Security
Official updates and useful reading insecurity.
Prioritize Web Assets operations with metric views
The Web Assets > Operations page now includes metric-focused views for traffic, errors, latency, response size, and security. Each view surfaces the relevant metrics and supports server-side sorting, making it easier to prioritize operations in large inventories.
Partitioned cookie support for Bot Management
Cloudflare now adds the Partitioned attribute to the __cf_bm cookie on compatible HTTPS requests. The attribute is added only when the cookie can also be issued with SameSite=None and Secure. When users access your content through an <iframe> on another site, the browser handles __cf_bm as a third-party cookie.
Granular access controls for the top Personal Agents
The Configure AI bot policies setting is now named AI Crawler and Agent access policies. Personal agents act on a person's behalf, fetching information or browsing in response to a request. The updated policies let you set actions for the top Personal Agents individually.
See which AI assistants act for your users in Account Abuse Protection
Account Abuse Protection now shows when a recognized AI assistant makes a login or sign up request, and which account it was acting for. Population overview: See which AI assistants are active across your users and how many accounts use them.