Everything we launched during Birthday Week 2026

Open Source and Developer Tools

Cloudflare introduced several open-source initiatives during Birthday Week 2026, including the cf CLI, a new command-line interface designed to support agents and developers using Cloudflare's API. The CLI uses JSON-first output and typed configuration, providing a consistent interface for interacting with Cloudflare's services. Alongside this, the Forge pipeline was announced, an open-source tool for generating SDKs, CLIs, and documentation directly from API definitions. This marks a significant step toward automating the development process and reducing the overhead for developers.

Another notable open-source contribution was EmDash, a serverless CMS built on Astro that isolates plugins in Worker sandboxes. This approach enhances security by limiting the capabilities of plugins to explicitly approved functions. Additionally, VoidZero was highlighted as a tool that has significantly improved the speed of the JavaScript toolchain, with its commercial platform transitioning to full open-source availability. These tools collectively aim to lower the barrier to entry for developers and improve the reliability of open-source projects.

Post-Quantum Security and Application Security

Cloudflare made strides in post-quantum security with the announcement of its intention to become a public certificate authority (CA) and the development of Merkle Tree Certificates, which are designed to support post-quantum authentication without imposing large certificate and handshake costs. This is part of a broader effort to prepare for the post-quantum era, including the use of CryptoLabe, an AI tool that helps classify and identify cryptographic implementations across Cloudflare's codebase. The company also contributed to an IETF extension that prevents quantum downgrade attacks against IPsec, ensuring that post-quantum security measures are robust and widely adopted.

In the realm of application security, Cloudflare introduced Application Profiles, which use machine learning to learn the expected structure of HTTP requests and identify deviations. This helps customers enforce what valid application traffic should look like and detect anomalies. Additionally, Threat Signals was launched as a free feature for all Cloudflare accounts, turning open-source threat intelligence into structured indicators that can be connected to WAF rules for enhanced security.

Economic Models for the Agentic Internet

Cloudflare's announcements on Wednesday focused on new economic models to support the growing agentic Internet. The Pay Per Use program allows publishers to get paid when verified AI buyers use their content, while the Monetization Gateway in beta enables sellers to charge AI agents for resource consumption using HTTP 402. These initiatives aim to create a sustainable economic framework for creators and developers in the AI-driven economy.

Cloudflare also introduced User Insights for the AI Gateway, which helps identify AI model overuse and suggests more cost-effective alternatives. This is part of a broader effort to optimize AI usage and reduce costs for developers and businesses. Additionally, Auto Router was launched to classify requests at the edge and route them to the most suitable model, preserving response quality while reducing costs.

Developer Platform Expansions

On Thursday, Cloudflare expanded its developer platform with the general availability of Cloudflare Basin, a serverless data analytics platform built on Apache Iceberg and R2. This platform allows developers to ingest, manage, and query large datasets efficiently. K2, a durable serverless event stream, was also launched, providing ordered event streams on R2 without the operational overhead of managing broker clusters.

Cloudflare also announced a new contest inviting developers to build a Git platform designed for agentic development. This initiative reflects the company's commitment to supporting the next generation of development tools and workflows. Additionally, Workers KV Instant was introduced, offering sub-two-millisecond p99 reads and fast global replication across more than 300 locations.

Conclusion

Cloudflare's Birthday Week 2026 was marked by a wide range of announcements that reflect the company's vision for the future of the Internet. From open-source tools and post-quantum security to new economic models and developer platform expansions, these initiatives aim to support the growing demands of the agentic Internet. As the landscape of web development and security continues to evolve, Cloudflare's efforts provide a foundation for innovation and resilience in the digital age.

Source: Cloudflare. Analysis based on publicly available information; no hands-on testing is claimed.