTTP Analytics, Log Explorer and Logpush now show whether requests negotiated post-quantum key exchange. An adaptive AI red-team system tested the company's own WAF and found detection gaps across six attack categories. Threat Signals, described as agentic skills for open-source threat intelligence, is free for every Cloudflare account.

Wednesday focused on the agent economy: Monetization Gateway entered beta so sellers can price resources and collect agent payments using HTTP 402 and x402, and Pay Per Use gives enrolled publishers usage reports, billing and payouts when verified AI buyers use their content. Containers was rebuilt with faster startup, flexible image and instance selection, new scheduling controls and filesystem snapshots for persistent agent workspaces.

Thursday brought Cloudflare Basin to general availability, a serverless data platform built on Apache Iceberg and R2; K2, durable ordered event streams on R2; Artifacts in open beta plus a competition to build a Git platform for agentic development; and Workers KV Instant, which the company says delivers sub-two-millisecond p99 reads across more than 300 locations.

Friday closed with eight observability updates, Cloudflare Traces for request-level visibility without an agent or SDK, a self-serve OHTTP Gateway in closed beta, and Protected Quick Tunnels with email authentication for sharing local applications without Cloudflare accounts. Cloudflare also said its Impact initiatives have delivered more than $100 million in donated services.

Why it matters: Many of these capabilities are gated by plan, beta status or waitlist, so developers and product teams evaluating Cloudflare for agent workflows, post-quantum cryptography or serverless analytics should check availability before planning migrations. The planned CA, if approved, would add an alternative source of free automated certificates.