Every published Top AI Stories item tagged with Cloudflare, newest first.
Cloudflare shipped a Disallow AI Training setting that publishes a no-training preference in robots.txt while letting mixed-use crawlers, the single bots that feed both a search index and model training, keep indexing a site. Apple, Google and Microsoft have met or committed to meet its "Accountable" bar, which requires a training opt-out, an opt-out from AI summaries and URL-level visibility into what was made available for training, with Microsoft's robots.txt support targeted for early 2027. Amazon, Anthropic, Meta and OpenAI already run separate training crawlers, so those are simply blocked. As of September 15 the plain Block setting stops Applebot, Bingbot and Googlebot outright, new ad-supported domains default to disallowing training, and a control over how much of a page appears in AI summaries is due early next year. Fewer than 1 percent of Cloudflare sites block search bots, but 17 percent already block training.
Kitesurf drops the parts of a browser a human needs — tabs, themes, extensions, visual chrome — and keeps what an agent needs, running entirely on Cloudflare Workers instead of a Chromium process. It is assembled from Rust pieces: the Blitz rendering engine, Firefox's Stylo CSS parser, Boa for JavaScript and Parley for text. Cloudflare measures 3 to 4 times less CPU and 5 to 7 times less memory than Chromium on screenshot and HTML-extraction jobs, at the cost of being a little under twice as slow in wall-clock time. It is free during beta through Browser Run, and Cloudflare says it plans to open-source the code once it is ready.
Cloudflare OS lets non-developers describe an internal app in plain language and have an agent write and run it, with each workspace isolated and every reach into a company system passing through a permission layer the company calls Gatekeepers. Cloudflare deployed the first version to thousands of its own employees in May before releasing the code on GitHub under the Apache 2.0 license — a genuinely permissive license, though the README says the team is not seeking outside contributions. A hosted version is planned for the Cloudflare dashboard later.
Cloudflare opened a waitlist for its Monetization Gateway, which lets any website, API, or AI tool charge for access using the open x402 protocol: a client requests a gated resource, gets a "payment required" response, pays in stablecoins, then retries. It extends Cloudflare's earlier pay-per-crawl feature from AI scrapers to the whole "agentic web," where autonomous software makes tiny payments with no human in the loop. More than 25 companies have joined the backing coalition.
Anthropic published the first results from Project Glasswing, a partnership with roughly 50 organizations using its unreleased Claude Mythos Preview model to scan critical infrastructure software for vulnerabilities. In a single month, partners found more than 10,000 high- or critical-severity bugs — Cloudflare alone surfaced 2,000, and the UK's AI Security Institute confirmed Mythos as the first model to solve both of its cyber-range simulations end-to-end. Alongside the results, Anthropic launched Claude Security in public beta for Enterprise customers and opened a Cyber Verification Program for legitimate security research. Mythos-class models remain unreleased pending stronger misuse safeguards.
In a Wall Street Journal opinion piece, Cloudflare CEO Matthew Prince argued that AI will not replace builders (engineers, designers, scientists) or sellers (account executives, customer-facing roles) — but will heavily reshape "measuring" jobs in operations, monitoring, and middle management. Prince framed it as how he is personally choosing which roles to automate inside Cloudflare itself, making the piece a rare named-company-with-named-CEO take on the displacement question. The framework adds concrete language to the broader middle-manager-displacement narrative that has trailed every quarter of enterprise AI rollouts in 2026.
Matthew Prince and Michelle Zatlyn told staff Cloudflare is laying off more than 1,100 employees — roughly 20% of headcount — even as Q1 2026 revenue hit a record $639.8 million, up 34% year over year. Prince explicitly framed the cut as structural, not cost-driven, citing internal AI usage up over 600% in three months and per-employee productivity gains of 2 to 100x since November 2025. Affected roles skew toward support and back-office functions; sales staff with revenue quotas were spared.
Cloudflare rolled out an open beta of a Stripe Projects integration that gives AI agents end-to-end self-service onboarding: an agent can create a Cloudflare account, buy a domain, and deploy a Worker without a human clicking through forms. Stripe acts as the orchestrator — it handles KYC, issues a scoped payment token rather than a card, and enforces a default 100 dollars per month spending cap per provider. Humans still grant initial permission and accept terms, but for short-running agentic deployments this is the cleanest "agent buys its own stack" pattern shipped to date.