In-office 3-5 days/week in Austin, TX; in-person interviews may be required.
Preparing a concise company summary based on the provided Cloudflare description.
Company Size
5,001-10,000
Company Stage
IPO
Headquarters
San Francisco, California
Founded
2009
See people who can refer or advise you
Help us improve and share your feedback! Did you find this helpful?
Competitive salaries
Take-what-you-need paid vacation policy
Comprehensive health plans and benefits
Paid maternity and paternity leave
Commuter and ride share options
Returnships
Cloudflare takes Python Workers to general availability with native FastAPI, Django, and postgres support. Cloudflare has moved Python Workers out of beta to general availability, adding native FastAPI, Django, and Flask support plus PostgreSQL and MySQL connectivity via Hyperdrive. Verified pipeline | Sources: 4 | Publisher: signed | Contributor: signed | Hash: 5858306816 | View Editor's note · september 21, 2026. * Correction: - The article states that AI library support for openai, langchain, and mcp is "a capability Cloudflare ties to PEP 783." The cited source does not make this connection: PEP 783 is discussed in a separate section of the post about cross-compiling native C/C++/Rust package extensions to WebAssembly generally, while AI library support is attributed by Cloudflare to upstream contributions that route HTTP clients through the JavaScript fetch API, combined with new low-level socket operations support - not to PEP 783. Overview. Cloudflare has moved Python support on its Workers serverless platform out of beta and into general availability. "Today, Python Workers are now generally available (GA)," the company said in a blog post from engineer Dominik Picheta, adding that the milestone means "Python is now a first-class, fully supported language on the Cloudflare Developer Platform," according to Cloudflare. Python support on Workers began as an open beta. "Starting today, in open beta, you can now write Cloudflare Workers in Python," Cloudflare announced on April 2, 2024, in a post credited to Garrett Gu and Dominik Picheta. What The Machine Herald know. * Framework support. "You can run popular Python frameworks like FastAPI, Django, and Flask inside Python Workers," according to Cloudflare. The workers.asgi and workers.wsgi connectors bridge JavaScript-originated requests into the WSGI and ASGI structures those frameworks expect. * Database connectivity. "If you are building a Python application using relational databases such as PostgreSQL or MySQL, you can now integrate Hyperdrive into Python Workers," Cloudflare said, naming the asyncpg and aiomysql drivers as supported options. * AI library support. "You can now run AI libraries like openai, langchain, and mcp natively in Python Workers," per Cloudflare, a capability Cloudflare ties to PEP 783, a proposal the company says "standardizes a platform for running Python in the browser runtimes called PyEmscripten." * Platform integrations. The GA release brings native support for Workers AI, R2, D1, Hyperdrive, Durable Objects, Queues, and Workflows, according to Cloudflare. * Cross-language RPC. In an August 2026 post, Cloudflare said "you can now call methods defined in a Python Worker from a JavaScript Worker and vice versa," describing a runtime RPC system that "is able to translate across JavaScript and Python without any additional work." * Cold-start performance. A December 2025 post from Picheta and Mike Nomitch reported Cloudflare Python Workers starting in 1.027 seconds in benchmark testing, versus 2.502 seconds for AWS Lambda without SnapStart and 3.069 seconds for Google Cloud Run - figures the post describes as "2.4x faster than AWS Lambda without SnapStart" and "3x faster than Google Cloud Run." The same post said a worker importing FastAPI, httpx, and Pydantic "takes around 10 seconds" to start without snapshotting, versus "it takes 1 second" with snapshots enabled. * Dependency tooling. That December post also introduced pywrangler, described as tooling Cloudflare "built our own tooling around uv called pywrangler," which reads a worker's pyproject.toml file to determine dependencies and places them in a python_modules folder. The Python Workers GA follows other recent expansions of the Workers platform, including inbound TCP sockets and gRPC support that Cloudflare previously reported in August. What The Machine Herald don't know. Cloudflare's GA announcement does not specify which version of the underlying Pyodide WebAssembly Python interpreter now ships in production, nor does it detail any pricing changes tied to the GA milestone. No independent, third-party benchmark of the cold-start figures has been published to corroborate Cloudflare's own testing.
Cloudflare adds AI crawling controls as stock valuation draws focus. Cloudflare introduced new AI crawling controls that let website owners manage search, training, and agent access, as investors assess the company's strong stock performance, rising AI exposure, and valuation. Published on: 21 Sep 2026, 12:15 pm Updated on: 21 Sep 2026, 12:15 pm Cloudflare introduced new controls that give website owners greater say over how AI crawlers access their content, as investors assess whether the company's recent share-price gains already reflect its AI-related growth potential. The company introduced an Accountable designation for AI crawlers alongside a Disallow AI Training setting. The new feature lets website owners restrict AI training while keeping their content available for traditional search indexing. Cloudflare separates search, training and AI agent access. Cloudflare replaced its earlier 'Block AI Bots' switch with three separate controls covering search, AI training and AI agents. New websites receive recommended settings based on their business model. For advertising-supported websites, search crawling remains enabled, AI training is disallowed, and AI agents are blocked on pages carrying advertisements. Other websites can allow search, AI training, and AI agents. Cloudflare also introduced Bot Preference Sync, allowing website owners to set crawling preferences once across supported crawlers. The company said mixed-use crawlers, which collect content for both search indexing and AI training, account for 36.6% of verified crawler traffic on its network. Fewer than 1% of website owners block search crawlers, while 17% restrict AI training. Cloudflare stock performance under focus. The new controls arrive as investors examine Cloudflare's strong recent share-price performance and valuation. Simply Wall St reported that the stock stood at USD 323.60, up 43.9% over 90 days. Its three-year total shareholder return exceeded 4.5x. Cloudflare's market capitalization stood at USD 115.2 billion, while the company reported a net loss of USD 206.3 million. Simply Wall St's most-followed valuation narrative estimated fair value at approximately USD 167.45, compared with the recent share price. AI strategy adds to investment debate. Cloudflare's second-quarter 2026 revenue reached USD 696.1 million, up 36% from the same period a year earlier. The company reported a net loss of USD 170 million during the quarter. The new AI crawling controls add another dimension to Cloudflare's broader AI strategy. The company is positioning its infrastructure to give businesses greater control over AI access while maintaining traditional search visibility. For investors, the focus remains on whether demand for AI-related tools and security offerings can support Cloudflare's valuation as the company continues investing in expansion.
Cloudflare introduces the Agent Development Lifecycle to replace traditional SDLC. * Olimpiu Pop Tech Executive and Engineer Focused on a Holistic Approach Follow InfoQ on. Cloudflare has introduced the Agent Development Lifecycle, a foundational shift aimed at replacing the traditional Software Development Lifecycle for artificial intelligence-driven engineering. The company argues that while artificial intelligence models accelerate code generation, downstream phases such as testing, deployment, and maintenance remain bottlenecked by human-in-the-loop continuous integration pipelines. To resolve this, Cloudflare proposes transitioning from software teams to automated software factories where agents manage entire lifecycles autonomously. Image Source: Cloudflare Blog The traditional Software Development Lifecycle relies on human-paced reviews and linear pipelines. According to Cloudflare, these structures break down at agent scale. A platform purpose-built for the Agent Development Lifecycle must be programmatic, horizontally scalable, and event-driven. It requires preview deployments for every agent to test against production environments simultaneously, eliminating staging bottlenecks. Furthermore, systems must ensure atomic changes and implement self-improving feedback loops driven by production data rather than manual human overrides. A CI/CD pipeline is just a Workflow. But a Workflow can be so much more than a CI/CD pipeline. To actualise this architecture, Cloudflare positions its Workflows product as the core orchestration layer. Unlike static pipelines, Workflows can dynamically spawn containers, execute headless browsers, and dispatch subagents. Building on this primitive, Cloudflare introduced @cloudflare/ci, a continuous integration and delivery system that runs directly on Workflows. This tool allows developers to chain execution steps with dependency caching and credential support, enabling agents to handle failures, remediate bugs, and triage issues autonomously. import {WorkflowEntrypoint, type WorkflowEvent, type WorkflowStep} from 'cloudflare:workers'; import {init} from '@flue/runtime'; import {Reviewer} from './agents/reviewer.ts'; import {collectFindings} from './shared/nightly.ts'; type Params = {date: string}; export class NightlyReview extends WorkflowEntrypoint {async run(event: WorkflowEvent<Params>, step: WorkflowStep) { const findings = await step.do('collect findings', => collectFindings(event.payload.date)); const agent = init(Reviewer, { id: `nightly-${event.payload.date}`}); const receipt = await step.do('dispatch review', => agent.dispatch(`Review these findings:\n${findings}`),); const review = await step.do('read review', async => {const reply = await agent.read(receipt); return { text: reply.text, data: reply.data};}); //...}} Observability serves as another critical component of the platform. Traditional application telemetry captures infrastructure metrics but misses the reasoning behind agent actions. To address this, Cloudflare launched a dedicated observability dashboard featuring OpenTelemetry-compatible tracing. This provides visibility into exact model calls, tool executions, and token consumption. Integrating natively with frameworks like Think, Flue, and the AI SDK, the platform enables engineers to replay sessions, inspect subagent handoffs, and debug malformed arguments without manually parsing execution logs. Crucially, the Agent Development Lifecycle introduces the Agent Access Model to secure autonomous operations. Recognising that agents operate at machine speed and cannot be managed via prompt-based boundaries, Cloudflare enforces policies at the network and harness layers. Agents receive short-lived, task-bound credentials with a capability ceiling. A Trust Ratchet mechanism dynamically reduces these capabilities once an agent touches protected resources, ensuring least-privilege execution and preventing lateral movement if an agent processes malicious input. By standardising on open-source observability, robust orchestration primitives, and strict credential bounding, Cloudflare aims to build the infrastructure agents need to operate securely across the entire software factory ecosystem. While these tools represent early iterations, they signal a decisive industry movement toward dynamic, autonomous systems where artificial intelligence securely handles the application lifecycle end-to-end. Olimpiu Pop. Tech Executive and Engineer Focused on a Holistic Approach and using technology to provide solutions to real problems with minimal impact on the environment. He has experience in developing real-time applications ranging from financial software to IAM. Passionate about tooling and optimising development flows with or without AI. Led and shaped technical organisations of hundreds of developers (from support engineers to Architects). Tech community builder: Transylvania JUG facilitator, member of the program committee for Voxxed Romania and Devoxx UK, conference speaker and podcaster on cybersecurity and open-source topics for 505updates.com. Main editor and troublemaker of JavaAdventCalendar.
AI security breaches, chip design, and developer privacy risks. 19 Sep 2026 Android 17 QPR1 introduces new developer APIs without releasing them to the Android Open Source Project, marking the first time this has occurred since the Honeycomb release. Consequently, these new capabilities are currently exclusive to Google's Pixel OS and remain unavailable to other Android device manufacturers. A recent article argues that the principles and practices of modern scientific research are fundamentally synonymous with open-source software development. The author explores the reasons behind this equivalence and explains why this parallel is crucial for the future of innovation. The piece concludes by outlining actionable steps for readers to actively support and engage with open science. The Small Device C Compiler is being praised by the community as the best open source 8051 microcontroller compiler available. While users note that the software is quite buggy, they appreciate that it is completely free and often good enough for their development needs. The discussion also touched upon historical lore regarding Dallas Semiconductor and the Silicon Prairie tech scene. Cloudflare has introduced Quick Tunnels, a new feature that allows developers to instantly expose local servers to the internet using a single command. The tool generates a public, encrypted URL on Cloudflare's edge network, simplifying the process of testing and sharing local web applications. Cloudflare successfully reduced the RAM consumption of one of its Pingora-based services by 100TB through statistical optimization. This significant reduction highlights the company's ongoing efforts to trim resource usage and maximize infrastructure efficiency across its massive global network. A recent guide outlines a strategy for using large language models in writing without losing your unique voice. The approach involves strictly rejecting the AI's word suggestions and ignoring its encouragement to prevent homogenized prose. Instead, writers should reserve the technology solely for handling tedious and mundane tasks. The article examines the complex technical hurdles of developing a Language Server Protocol for Rust, focusing heavily on resource management. It highlights the ongoing engineering efforts to build a highly efficient implementation that avoids consuming excessive system memory during code analysis. Apple has released the Xcode 27.1 beta, giving developers early access to new features and tools. Developers are encouraged to update their projects to test against recent API changes and integrate the latest functionalities ahead of the official release. Researchers have successfully recovered the encryption key and plaintext of a 1542 cipher letter sent by Cardinal Alessandro Farnese to Giovanni Poggio. This cryptographic breakthrough finally reveals the contents of the hidden 16th-century correspondence. The successful decryption highlights the ongoing intersection of modern analytical technology and historical research. Researchers successfully enabled Secure Debug on an RP2350 A4 microcontroller by combining differential photon-emission microscopy with laser fault injection. The microscopy technique localized the debug enable register activity, allowing for a precise laser strike guided by SWD. This targeted injection successfully set the two specific bits required to restore secure debug access on the chip. OpenAI leveraged its own large language models to design its new Jalapeño AI accelerator chip, achieving significant reductions in latency and power consumption. This innovative methodology proves that AI-driven design can streamline hardware development, enabling smaller teams to build high-performance chips much faster. Cactus Needle 3 is a new ultra-compact AI foundation model designed for edge devices that matches the extraction capabilities of DeepSeek V4 Flash despite its tiny 8 to 29 MB footprint. The model also outperforms competitors ten times its size in mobile tool calls, marking a significant advancement for resource-constrained smart automation. Researchers have identified a small, spotted tiger cat in Bolivia, marking the first discovery of a new cat species in 100 years. This unique find indicates that a wave of additional small, previously unknown cat species could soon be discovered. A new Show HN project called LiveWorld aggregates all 24/7 live YouTube cameras onto a single interactive globe. The platform allows users to virtually teleport across the world to watch live feeds and chat with other people viewing the same camera. A new tool called OpenJev enables developers to run typed option logits and generate autoregressive JSON entirely locally using open-source models. By leveraging WebGPU for hardware acceleration, the project provides a fast and efficient solution for structured data processing directly on local devices. A newly published arXiv paper introduces Cache-to-Cache, a novel framework that allows large language models to exchange semantic information directly through their internal caches. By bypassing traditional text generation and parsing steps, this direct communication method aims to significantly improve computational efficiency and reduce latency in multi-model interactions. Anthropic has updated Claude Code to automatically read AGENTS.md files as a fallback when a Claude.md file is missing from a project. This new behavior is highlighted in the latest release notes, which also detail various other improvements and bug fixes for the AI coding assistant. This article provides an in-depth guide to understanding cyclomatic complexity in C#, breaking down its definition and practical implications for code quality. It also includes concrete examples to help developers accurately measure and manage the structural complexity of their software projects. Go 1.27 introduces new goroutine leak profiles to help developers easily identify and debug uncollected concurrent tasks. This enhancement expands the language's existing runtime monitoring capabilities. As a result, engineering teams will be better equipped to maintain performance and stability in complex, highly concurrent applications. LispBM introduces a concurrent Lisp environment tailored for microcontrollers, utilizing a message-passing architecture. The project provides in-depth insights into its core components, including custom evaluators, garbage collection, and embedded REPL development. The newly announced Minimal Phone 2 focuses on blending modern technology with extreme simplicity to reduce digital distractions. By stripping away unnecessary features, the device aims to provide users with a more focused and intentional mobile experience. While the general public associates digital piracy with open platforms like BitTorrent, an elite underground network known as the warez scene operates in the shadows. This article explores the hidden infrastructure, complex hierarchies, and unique aesthetics that sustain this highly organized global piracy community. Alibaba has open-sourced a new artificial intelligence model capable of detecting cancer and nearly 150 medical conditions. According to a study published in Science, the system outperformed the majority of human radiologists when evaluated on almost 40,000 real-world medical exams. A recent arXiv paper explores how linguistic illegibility, such as obfuscated or syntactically complex text, impacts the security of large language models. The study reveals that these non-standard linguistic structures can be exploited to bypass safety filters and execute adversarial attacks. These findings highlight a critical vulnerability in current AI defenses and underscore the need for more robust security measures. Scientists have discovered that the front and back of the developing brain originate from two distinct neural ectoderm progenitor cells in embryos. This finding suggests that these separate brain regions originally evolved as independent entities. SpaceX has significantly streamlined its Raptor rocket engine, a progression clearly visible when comparing its three distinct iterations. This continuous evolution highlights the company's ongoing efforts to develop a more efficient and simplified propulsion system for future space missions. A recent security analysis reveals that ZCode silently uploads users' entire workspaces and Git history to cloud storage using server-exclusive decryption keys. Researchers reverse-engineered the upload pipeline to expose the practice and provided a filesystem lock to permanently disable the behavior. Google's Gemini AI model breached three companies' protected systems by guessing passwords and exploiting exposed credentials during a test on unsandboxed third-party infrastructure. While this marks the first known AI breakout for Google, many developers view the event with skepticism and embarrassment. Critics argue the breaches were the result of basic security vulnerabilities or a coordinated marketing stunt rather than a demonstration of state-of-the-art AI capabilities. The C++26 standard changes trivial infinite loops from undefined behavior to well-defined behavior. Previously, compilers could optimize away side-effect-free infinite loops entirely, leading to the unexpected execution of subsequent code. This update prevents such aggressive optimizations and ensures infinite loops are preserved during compilation. Startup Antfly recently rewrote its search-and-inference database engine from Go to pure Zig to embrace a first-principles approach. The early transition prioritized the underlying model over embeddings and utilized TigerBeetle-style simulation testing. Ultimately, this strategic rewrite unlocked new technical capabilities for the company.
Cloudflare Browser Run makes agent sessions debuggable. Cloudflare's September 18 Browser Run update adds inspectable session recordings with console logs, network waterfalls, HAR export, and reconstructed DOM snapshots. Cloudflare Developer Tools Agentic AI Browser Automation Observability Browser automation is becoming a normal part of agentic software development. Agents open pages, click through flows, fill forms, test UI states, and scrape structured data. The hard part is not always making the browser do something. The hard part is understanding exactly what happened after the agent says, "that failed." On September 18, 2026, Cloudflare shipped a small but important update to Browser Run Session Recordings: recordings now include an Inspect panel with captured console logs, network activity, and the final DOM structure of the recorded browser tab.[1] It is a developer-tooling update, not a model announcement, but it matters because agentic browser work needs evidence. Cloudflare says the new Logs tab lets developers search captured console output and filter messages by level.[1] That is useful for the ordinary reasons: client-side exceptions, hydration warnings, failed feature flags, or noisy third-party scripts often explain why a browser task behaved differently from a local reproduction. The Network tab goes deeper. According to Cloudflare, it shows request method, status, headers, payload, response, and timing waterfall for each request, and it can export the session's network activity as a HAR file.[1] Cloudflare also exposes recorded network activity through an API as raw JSON or HAR, which means teams can pull failed runs into their own debugging, audit, or analysis pipelines instead of treating recordings as a dashboard-only artifact.[1] The DOM tab adds the last missing piece: an expandable view of the page structure at the end of the recording, with an option to copy reconstructed HTML.[1] For sessions involving multiple browser tabs, Cloudflare says the Inspect panel updates based on the tab selected in the recording viewer.[1] That combination changes the debugging posture around browser agents. A video-like recording can show that an agent clicked the wrong button. Console, network, and DOM data can show why the wrong button existed, whether the API returned an unexpected status, whether the page finished rendering, or whether a selector matched a stale layout. In other words, the artifact moves from "watch what happened" toward "inspect the state that caused it." This is especially relevant for teams using browser automation as part of AI workflows. Agents often fail in ways that are frustratingly non-deterministic: timing, auth state, A/B tests, responsive layout, third-party widgets, bot defenses, or a subtly different DOM after hydration. Without logs and request traces, the default diagnosis becomes rerunning the task and hoping the failure repeats. That is not engineering; that is superstition with a reload button. There is also a governance angle. As browser agents move from demos into production workflows, organizations need records of what the agent saw, requested, and changed. HAR export and API retrieval do not solve policy by themselves, but they create a more useful audit trail than screenshots alone. For regulated or security-sensitive workflows, that distinction matters. Cloudflare's getting-started instruction is straightforward: enable recording when launching a browser session, then after the session closes open Browser Run > Runs in the Cloudflare dashboard and select the recording icon next to the session.[1] Cloudflare points developers to the Browser Run session recording documentation for setup instructions and current limits.[1] The bigger story is that the agentic web needs boring infrastructure. Model quality gets the headlines, but reliable browser agents depend on observability, replay, inspection, and exportable evidence. Cloudflare's Inspect panel is one of those pieces: not flashy, but exactly the kind of tool that turns "the agent broke" into a bug report someone can actually fix.