Cloudflare Connect 2026

The Agentic Internet: Building and securing what comes next (Part 1)

The Cloudflare Connect 2026 opening session introduces Cloudflare’s vision for the agentic Internet, guiding businesses through the shift from AI adoption to secure, large-scale transformation. Join CEO Matthew Prince along with Chief Strategy Officer...

The Agentic Internet: Building and securing what comes next (Part 2)

The Cloudflare Connect 2026 opening session introduces Cloudflare’s vision for the agentic Internet, guiding businesses through the shift from AI adoption to secure, large-scale transformation. Join CEO Matthew Prince along with Chief Strategy Officer...

Building an open agentic Internet: Discoverable, callable, and payable

Agents are a new kind of visitor. They don’t render your CSS or click your ads, but there’s a paying human on the other end of every request — block them and you block your customer. Today, billions of those requests are bots re-fetching pages that...

Turning data questions into data infra with Cloudflare Basin

Business, product, and go-to-market leaders have questions about what is happening in their businesses. This usually involves teams of engineers instrumenting systems, capturing and processing events, building data pipelines, and managing data infra....

Generative media’s breakthrough moment: Insights from Runway

Video models have crossed a threshold. What was a novelty one year ago is now reliable enough to sit inside real production workflows — a shift that looks a lot like the moment code generation went from autocomplete to a Claude Code session. In this...

Ferrisway: Ramp’s global routing layer on Cloudflare

Ferrisway is a Cloudflare Worker that serves as Ramp’s global routing layer, handling 100% of production traffic since January — including API requests, authorizations, webhooks, and AI-driven operations such as agent workflows and MCP tool traffic....

The prompt is lava

Sentry, by its nature, needs to ingest untrusted telemetry on behalf of our customers. With the growing number of customers using MCP, and local agents to debug Sentry issues, the prompt injection through telemetry is a real vector of attack. Hear...

Building durable agents with Durable Objects

Durable Objects are the missing primitive for agents: stateful, addressable, isolated services that can live as long as the work requires. In this session, learn how we built an agent cloud entirely on Cloudflare using Durable Objects to model...

Break the ceiling of internal productivity with a fast, global filesystem

One of the strongest competitive advantages in this generation of company building is the productivity of your team, in an era where the fastest and leanest teams can outship and outcompete their much larger competitors. This is extremely amplified by...

12 mistakes we made building an agent platform for 100,000 employees

We set out to let any TELUS employee ship a working app as easily as they’d send a link: upload a zip, get a live subdomain, done. But when we tried to make that safe, cheap, and durable for a six-figure user base, we got a dozen things wrong. Join...

Why modern software engineering needs Durable Objects

As software shifts toward autonomous, long-running agentic systems, traditional stateless serverless architectures are reaching their limits. Modern engineering requires a new default: a persistent, low-latency, colocated state. Join Ashley Peacock,...

It’s time to build, not buy

“Don’t reinvent the wheel” has always been one of the golden tenants of software engineering — but what happens when the wheel becomes really cheap to reinvent? In the past, buying off-the-shelf software almost always made more sense than building...

Artifacts: Git-compatible versioned storage, from zero to beta in 3 weeks

Software engineering has fundamentally changed. In three weeks, our team built and shipped the private beta of Artifacts, Cloudflare’s Git-compatible versioned storage for agents — and AI wrote all the code. But AI alone did not make that possible....

Built differently, secured similarly?

Just Eat Takeaway.com, Crypto.com, and Moody’s bring perspectives shaped by different industries, threat environments, and regions. Their customers, regulatory obligations, pace of change, and tolerance for disruption differ significantly. Yet their...

Inside United Airlines: How a global airline is rethinking cyber defense

Few companies run operations as complexly or as closely watched as United Airlines. Sean Mason, Head of Cyber Defense for United, joins Rohit Chenna Reddy, Security Strategy Lead at Cloudflare, for a candid fireside chat on how his team is rethinking...

Building P1 on Cloudflare: AI-native web composition and governance

In 2025, Pantheon partnered with Cloudflare to power its global edge. Using Cloudflare primitives on the Cloudflare Development Platform, Pantheon scaled a great idea into an entirely new enterprise-grade product, P1, that is transforming how...

Co-engineering the future: How Uber & Cloudflare engineer a global platform

Uber is reimagining the way the world moves for the better. With over 1 billion monthly active platform consumers and more than 10 million drivers and couriers globally, Uber relies on trusted partners like Cloudflare to deliver solutions today and...

TanStack Start, and the rest of the TanStack ecosystem

TanStack Start is a full-stack framework for React and friends, sitting on top of the rest of TanStack: Query, Router, Table, Form, DB, and more. This session is a tour of Start and the ecosystem around it: how the pieces fit, what it feels like to...

SocialKit: AI social toolset built on Cloudflare

Agents are easy to demo and hard to run. SocialKit runs for real: a full AI agent that writes, designs, and schedules social posts, generating words, images, and full videos entirely on Cloudflare, with no servers and no GPUs. This session shows...

People, devices, and agents: How Rippling’s edge architecture evolved

Rippling’s use of Cloudflare Workers began as a simple multi-region routing layer for people. It evolved into a stateful platform for device management, using Durable Objects and hibernated WebSockets to push commands reliably. Today, Workers powers...

MCP made it easy, and that’s the problem

Standing up an MCP server used to be a project, which meant someone had to decide what agents should actually be allowed to do. Cloudflare’s one-click WebMCP support makes it a toggle, and that decision is now unguarded. This session is a field report...

Giving an agent 10,000 tools with Code Mode

How do you give an AI agent access to 10,000 tools without filling its context window? Let it write code. This session explores using Code Mode through Executor to discover tools on demand, combine API calls, and process results in a sandbox. Through...

Building modern state and local government security without starting over

The federal government has made zero trust a mandate. The adversaries have made it a necessity. But for state and local governments operating with legacy infrastructure, multi-year procurement cycles, and security teams stretched across dozens of...

How Figma runs AI-generated code on Cloudflare

AI-generated code needs a place to run. This session follows a request through Nimbus, Figma’s sandbox platform, showing how Cloudflare Workers, Cloudflare Durable Objects, and Cloudflare Containers connect an AI coding workflow to a live browser...

After human: How to think about fraud & abuse when anyone could be anything

Automated traffic has surpassed human traffic on the Internet. The line between human and machine is no longer a reliable signal by itself. This session offers a framework and practical techniques for addressing fraud and abuse when identity, intent,...

Rethinking insider risk for a workforce of people and agents

Insider risk is one of the hardest problems in security: hard to detect, harder to investigate, and easy to underestimate until it’s too late. This session covers how Cloudflare designed our insider risk program, including the team, the controls we...

We built Signal to not know things. Agents want to know everything.

The agentic Internet runs on data access — every tool call, trace, and log an agent touches becomes a new surface for leakage and surveillance. Signal took the opposite bet: sealed sender, minimal logs, no contact graphs. Data we never collect can’t...

Deploying a WAF vs. running a WAF program: The missing manual

You have a WAF. But can you say whether it’s covering every public-facing asset, actively blocking versus just watching, or quietly bypassed since the last review? Most security teams can’t. In this session, IONIX CTO, Billy Hoffman, and Presidio's VP...

Ready for shopping season: Verifying and authorizing buying agents

2026 is the year of the agent. At Experian, we think it ends as the year of the shopping agent. Bot managers block non-browser traffic by default, so agents carrying real revenue get blocked with the bad bots. Admitting the good ones requires...

Scaling Discord’s voice on Cloudflare’s edge

Moving Discord’s voice and video onto Cloudflare took the migration well beyond a typical rollout. This session takes you through that migration. Hear how we were able to hold the reliability bar by partnering directly with Cloudflare’s engineering...

Cloudflare Workers monorepo

Most teams run a handful of Cloudflare Workers and deploy them with wrangler deploy. At Block, we manage 216+ Cloudflare Workers across multiple accounts and business units all from a single monorepo. This talk walks through the architecture, tooling,...

Zero trust in railway OT: What worked, what broke

OT was never built for identity-based access. It ran on implicit trust: physical access was authorization, the wire was the perimeter, IEC 60870-5-104 and Modbus authenticated nothing, and an air gap covered the rest. Add 25-year lifecycles and...

100 billion profiles, one early bet on Cloudflare Durable Objects

In this fireside chat, Mark Dembo, Head of Solutions for Cloudflare's developer platform, sparks a conversation with Alexander Braunreuther, Chief Architect at Contentful, about being a first mover and why it was worth it. Alex talks through the early...

Into the tunnel: Secure, metadata-driven routing at scale

Cloudflare Tunnels aren’t just for secure access. We use them to load-balance traffic into our AWS-powered network, at scale, across every hostname in our zone. No open ports. Just secure, distributed traffic flowing exactly where it needs to go. We...

Durable AI workflows with Effect: Maintaining open source at scale

Every project produces signals that help guide its evolution. Products learn from telemetry, usage, and customer behavior, while open source projects like Effect learn from issues, pull requests, discussions, and contributor feedback. The rise of...

State under siege: How Estonia stopped Russia’s DDoS campaigns

Estonia knows what nation-state DDoS looks like. As Russia’s aggression has intensified, Estonian government websites, media, and critical public services have faced sustained, politically timed volumetric attacks designed to paralyze Estonian...

How we built Command Code, the most used open-model harness, at 950T tokens

How did Command Code make DeepSeek outperform Claude Opus with tool repair harness engineering research? Now at 950 trillion–token scale and over 100K developers, Command Code is fixing billions of tokens for open models. A couple of months ago,...

I built your personal software ecosystem

What if you had your own npm registry, your own GitHub, your own cron, your own email address, and your own database? And what if your favorite AI assistant could build with all of it on your behalf? That’s Kody. Every user gets a fully isolated...

From YOLO mode to zero trust: Building an agentic engineering control plane

Autonomous agents now rapidly write code, patch servers, and operate infrastructure. They can exfiltrate IP or take down production just as fast. The velocity is real; so is the scope of impact. Drawing on Swiss Post’s zero trust program and...

Financial services panel: Resilience, security, and AI

Join fellow finance leaders and innovators at our exclusive industry meetup. Connect with peers, share insights, and hear how Cloudflare is helping financial institutions secure applications, harness AI, and optimize performance. Don't miss this...

Don't block shadow AI on campus. Out-design it.

Conventional shadow AI controls do not survive contact with university governance, and FERPA exposure grows daily. There is a different answer: stop treating the campus network as an enforcement point and start treating it as a strategic platform....

Disrupting scam and fraud networks with armies of AI agents on Cloudflare

Scams and fraud are run as businesses, and often their defenders can only react once the money has moved. Apate gets there first. In this session, hear how Apate uses thousands of AI agents to engage scammers across chat, WhatsApp, Telegram, email,...

Your agent wrote it. Who’s on call?

Cloudflare shipped an OAuth library for Cloudflare Workers largely written by AI, publishing prompts alongside code for the industry to review commit by commit. This provided an early, honest look at what agent-authored production code takes to get...

Modern customer security engineering

This session details how we rebuilt a security-focused production data processing platform on the Cloudflare Developer Platform. Learn about designing an AI-native architecture using the developer platform and building and operating AI-driven...

Canary to cloud: Building a flexible traffic strategy

Moving from an on-premises stack to cloud environments changes more than where applications run; it changes how traffic must be controlled throughout the transition. In this session, Uber and Cloudflare share how they are modernizing load balancing to...

Oracle and Cloudflare: Building a stronger foundation for enterprise innovation

What becomes possible when two enterprise technology leaders combine their strengths? In this session, executives from Cloudflare and Oracle explore their partnership and its potential to help organizations around the world simplify, secure, and...

From the endpoint to the edge: Simplifying security in the AI era

Environmental complexity is growing. At the same time, attacks are getting faster, more complex, and coming from more directions then ever. Learn how SentinelOne and Cloudflare have partnered to deliver integrations and solutions to help bring...

Transforming the enterprise WAN

Discover how users leverage Cloudflare WAN with BGP to consolidate and simplify private wide-area networks. This session reveals how Cloudflare WAN solved the routing limitations and operational complexity that traditional solutions couldn’t address.

How to measure real-world network quality for end users

Speed tests are a common tool for diagnosing poor connections and comparing Internet service providers. But traditional tests often measure performance under ideal conditions, not the real-world experience users actually have. Cloudflare helps...

Inside healthcare: Securing and scaling enterprise networks with AI

Designed for technology leaders in healthcare, this showcase explores how to secure and scale infrastructure using AI. Regulated industries face complex challenges, from sophisticated application programming interface (API) vulnerabilities to...

Build low-latency pub/sub applications with MoQ

Developers building real-time applications often choose between media delivery protocols such as HLS and DASH and interactive technologies such as WebRTC. Media over QUIC (MoQ) provides a shared pub/sub model and lets applications tune latency and...

A runtime for developers and their agents

The Cloudflare Workers runtime rests on a few primitives: V8 isolates as the unit of execution, bindings as a capability model instead of ambient network access, conformance to web standards and ECMA-262, and Node.js compatibility. None of these were...

Protecting origins in the agentic era

AI agent traffic is surging, with more than 51% of web traffic being already automated. As agents multiply, origin servers face two to five times load growth. The traditional fix of buying more servers doesn’t scale. This talk walks through how Smart...

EmDash: The secure WordPress successor for humans and agents

WordPress powers 43% of the web but was built for another age. At Cloudflare, we asked, “What would WordPress look like if it were built for the agentic era?” In this talk, Matt Kane (creator of EmDash) introduces EmDash — a full-stack TypeScript CMS...

Securing Internet traffic for the quantum computing era

Post-quantum encryption is moving from research topic to operational reality, but deploying new cryptography across the Internet requires more than flipping a switch. This session is for security, networking, and infrastructure teams planning for...

From intent to infrastructure: Rethinking CDN resiliency with AI

CDN configurations encode the same delivery intent in vendor-specific ways, making migrations and multi-CDN operations slow and risky. In this session, Cloudflare introduces an intent-driven approach: define behavior once, use AI to generate...

Cloudflare OS is an architecture of distrust

"Cloudflare OS is an architecture of distrust." At least, that’s what an AI said when it reviewed the code, because Cloudflare OS is designed to distrust the AI. Most agent harnesses these days simply give the AI free rein and pray for alignment....

Your AI agent is a distributed system

AI agents look simple in a demo: give a model some tools and let it run. Production changes the problem completely. Agents need durable state, retries, scheduling, concurrency, real-time communication, observability, and a way to survive failures...

Adaptive Intelligence: Detecting sophisticated and persistent attackers

This session is intended for security professionals and practitioners managing bot threats. There is an open ecosystem devoted to bypassing bot detection — toolkits that forge fingerprints, drive real browsers, and solve challenges automatically. When...

Trusting the toolchain: Securing agentic MCP and package registry usage

An agent is only as trustworthy as the tools, packages, and third-party applications it can call. This session walks through risks associated with agentic tool use: discover and reroute MCP traffic, detect agentic package usage, and limit the scope of...

5 questions every CTO must answer about AI agents

Your business units are already building AI agents, each on a different platform, with their own identity, logging, and bill. That speed creates blind spots, runaway cost, and compliance gaps with no clear ownership. This session for CTOs and...

Monetizing AI agent traffic: Write your first Monetization Gateway rule

The majority of Internet traffic is now driven by AI agents, which means that businesses must learn how to charge AI agents for their consumption. In this session, developers and business strategists will learn how to set up their first monetization...

MCP is the door, and the control plane is the house

MCP makes it easy to connect agents to tools. That is both the unlock and the danger. At Cloudflare, we connected internal agents to systems like GitLab, Backstage, Jira, Sentry, Prometheus, Google Workspace, and our internal Release Manager. It...

Securing your workforce for the AI era

As organizations scale AI services and internal tools, the access control surface grows faster than policy can keep up. This session walks through a practical workflow for securing your workforce across applications, browsers, and devices. Organize...

Merkle Tree Certificates and the next phase of the WebPKI

Cloudflare has been experimenting with Chrome on the next-generation architecture for post-quantum authentication for the web: Merkle Tree Certificates. Recent developments in quantum technology have led us to expedite the deadline for completing our...

Cloudflare OS: Automating work with agents connected to your systems

Employees want AI that can reach internal systems, and handing out API keys doesn’t scale. Cloudflare OS is an open source agent workspace your company owns and runs. Your teams work with agents that know your organization’s context and reach internal...

Connecting Cloudflare One data protection and secure AI

As AI becomes embedded in everyday work, security teams need a way to protect sensitive data without slowing adoption. This session explores how Cloudflare One data protection capabilities and secure AI controls can work together to provide...

Q-Day is coming: Here’s how to prepare for the threat of a quantum computer

Join Cloudflare’s Sharon Goldberg as she discusses post-quantum cryptography (PQC) and how to prepare for the threat quantum computers pose to the cryptographic systems that underpin the modern Internet. In this introductory discussion, learn what...

Customer zero: How Cloudflare runs AI engineering for 5,000+ employees

Rolling out coding tools across a company means managing access, context, and cost. This session for engineering and platform leaders shares how Cloudflare built its internal stack using AI Gateway, MCP server portals, and Access, with platform,...

Building Argus: AI & ML threat detection at scale in Cloudflare

As Customer Zero, Cloudflare faces unique security challenges at massive scale. Every corporate action flows through Cloudflare Gateway, generating billions of events. To spot critical security threats in this ocean of data, we built Argus. Powered by...

Prevent, don’t detect: Introducing Cloud Workload Security

Today, cloud security mostly works by detection. Something gets misconfigured, a tool flags it, and someone chases it down. By then, the risky configuration is already live and on the path to exploitation. Cloud Workload Security (CWS) is a new...

Unifying network observability: Logs, traces, and the agents you run

This session is tailored for developers, platform teams, and security engineers who troubleshoot on Cloudflare. Logs, analytics, traces, and alerts have lived in separate products with separate query languages, so one question means multiple tabs....

The rogue agent problem: When AI adoption outpaces your security

AI adoption doesn't roll out — it spreads. One approved tool becomes ten unapproved ones. One experiment becomes a production deployment nobody secured. For security investigation and response teams, every ungoverned AI deployment is a blind spot —...

Beyond IP addresses: Cryptographic primitives for honest bots

With the rise in traffic from AI agents, it’s no longer clear what’s considered a bot. There are some clearly malicious bots, like ones that DoS your site, and ones that you want, like search engine crawlers. In this session, the Cloudflare research...

Closing the loop: Agentic threat intelligence and threat response

Security teams are drowning in two asymmetries: attackers move at machine speed, while analysts triage and write intelligence at human speed. This session presents two production systems — built entirely on Cloudflare’s developer platform — that close...

6 architecture patterns that repeat across enterprise customers

Most enterprise architecture conversations feel unique to the customer, such as for a regulated bank, a multi-tenant SaaS platform, a media business, or a manufacturer. The surface differences (vertical, geography, regulation, and threat model) are...

Self-hosting Durable Objects

This session explores the architecture of celld, which allows you to self-host Cloudflare Durable Objects and Cloudflare Workers across many VMs. Learn how this relates to the Deno acquisition and the team’s nascent plans to bring this functionality...

Move fast, stay reliable: Cloudflare’s multilayer resilience strategy

This session pulls back the curtain on Cloudflare’s resilience-focused engineering strategy, detailing Cloudflare’s high availability, disaster recovery, business continuity, and safe change efforts. Discover how Cloudflare proactively validates its...

Cloudflare Workers VPC: Build globally, connect privately

Cloudflare Workers applications often need to reach APIs and databases that cannot be exposed to the public Internet. Cloudflare Workers VPC connects Workers and Hyperdrive to private networks through existing Cloudflare One connectivity, including...

How the Internet really works: Into the depths of Internet infrastructure

You might have heard statements like "70% of Internet traffic passes through Northern Virginia" or that satellite communications are how intercontinental communication happens. Would it surprise you that neither of those statements is true? This talk...

Rearchitecting the Cloudflare network for the AI revolution

Join this session to walk through the Cloudflare operations infrastructure. The session starts with a historical look back and ends with outlining the ongoing work in modernizing the Cloudflare Global Network.

How we built Cloudflare’s global network

Learn how Cloudflare built and continues to expand one of the world’s largest global networks — spanning more than 330 cities across more than 120 countries. Discover how we think about data center placement, peering and interconnection strategy, and...

From chaos to control: Building a harness for personal agents

Late last year, we got a taste of what a personal AI agent can look like. You can give it access to your calendar, email, and to-do list and let the agent handle the boring tasks for you. The harness worked, until it didn’t. In this talk, I'll share...

From ranking to recommended: Answer engine optimization (AEO)

Discovery is moving from search rankings to AI recommendations. Customers ask an assistant, and it names a shortlist before anyone visits your site. Unlike search, there's no impression count and no missed-click report, so when a competitor is...

The integrated Cloudflare stack for trusted AI adoption

AI adoption is moving fast, but trusted adoption requires a control plane that can keep pace. This session explores how the integrated Cloudflare stack connects visibility, policy enforcement, data protection, and operational control into a practical...

Internal DNS: The end of the appliance era

Your public DNS lives on Cloudflare’s global network. Your internal DNS lives in a closet. That gap costs you in three ways: latency from regional appliances, complexity from running two DNS stacks, and risk from infrastructure patched twice a year....

Code Mode: Fit 2,500 API endpoints into 1,000 tokens

MCP promises to be the USB port for AI agents, but every tool consumes tokens. Cloudflare’s API has 2,500 endpoints; exposing them all would eat 1.17 million tokens, exceeding any model’s context window. We built Code Mode, an open source technique...

Reducing payloads with shared compression dictionaries

Modern web applications ship repeated patterns across JavaScript, CSS, APIs, and page responses, but traditional compression treats many of those responses independently. This problem is more pronounced in the vibe-coding era. In this session,...

Securing agentic harnesses: Control, visibility, and safe tool use

As organizations build agentic systems that call tools, retrieve data, and take action, security must move beyond prompt-level controls. This session explores how to secure agentic harnesses with the visibility, policy, and access controls needed to...

Behind the scenes: Challenges of running AI models at scale

Cloudflare runs at a massive scale — but what does scale mean when it comes to running AI models? We can talk about scale in different dimensions: global scale (routing, autoscaling, and concurrency), model catalog scale (breadth and modalities of...

The agentic network: Secure private connectivity for agents

AI agents can’t use VPN clients or type MFA codes, so every agentic workflow breaks at the same point: the agent needs to reach a private database, internal API, or MCP server. Exposing those resources publicly is a security risk, and legacy VPNs...

Auto model routing saves money, makes users happy, and is inherently flawed

Cloudflare AI Gateway includes an automatic model router that can reduce AI spending without reducing productivity. This talk walks through the router architecture that was built for performance, interpretability, and adaptability. But despite its...

Better visibility and control: Shining a light on shadow AI

Blocking AI traffic on day one is a fast way to lose user trust and drive work into the shadows. This session shows how security teams can discover AI and MCP prompts automatically, run DLP in a non-blocking observation mode, measure what would be...

Bring your own logic with a fully programmable, secure web gateway

A fixed catalog of AI controls cannot anticipate every customer workflow, model, or risk signal. This session demonstrates how teams can extend Cloudflare Gateway policy with custom selectors and Cloudflare Workers invocations to build...

Prevent cloud misconfigurations and data leakage before they happen

Cloud Workload Security is a new and unique approach to securing cloud resources. While most tools focus on catching risks after the fact, CWS uses an inline proxy to inspect cloud API calls as they happen. It enforces policy as code in real time,...

Automating app development the secure way: Velocity meets defense in depth

AI coding assistants have fundamentally transformed developer velocity. Today, developers can describe an app in plain English and deploy it to Cloudflare's global network in minutes. How do engineering teams keep that speed while ensuring every app...

How to get started on your FedRAMP journey with Cloudflare

Learn how to get started on your FedRAMP Moderate and FedRAMP High journey with Cloudflare in this interactive panel featuring Cloudflare’s Jake Schaeufele, Senior FedRAMP Compliance Specialist, and Tom Lianza, VP of Engineering. Going deep into the...

Poisoning the well: The rise of indirect prompt injection in the agentic age

As we shift from simple chatbots to autonomous AI agents that can browse the web, manage our calendars, and even audit our code, we have inadvertently opened a back door for a new breed of silent adversary. Indirect prompt injection (IDPI) allows...

Catch up on everything from Connect 2026.

Catch up on everything from Connect 2026.

Connect 2026 sessions

All episodes