Cloudflare Web Application Firewall (WAF)

A Cloudflare web-management feature that lets website operators monitor and control access from AI crawlers, including applying rules to allow or block automated collection of site content.

Cloudflare Workers is a serverless functions platform for deploying applications globally. It runs JavaScript, TypeScript, Python, and Rust code in lightweight isolates, scaling from zero to high request volumes without pre-provisioned concurrency. Workers can be tested locally with workerd and deployed across Cloudflare's network, with billing based on CPU execution time rather than idle I/O wait.

Cloudflare OS is an open-source AI productivity environment developed by Cloudflare and built on Cloudflare Workers. It provides an agent chat interface preloaded with company-specific knowledge, sandboxed development of shareable applications called gadgets, and a security framework called Gatekeepers for controlling agents and apps. It is intended to be customized into an organization's own company operating environment rather than adopted unchanged as a traditional computer operating system. Each user receives a private, separately sandboxed instance of a productivity application, such as a slide-deck tool, whiteboard, game, or dashboard. Agents can create and modify these gadgets and perform tasks involving configured company systems and integrations. Gatekeepers are service-specific Workers that expose a Cap'n Web API, handle authorization such as OAuth, restrict access to the intended resource, log gadget and agent actions, and support human approval for side effects. Instead of stopping synchronously for approval, a Gatekeeper can simulate the outcome locally, let the agent continue and queue actions, then allow the user to approve or reject those actions later in bulk or individually. The full stack can be run locally with pnpm, Wrangler, and workerd using `pnpm run-local`, or deployed to a Cloudflare account. The repository describes the project as an early-access release under heavy development; the local setup is intended for evaluation rather than production use.

Cloudflare is an internet infrastructure and security platform that provides hosting and delivery infrastructure for applications, agents, websites, and data. Its network combines compute, connectivity, and security at edge locations, with Workers running code close to users and backend data; the company states that its network operates in more than 335 cities and reaches 95% of the world's Internet-connected population within 50 milliseconds. Cloudflare also provides AI crawler controls that let site owners inspect, allow, or block crawler activity, along with pay-per-crawl and a monetization gateway for pages, data sets, APIs, MCP tool calls, files, and search indexes. The described x402 flow uses an HTTP 402 response to request payment, after which an agent pays, retries with proof, and Cloudflare verifies the payment at the edge.

Warpgate is a self-hosted, transparent bastion and privileged-access-management system for SSH, HTTPS, Kubernetes, MySQL, PostgreSQL, RDP, and VNC. Deployed on a bastion or DMZ host, it assigns users to specific hosts and URLs and forwards connections directly to their targets without requiring client-side software, SSH wrappers, or custom clients. Native clients remain compatible, while browser-based SSH, RDP, and VNC access is also provided. Warpgate records sessions for live viewing and later replay through an administrative web UI, with command-level auditing. It includes TOTP two-factor authentication, OpenID Connect single sign-on, temporary access tickets, brute-force protection with IP blocking and user lockout, and is distributed as a dependency-free single binary written in Rust.