Catch up on everything from Connect 2026.

Watch keynotes and sessions on shipping agentic apps, governing AI traffic, and unifying security.

Browse all sessionsGet notified for 2027

The Agentic Internet: Building and securing what comes next

The Cloudflare Connect 2026 opening session introduces Cloudflare’s vision for the agentic Internet, guiding businesses through the shift from AI adoption to secure, large-scale transformation. Join CEO Matthew Prince along with Chief Strategy Officer Stephanie Cohen, Chief Information Security Officer Grant Bourzikas, product leaders, customers, and partners for major product announcements and a…

Watch The Agentic Internet: Building and securing what comes next

All sessions

New sessions drop on a rolling basis, so check back as new deep dives unlock.

Connect 2027

Connect returns in 2027

Be the first to know when registration opens and the agenda goes live.

By submitting this form, you agree to our Privacy Policy.

cloudflare-connect-2026

---
title: "Cloudflare Connect 2026 on demand"
url: "https://www.cloudflare.com/connect/"
---

# Connect 2026 on demand

Watch on-demand keynotes and breakout sessions. Filter by track and topic, or search by speaker, on the [sessions page](https://www.cloudflare.com/connect/).

## Sessions

### [Building an open agentic Internet: Discoverable, callable, and payable](https://www.cloudflare.com/connect/2026/session/building-an-open-agentic-internet-discoverable-callable-and-payable)

Agent Cloud · 34 min

Agents are a new kind of visitor. They don’t render your CSS or click your ads, but there’s a paying human on the other end of every request — block them and you block your customer. Today, billions of those requests are bots re-fetching pages that haven’t changed, which is machine effort with no outcome for either side. This talk lays out the four primitives of a web reshaped around this visitor — readable, discoverable, callable, and payable — plus the identity layer underneath and why they have to be built on open standards. How agents read, discover, call, and pay will decide whether the Internet stays open or whether a handful of stacks own discovery, identity, and payments and everyone else routes through them.

- Michael Tremante, Cloudflare

### [Turning data questions into data infra with Cloudflare Basin](https://www.cloudflare.com/connect/2026/session/turning-data-questions-into-data-infra-with-cloudflare-basin)

Agent Cloud · 21 min

Business, product, and go-to-market leaders have questions about what is happening in their businesses. This usually involves teams of engineers instrumenting systems, capturing and processing events, building data pipelines, and managing data infra. What if we could go in the other direction — ask the question, and then use agents to generate all of the infrastructure needed to answer it? This is the agentic future we built for with Cloudflare Basin. In this session, learn what Basin is, how it works, and how anyone — from developers to executives — can build their company’s data infra on it.

- Micah Wylde, Cloudflare

### [The Agentic Internet: Building and securing what comes next](https://www.cloudflare.com/connect/2026/session/the-agentic-internet-building-and-securing-what-comes-next)

Keynote · 2 hr 4 min

The Cloudflare Connect 2026 opening session introduces Cloudflare’s vision for the agentic Internet, guiding businesses through the shift from AI adoption to secure, large-scale transformation. Join CEO Matthew Prince along with Chief Strategy Officer Stephanie Cohen, Chief Information Security Officer Grant Bourzikas, product leaders, customers, and partners for major product announcements and a look at how organizations are building and securing AI at the speed of innovation.

Enforce rigorous data sovereignty controls without making compromises on resilience, management efficiency, or threat visibility. Cloudflare's Data Residency Architecture provides a stronger path forward — apply for the private beta here: http://cloudflare.com/resource/dra-beta.

- Matthew Prince, Cloudflare
- Raj Subramaniyan, Oracle
- Aparna Subramanian, Shopify
- Stephanie Cohen, Cloudflare
- Jorn Lambert, Mastercard
- Grant Bourzikas, Cloudflare
- Kevin Harwood, Tecovas
- Dr. Alexandra Heidel, Telekom Deutschland GmbH
- Fabian Hedin, Lovable
- Evan You, Cloudflare
- Samuel Rhea, Cloudflare
- Steve Tannock, TELUS
- Rita Kozlov, Cloudflare
- Matthew Conroy, Cloudflare
- Wesley Evans, Cloudflare

### [Generative media’s breakthrough moment: Insights from Runway](https://www.cloudflare.com/connect/2026/session/generative-medias-breakthrough-moment-insights-from-runway)

Agent Cloud · 20 min

Video models have crossed a threshold. What was a novelty one year ago is now reliable enough to sit inside real production workflows — a shift that looks a lot like the moment code generation went from autocomplete to a Claude Code session. In this talk, Runway Chief Product Officer Anthony Maggio traces how video and world models evolved to this point, why generative media is having its own step-change moment, and what that has meant for building the Runway Agent and Runway Dev. Leave with a clearer picture of where generative media is heading and what it takes to turn a fast-moving model capability into a product people actually use.

- Anthony Maggio, Runway
- Mark Dembo, Cloudflare

### [Ferrisway: Ramp’s global routing layer on Cloudflare](https://www.cloudflare.com/connect/2026/session/ferrisway-ramps-global-routing-layer-on-cloudflare)

Agent Cloud · 48 min

Ferrisway is a Cloudflare Worker that serves as Ramp’s global routing layer, handling 100% of production traffic since January — including API requests, authorizations, webhooks, and AI-driven operations such as agent workflows and MCP tool traffic. It routes about half a billion requests each day, averages more than 5,000 requests per second, and processes roughly 10 TB of traffic daily. In this session, learn how Ferrisway makes fast edge routing decisions from cached configuration, while Gother — its cloud-deployed counterpart — provides a reliable source of truth on cache misses. See how Tail Worker–powered tracing maps Cloudflare execution to Gother spans for end-to-end visibility, how zero-traffic and forced-traffic testing make Worker rollouts safe, and how indirect mappings and explicit unresolved-destination behavior create a consistent, resilient routing layer at global scale.

- Raphaël Beamonte, Ramp

### [The prompt is lava](https://www.cloudflare.com/connect/2026/session/the-prompt-is-lava)

Agent Cloud · 21 min

Sentry, by its nature, needs to ingest untrusted telemetry on behalf of our customers. With the growing number of customers using MCP, and local agents to debug Sentry issues, the prompt injection through telemetry is a real vector of attack. Hear about this specific problem and economical ways to control the issue.

- Greg Pstrucha, Sentry

### [Building durable agents with Durable Objects](https://www.cloudflare.com/connect/2026/session/building-durable-agents-with-durable-objects)

Agent Cloud · 43 min

Durable Objects are the missing primitive for agents: stateful, addressable, isolated services that can live as long as the work requires. In this session, learn how we built an agent cloud entirely on Cloudflare using Durable Objects to model long-lived agents; Cloudflare Workers to compose them; and Cloudflare’s platform for storage, queues, models, artifacts, and sandboxed code execution. Leave this session with a reference architecture for agents that remember, recover, coordinate, and reliably get work done.

- Justin Schroeder, Standard Agents

### [Break the ceiling of internal productivity with a fast, global filesystem](https://www.cloudflare.com/connect/2026/session/break-the-ceiling-of-internal-productivity-with-a-fast-global-filesystem)

Agent Cloud · 23 min

One of the strongest competitive advantages in this generation of company building is the productivity of your team, in an era where the fastest and leanest teams can outship and outcompete their much larger competitors. This is extremely amplified by AI agents, which can genuinely make teams 10 times more productive. In this session, Jacky Koh, co-founder of Relevance AI, a leading agent-building platform serving agents in production to companies like Databricks, Canva, and Lightspeed, shares the journey of building a new product with the mission of creating a filesystem that maximizes internal productivity. In three months, a team of five working with Cloudflare shipped a full agentic platform across web, desktop, and mobile that has already helped customers replace numerous existing subscriptions and build hyperpersonalized internal tools. Be prepared for a journey and deep dive of technical choices and fun demos.

- Jacky Koh, Relevance AI

### [12 mistakes we made building an agent platform for 100,000 employees](https://www.cloudflare.com/connect/2026/session/12-mistakes-we-made-building-an-agent-platform-for-100-000-employees)

Agent Cloud · 35 min

We set out to let any TELUS employee ship a working app as easily as they’d send a link: upload a zip, get a live subdomain, done. But when we tried to make that safe, cheap, and durable for a six-figure user base, we got a dozen things wrong. Join this session for a post-mortem exploration of the decisions we made and what we would do differently. Learn from our mistakes in architecture, security, and trusting an agent — or ourselves — more than we should have. With each mistake, we’ll share the symptoms we saw in production, the fixes that actually worked, and the cheaper signals we ignored beforehand. If you’re building developer infrastructure, an agent runtime, or anything multi-tenant where the tenants are your coworkers, you’ll leave with a checklist of failure modes that you can skip paying for yourself.

- Kevin Ng, TELUS
- Justin Watts, TELUS
- Andrew Culberson, TELUS

### [Why modern software engineering needs Durable Objects](https://www.cloudflare.com/connect/2026/session/why-modern-software-engineering-needs-durable-objects)

Agent Cloud · 28 min

As software shifts toward autonomous, long-running agentic systems, traditional stateless serverless architectures are reaching their limits. Modern engineering requires a new default: a persistent, low-latency, colocated state. Join Ashley Peacock, Senior Engineer on the Durable Objects team at Cloudflare, for a practical look at building production-grade, resilient agents on stateful edge infrastructure. Learn how to architect impenetrable systems by taking advantage of recent platform-level enhancements, including built-in platform-driven retries and failure recovery, graceful code deployments that protect long-lived running states, and recent updates to Durable Object lifecycle management. Plus, get an inside look at what’s coming next as we continue to evolve and expand the Durable Objects platform.

- Ashley Peacock, Cloudflare

### [It’s time to build, not buy](https://www.cloudflare.com/connect/2026/session/its-time-to-build-not-buy)

Agent Cloud · 22 min

[Slides (PDF)](https://www.cloudflare.com/connect/2026/session/its-time-to-build-not-buy/slides.pdf)

“Don’t reinvent the wheel” has always been one of the golden tenants of software engineering — but what happens when the wheel becomes really cheap to reinvent? In the past, buying off-the-shelf software almost always made more sense than building something from scratch, but over the last 12 months, the economics have shifted dramatically, and now all it takes is an engineer getting a little too frustrated with janky SaaS software to build a custom replacement in an afternoon. In this talk, we walk through how we’ve been navigating the build-vs.-buy debate at Cloudflare and how it’s changed a lot of our procurement decisions. We use our custom AI code reviewer as a case study of how we built something from the ground up instead of buying something off the shelf, and we discuss the challenges and hurdles we ran into along the way.

- Ryan Skidmore, Cloudflare

### [Artifacts: Git-compatible versioned storage, from zero to beta in 3 weeks](https://www.cloudflare.com/connect/2026/session/artifacts-git-compatible-versioned-storage-from-zero-to-beta-in-3-weeks)

Agent Cloud · 22 min

Software engineering has fundamentally changed. In three weeks, our team built and shipped the private beta of Artifacts, Cloudflare’s Git-compatible versioned storage for agents — and AI wrote all the code. But AI alone did not make that possible. Engineers owned the architecture, context, constraints, and verification, while Cloudflare Workers and Durable Objects provided proven foundations for scale and trust. In this session, hear the story of building Artifacts from zero to beta, what agentic engineering changed about our roles, and why combining capable agents with Cloudflare’s Developer Platform helps small teams ship ambitious production systems faster than ever.

- Dillon Mulroy, Cloudflare

### [Built differently, secured similarly?](https://www.cloudflare.com/connect/2026/session/built-differently-secured-similarly)

Security & Compliance · 34 min

Just Eat Takeaway.com, Crypto.com, and Moody’s bring perspectives shaped by different industries, threat environments, and regions. Their customers, regulatory obligations, pace of change, and tolerance for disruption differ significantly. Yet their security teams face many of the same decisions on how to keep the business moving through this dynamic landscape. This panel explores where their approaches converge, where they diverge, and what each industry can learn from the other.

- Jason Lau, Crypto.com
- Ritesh Patel, Just Eat Takeaway.com
- Brandon Smith, Moody's
- Christian Reilly, Cloudflare

### [Inside United Airlines: How a global airline is rethinking cyber defense](https://www.cloudflare.com/connect/2026/session/inside-united-airlines-how-a-global-airline-is-rethinking-cyber-defense)

Security & Compliance · 20 min

Few companies run operations as complexly or as closely watched as United Airlines. Sean Mason, Head of Cyber Defense for United, joins Rohit Chenna Reddy, Security Strategy Lead at Cloudflare, for a candid fireside chat on how his team is rethinking cyber defense at one of the world’s largest airlines. Sean unpacks the complexity of securing an airline, shares how his team is changing its approach, and explores how AI and other emerging technologies are reshaping how defenders find and respond to threats.

- Rohit Chenna Reddy, Cloudflare
- Sean Mason, United Airlines

### [Building P1 on Cloudflare: AI-native web composition and governance](https://www.cloudflare.com/connect/2026/session/building-p1-on-cloudflare-ai-native-web-composition-and-governance)

Web Performance & Frameworks · 20 min

In 2025, Pantheon partnered with Cloudflare to power its global edge. Using Cloudflare primitives on the Cloudflare Development Platform, Pantheon scaled a great idea into an entirely new enterprise-grade product, P1, that is transforming how organizations build and run websites — in only seven months. In this session, Chris Yates, Pantheon’s SVP of Product, Design, and Engineering, shares the architecture behind P1. Learn how Pantheon combined Cloudflare Workers, Cloudflare Durable Objects, Cloudflare Workflows, Cloudflare Workers AI, Cloudflare AI Gateway, Cloudflare R2, and Cloudflare D1 to create an AI harness for human and agent workflows. Discover how to compose edge primitives, route models, and scale velocity without multiplying risk.

- Chris Yates, Pantheon

### [Co-engineering the future: How Uber & Cloudflare engineer a global platform](https://www.cloudflare.com/connect/2026/session/co-engineering-the-future-how-uber-and-cloudflare-engineer-a-global-platform)

Web Performance & Frameworks · 31 min

Uber is reimagining the way the world moves for the better. With over 1 billion monthly active platform consumers and more than 10 million drivers and couriers globally, Uber relies on trusted partners like Cloudflare to deliver solutions today and co-engineer the future. In this fireside chat for platform architects and engineering leaders, Cloudflare VP of Product Steve Goldsmith and Uber VP of Engineering Mattie Toia pull back the curtain on their joint engineering efforts, with detailed technical explanations and anecdotes from real-world delivery experience at Uber and Mattie’s previous experiences with Cloudflare. Leave with concrete insights on balancing security, scale, and high-performance global platform tuning.

- Steve Goldsmith, Cloudflare
- Mattie Toia, Uber

### [TanStack Start, and the rest of the TanStack ecosystem](https://www.cloudflare.com/connect/2026/session/tanstack-start-and-the-rest-of-the-tanstack-ecosystem)

Web Performance & Frameworks · 20 min

TanStack Start is a full-stack framework for React and friends, sitting on top of the rest of TanStack: Query, Router, Table, Form, DB, and more. This session is a tour of Start and the ecosystem around it: how the pieces fit, what it feels like to build with them, and where the stack is headed.

- Tanner Linsley, TanStack

### [SocialKit: AI social toolset built on Cloudflare](https://www.cloudflare.com/connect/2026/session/socialkit-ai-social-toolset-built-on-cloudflare)

Agent Cloud · 12 min

Agents are easy to demo and hard to run. SocialKit runs for real: a full AI agent that writes, designs, and schedules social posts, generating words, images, and full videos entirely on Cloudflare, with no servers and no GPUs. This session shows developers and architects the architecture that makes it work: durable agent state in Cloudflare D1, coordination in Durable Objects, media rendered with Workers, Containers, and Queues, and every model call through AI Gateway, all scaling from zero to bursts automatically. We’ll follow one post from prompt to published and show what held up under load. You’ll leave the session with a reference architecture, the agentic patterns, and a playbook to ship your own.

- Matan Lachmish, monday.com

### [People, devices, and agents: How Rippling’s edge architecture evolved](https://www.cloudflare.com/connect/2026/session/people-devices-and-agents-how-ripplings-edge-architecture-evolved)

Agent Cloud · 19 min

Rippling’s use of Cloudflare Workers began as a simple multi-region routing layer for people. It evolved into a stateful platform for device management, using Durable Objects and hibernated WebSockets to push commands reliably. Today, Workers powers Rippling’s AI infrastructure, including MCP gateway, third-party MCP governance, and AI policy and budget controls. This talk traces Rippling’s journey from routing people to managing devices and governing agents at the edge.

- Ram Nadella, Rippling

### [MCP made it easy, and that’s the problem](https://www.cloudflare.com/connect/2026/session/mcp-made-it-easy-and-thats-the-problem)

Agent Cloud · 16 min

Standing up an MCP server used to be a project, which meant someone had to decide what agents should actually be allowed to do. Cloudflare’s one-click WebMCP support makes it a toggle, and that decision is now unguarded. This session is a field report from the other side of that toggle: our own MCP server, over our own content, exposed through the WebMCP preview. What belongs behind /mcp depends on what an agent takes from you, and retailers, publishers, and services organizations get three very different answers. Learn how to address tool responses that strip away every cue a person uses to judge a page, and develop a strategy for content nobody has audited that comes back fast, clean, and confidently wrong.

- Julie Brettle, Squiz

### [Giving an agent 10,000 tools with Code Mode](https://www.cloudflare.com/connect/2026/session/giving-an-agent-10-000-tools-with-code-mode)

Agent Cloud · 15 min

How do you give an AI agent access to 10,000 tools without filling its context window? Let it write code. This session explores using Code Mode through Executor to discover tools on demand, combine API calls, and process results in a sandbox. Through a live demo built on Cloudflare, learn the architecture, tradeoffs, and approval controls behind this approach. You’ll leave with practical patterns for connecting agents to large tool catalogs while keeping execution efficient and permissions explicit.

- Rhys Sullivan, Executor

### [Building modern state and local government security without starting over](https://www.cloudflare.com/connect/2026/session/building-modern-state-and-local-government-security-without-starting-over)

Industries Showcase · 41 min

The federal government has made zero trust a mandate. The adversaries have made it a necessity. But for state and local governments operating with legacy infrastructure, multi-year procurement cycles, and security teams stretched across dozens of agencies, getting from policy to implementation is the hard part that no framework addresses directly. This panel brings together three of the most operationally experienced public sector security and technology leaders in the country for a practitioner's conversation about what zero trust actually looks like when you have to build it without a federal budget or a CISO team of fifty. Maryland's Secretary of IT, Oklahoma's CISO, and Suffolk County's CTO share direct experience deploying zero trust network access, governing AI tool use across agency workforces, and securing cloud-native infrastructure in environments where the last major system upgrade was a decade ago.

- John McCaffrey, Suffolk County, New York
- Doga Ozturk, NYC Dept of Buildings
- Matthew Forsberg, California Department of Technology
- David Mihalchick, Cloudflare
- Vincent Voci, Cloudflare

### [How Figma runs AI-generated code on Cloudflare](https://www.cloudflare.com/connect/2026/session/how-figma-runs-ai-generated-code-on-cloudflare)

Agent Cloud · 19 min

AI-generated code needs a place to run. This session follows a request through Nimbus, Figma’s sandbox platform, showing how Cloudflare Workers, Cloudflare Durable Objects, and Cloudflare Containers connect an AI coding workflow to a live browser preview. Developers will see a working demo and learn three practical patterns: allocating isolated compute, routing interactive preview traffic, and using warm sandboxes to reduce startup waits.

- Pratik Agarwal, Figma

### [After human: How to think about fraud & abuse when anyone could be anything](https://www.cloudflare.com/connect/2026/session/after-human-how-to-think-about-fraud-and-abuse-when-anyone-could-be-anything)

Secure AI · 29 min

[Slides (PDF)](https://www.cloudflare.com/connect/2026/session/after-human-how-to-think-about-fraud-and-abuse-when-anyone-could-be-anything/slides.pdf)

Automated traffic has surpassed human traffic on the Internet. The line between human and machine is no longer a reliable signal by itself. This session offers a framework and practical techniques for addressing fraud and abuse when identity, intent, and automation can no longer be taken at face value.

- Tiago Sada, Tools for Humanity, building for World
- Bryan Becker, Cloudflare

### [Rethinking insider risk for a workforce of people and agents](https://www.cloudflare.com/connect/2026/session/rethinking-insider-risk-for-a-workforce-of-people-and-agents)

Security & Compliance · 43 min

Insider risk is one of the hardest problems in security: hard to detect, harder to investigate, and easy to underestimate until it’s too late. This session covers how Cloudflare designed our insider risk program, including the team, the controls we built on top of our own products, and the workflows that connect security with legal, people, and IT. Learn how company-wide AI adoption impacted our insider risk capabilities — which signals weakened, which new categories of risk emerged, and where our detections fell short. Hear how we’ve evolved the program in response and what we think other security teams should be thinking about now.

- Christopher O'Rourke, Cloudflare
- Craig Strubhart, Cloudflare
- Ryan LaSalle, Nisos
- Sourov Zaman, Cloudflare

### [We built Signal to not know things. Agents want to know everything.](https://www.cloudflare.com/connect/2026/session/we-built-signal-to-not-know-things-agents-want-to-know-everything)

Security & Compliance · 16 min

The agentic Internet runs on data access — every tool call, trace, and log an agent touches becomes a new surface for leakage and surveillance. Signal took the opposite bet: sealed sender, minimal logs, no contact graphs. Data we never collect can’t leak, be subpoenaed, or stolen. This talk, designed for security leaders and practitioners, maps those lessons onto autonomous systems: where agent metadata concentrates, why tool-call histories are the new metadata goldmine, and three design principles for building useful agents under data minimization. You’ll leave with a checklist for shrinking what your agents can see — and a harder question about what “secure” means when the software acts on its own.

- Ehren Kret, Signal

### [Deploying a WAF vs. running a WAF program: The missing manual](https://www.cloudflare.com/connect/2026/session/deploying-a-waf-vs-running-a-waf-program-the-missing-manual)

Security & Compliance · 21 min

You have a WAF. But can you say whether it’s covering every public-facing asset, actively blocking versus just watching, or quietly bypassed since the last review? Most security teams can’t. In this session, IONIX CTO, Billy Hoffman, and Presidio's VP of Cybersecurity, Justin Tibbs, share IONIX’s WAF Program Maturity Model — a framework that scores WAF programs across ten dimensions, from asset visibility to program ownership, against three maturity stages. Each stage lays out exactly what to fix next: know what should be protected, prove it is, and then make policy compliance the default and mitigation a matter of hours. IONIX and Presidio unpack the challenges that shape early programs and the practical steps that move teams to continuous, provable coverage. Walk away with a self-assessment framework and a next-step roadmap for any WAF you’ve deployed. This session is sponsored by IONIX.

- Billy Hoffman, IONIX
- Justin Tibbs, Presidio

### [Ready for shopping season: Verifying and authorizing buying agents](https://www.cloudflare.com/connect/2026/session/ready-for-shopping-season-verifying-and-authorizing-buying-agents)

Security & Compliance · 18 min

2026 is the year of the agent. At Experian, we think it ends as the year of the shopping agent. Bot managers block non-browser traffic by default, so agents carrying real revenue get blocked with the bad bots. Admitting the good ones requires answering four questions. Cloudflare’s Web Bot Auth answers one: did this key send this request unmodified? Experian Agent Trust answers the other three: is a verified human bound to the agent, is there approval of the exact cart, and is there no sign of hijacking? In this session, we build all four at the Cloudflare edge on Workers and Durable Objects and then stress-test them live: unknown agent, replay, repriced cart, and weak human binding. Nothing is charged. Leave with the reference architecture and a clear understanding of what each layer catches.

- Tim Simeonov, Experian

### [Scaling Discord’s voice on Cloudflare’s edge](https://www.cloudflare.com/connect/2026/session/scaling-discords-voice-on-cloudflares-edge)

Web Performance & Frameworks · 32 min

Moving Discord’s voice and video onto Cloudflare took the migration well beyond a typical rollout. This session takes you through that migration. Hear how we were able to hold the reliability bar by partnering directly with Cloudflare’s engineering teams and working down to the kernel level to understand behavior neither team had mapped before. That collaboration led to fixes on both sides of the stack and changes from Cloudflare that carry forward to other customers running similar workloads. Today, Cloudflare carries more than half of Discord’s voice and video traffic, with quality improving in roughly 70% of migrated regions, pings down more than 30%, and packet loss down 20–60% in multiple regions.

- Jonas Bengtson, Discord

### [Cloudflare Workers monorepo](https://www.cloudflare.com/connect/2026/session/cloudflare-workers-monorepo)

Network & Infrastructure · 20 min

Most teams run a handful of Cloudflare Workers and deploy them with wrangler deploy. At Block, we manage 216+ Cloudflare Workers across multiple accounts and business units all from a single monorepo. This talk walks through the architecture, tooling, and organizational patterns that let a small platform team provide a consistent, self-service management experience for every Worker in the fleet, regardless of which team owns it.

- Laura Poss, Block, Inc.

### [Zero trust in railway OT: What worked, what broke](https://www.cloudflare.com/connect/2026/session/zero-trust-in-railway-ot-what-worked-what-broke)

Network & Infrastructure · 21 min

OT was never built for identity-based access. It ran on implicit trust: physical access was authorization, the wire was the perimeter, IEC 60870-5-104 and Modbus authenticated nothing, and an air gap covered the rest. Add 25-year lifecycles and uptime-over-confidentiality approaches — thinking that IT dropped a decade ago — still running railways. At Estonian Railways, signaling, SCADA, and traffic management need vendor access and patching; and NIS2, IEC 62443, and CLC/TS 50701 expect zones, conduits and auditable access, not a flat VPN. This talk shows what we built on Cloudflare Zero Trust: Cloudflare Tunnel into OT zones, Cloudflare Access policies mapped to IEC 62443 zones/conduits, WARP for engineers, and Cloudflare Gateway logs as audit evidence. Then we cover where zero trust breaks: legacy protocols, latency budgets, safety-certified systems you can’t touch, vendor-mandated jump hosts, and more.

- Tõnu Tammer, Estonian Railways

### [100 billion profiles, one early bet on Cloudflare Durable Objects](https://www.cloudflare.com/connect/2026/session/100-billion-profiles-one-early-bet-on-cloudflare-durable-objects)

Web Performance & Frameworks · 17 min

In this fireside chat, Mark Dembo, Head of Solutions for Cloudflare's developer platform, sparks a conversation with Alexander Braunreuther, Chief Architect at Contentful, about being a first mover and why it was worth it. Alex talks through the early Cloudflare Durable Objects bet: the speed and scale it unlocked, the missing features his team built themselves, and the collaboration with Cloudflare that closed the gaps.

- Alexander Braunreuther, Contentful
- Mark Dembo, Cloudflare

### [Into the tunnel: Secure, metadata-driven routing at scale](https://www.cloudflare.com/connect/2026/session/into-the-tunnel-secure-metadata-driven-routing-at-scale)

Web Performance & Frameworks · 18 min

Cloudflare Tunnels aren’t just for secure access. We use them to load-balance traffic into our AWS-powered network, at scale, across every hostname in our zone. No open ports. Just secure, distributed traffic flowing exactly where it needs to go. We pushed Tunnels and Cloudflare for SaaS past their expected limits, combining them with metadata in ways that got creative fast. In this session, see how we built smarter, more flexible routing out of that combination. Learn about the real problems we hit, the workarounds we tried, and the approach that finally stuck. You’ll leave with practical patterns you can apply to your own multi-tenant or SaaS routing setup, no matter how messy your infrastructure already is.

- Joe Dixon, Laravel

### [Durable AI workflows with Effect: Maintaining open source at scale](https://www.cloudflare.com/connect/2026/session/durable-ai-workflows-with-effect-maintaining-open-source-at-scale)

Web Performance & Frameworks · 20 min

Every project produces signals that help guide its evolution. Products learn from telemetry, usage, and customer behavior, while open source projects like Effect learn from issues, pull requests, discussions, and contributor feedback. The rise of AI-assisted development dramatically increased the volume of these signals, eventually outpacing our ability to review, interpret, and act on them. To address this problem, we built “The Janitor,” an AI maintainer that reviews incoming issues and pull requests, gathers missing context, organizes related work, and surfaces what needs human attention. We show how running durable workflows with Effect on Cloudflare’s Developer Platform helps us separate signal from noise so maintainers can spend time where it matters most.

- Maxwell Brown, Effectful Technologies, Inc

### [No Priors: A live conversation with Dane Knecht, CTO of Cloudflare](https://www.cloudflare.com/connect/2026/session/no-priors-a-live-conversation-with-dane-knecht-cto-of-cloudflare)

Agent Cloud · 41 min

What does it look like when the world’s most critical internet infrastructure starts running AI at the edge? No Priors host Sarah Guo sits down Dane Knecht, CTO of Cloudflare, whose network processes over a trillion requests a day, giving him a vantage point on the Internet that almost no one else has. Dane argues that the future of AI isn’t just about massive data centers. It’s about bringing intelligence closer to users and giving developers the tools to build and scale the next generation of applications. He shares why the companies that win the AI era will be the ones that make it easiest for developers to ship, iterate, and grow without getting slowed down by infrastructure. If you’ve ever wondered what the internet looks like from the inside, this episode is a rare look at the layer that could define how AI gets built.

- Sarah Guo, Conviction Partners LLC
- Dane Knecht, Cloudflare

### [State under siege: How Estonia stopped Russia’s DDoS campaigns](https://www.cloudflare.com/connect/2026/session/state-under-siege-how-estonia-stopped-russias-ddos-campaigns)

Security & Compliance · 26 min

Estonia knows what nation-state DDoS looks like. As Russia’s aggression has intensified, Estonian government websites, media, and critical public services have faced sustained, politically timed volumetric attacks designed to paralyze Estonian society. In the first half of 2026, Cloudflare observed a surge in attacks exceeding 1 Tbps, with DNS floods emerging as the dominant vector and geopolitical flashpoints driving campaign timing. In this panel discussion, Estonia’s Information System Authority shares how it built a proactive national cyber defense posture with Cloudflare’s global network and threat intelligence and what defenders everywhere can learn from a country that has been on the front line a long time.

- Brian Carter, Cloudflare
- Jaagup Toome, CERT-EE
- Jacob Crisp, Cloudflare
- Jürgen Tamm, CERT-EE

### [How we built Command Code, the most used open-model harness, at 950T tokens](https://www.cloudflare.com/connect/2026/session/how-we-built-command-code-the-most-used-open-model-harness-at-950t-tokens)

Agent Cloud · 21 min

How did Command Code make DeepSeek outperform Claude Opus with tool repair harness engineering research? Now at 950 trillion–token scale and over 100K developers, Command Code is fixing billions of tokens for open models. A couple of months ago, developers did not trust open models. Bounced tool calls, wasted context, and poor cache hit ratios made capable models look broken. We purpose-built a coding agent harness for open models: a repair layer that fixes malformed tool calls, a taste model that learns your coding preferences, and per-provider cache pinning that holds a 99.43% cache hit rate at trillions of tokens per day. In this talk, learn how you can cut your AI costs by 10 to 20 times while also increasing the amount of work done using an abundance of tokens with top open models.

- Ahmad Awais, Command Code

### [I built your personal software ecosystem](https://www.cloudflare.com/connect/2026/session/i-built-your-personal-software-ecosystem)

Agent Cloud · 25 min

What if you had your own npm registry, your own GitHub, your own cron, your own email address, and your own database? And what if your favorite AI assistant could build with all of it on your behalf? That’s Kody. Every user gets a fully isolated software ecosystem. Your AI writes packages into your own Git repos, publishes to your personal registry, schedules jobs, runs services and workflows, and gets email at your own address. In this session, learn how software engineer and educator Kent C. Dodds built Kody entirely on Cloudflare, the only place it could be built. Dig in to sandboxing AI-authored code with Worker Loaders, per-user Git hosting with Artifacts, namespaced Durable Objects, and wiring D1, R2, Vectorize, Queues, Workflows, and Email Routing into a multi-tenant platform. When AI builds software for everyone, this is what’s underneath. You can start today.

- Kent C. Dodds, kody.codes

### [The MonkCast from RedMonk: Connect recap](https://www.cloudflare.com/connect/2026/session/the-monkcast-from-redmonk-connect-recap)

Agent Cloud · 14 min

Join RedMonk, the developer-focused industry analyst firm, for a wrap-up discussion capturing the major themes, product announcements, and key takeaways from Cloudflare Connect 2026. Analysts James Governor and Kate Holterhoff sit down for a live recording of The MonkCast, RedMonk’s podcast capturing the candid, off-script “hallway track” of the tech industry. Together, they unpack the biggest news from across the event — synthesizing how developer platforms, edge computing, and AI capabilities are evolving, and what these shifts mean for practitioners in the field. Geared toward platform engineers, DevRel leaders, infrastructure architects, and technical decision-makers, this conversation offers independent analyst perspective and practical analysis on where the developer ecosystem is heading next.

- James Governor, RedMonk
- Kate Holterhoff, RedMonk

### [From YOLO mode to zero trust: Building an agentic engineering control plane](https://www.cloudflare.com/connect/2026/session/from-yolo-mode-to-zero-trust-building-an-agentic-engineering-control-plane)

Agent Cloud · 46 min

Autonomous agents now rapidly write code, patch servers, and operate infrastructure. They can exfiltrate IP or take down production just as fast. The velocity is real; so is the scope of impact. Drawing on Swiss Post’s zero trust program and codeflare.ch, we build the control plane live on one whiteboard. No slides here. We explore Cloudflare AI Gateway for semantic DLP and cost caps, identity lineage tying every agent action to a real engineer, MCP portals cutting tool footprints by up to 99%, and ephemeral sandboxes detonated after every run. The cherry on top is an inference mesh turning idle hardware into a private LLM fabric. No prompt leaves your network, and cost collapses. Leave with a blueprint to deploy tomorrow.

- Nikola Novoselec, Swiss Post

### [Financial services panel: Resilience, security, and AI](https://www.cloudflare.com/connect/2026/session/financial-services-panel-resilience-security-and-ai)

Industries Showcase · 43 min

Join fellow finance leaders and innovators at our exclusive industry meetup. Connect with peers, share insights, and hear how Cloudflare is helping financial institutions secure applications, harness AI, and optimize performance. Don't miss this opportunity to learn, network, and shape the future of digital finance together.

- Kathleen Peters, Experian
- Jordan Hager, Q2 Software
- Ajit Gaddam, HealthEquity
- Sean Dougherty, Cloudflare

### [Don't block shadow AI on campus. Out-design it.](https://www.cloudflare.com/connect/2026/session/dont-block-shadow-ai-on-campus-out-design-it)

Secure AI · 17 min

[Slides (PDF)](https://www.cloudflare.com/connect/2026/session/dont-block-shadow-ai-on-campus-out-design-it/slides.pdf)

Conventional shadow AI controls do not survive contact with university governance, and FERPA exposure grows daily. There is a different answer: stop treating the campus network as an enforcement point and start treating it as a strategic platform. When on-campus AI unlocks institutional context (degree audits, LMS, scheduling, and ERPs) that off-campus AI cannot reach, students and faculty seek the network out. Governance follows naturally. In this session for higher education CIOs and IT leaders, a Cloudflare SE and a higher education technology leader share a deployable reference architecture, discuss the framing to socialize it internally, and provide a live demo.

- Michael Hacker, Montclair State University
- Michael Kowal, Cloudflare

### [Disrupting scam and fraud networks with armies of AI agents on Cloudflare](https://www.cloudflare.com/connect/2026/session/disrupting-scam-and-fraud-networks-with-armies-of-ai-agents-on-cloudflare)

Secure AI · 18 min

Scams and fraud are run as businesses, and often their defenders can only react once the money has moved. Apate gets there first. In this session, hear how Apate uses thousands of AI agents to engage scammers across chat, WhatsApp, Telegram, email, and voice, participating in hundreds of thousands of messages and calls per day. See how agents can reach victims mid-scam, before the payment leaves.

- Peter Eckermann, Apate.ai

### [Your agent wrote it. Who’s on call?](https://www.cloudflare.com/connect/2026/session/your-agent-wrote-it-whos-on-call)

Network & Infrastructure · 21 min

Cloudflare shipped an OAuth library for Cloudflare Workers largely written by AI, publishing prompts alongside code for the industry to review commit by commit. This provided an early, honest look at what agent-authored production code takes to get right: a lot of review. As generation stops being the bottleneck, the constraint moves downstream — to review, CI, and production, where failures land on on-call engineers who didn’t write the code. This panel examines the data: Factory brings throughput numbers from agentic coding teams; Sentry brings failure profiles — error classes, revert rates, triage time. Is generated code’s distinct failure pattern a generation problem or a review problem?

- Dane Knecht, Cloudflare
- Madison Faulkner, Factory
- Aaron Jacobson, NEA
- Chris De Vylder, Sentry

### [Modern customer security engineering](https://www.cloudflare.com/connect/2026/session/modern-customer-security-engineering)

Secure AI · 20 min

This session details how we rebuilt a security-focused production data processing platform on the Cloudflare Developer Platform. Learn about designing an AI-native architecture using the developer platform and building and operating AI-driven processing pipelines in production. Discover how we leveled up our workflows with Cloudflare AI Gateway, and explore coordinating distributed workflows and long-running processes. Additional topics include observability, reliability, and operational lessons learned; what became significantly simpler and what remained challenging; and what we would approach differently if starting again today.

- Cristian Cortez, eBay
- Patrick Walker, eBay

### [Canary to cloud: Building a flexible traffic strategy](https://www.cloudflare.com/connect/2026/session/canary-to-cloud-building-a-flexible-traffic-strategy)

Network & Infrastructure · 27 min

Moving from an on-premises stack to cloud environments changes more than where applications run; it changes how traffic must be controlled throughout the transition. In this session, Uber and Cloudflare share how they are modernizing load balancing to route traffic safely between on-premises and cloud environments. Learn how Cloudflare’s flexible traffic controls and custom rules help Uber direct selected traffic to canary environments, validate changes, and expand deployments gradually. We also explore how Uber can rapidly shift traffic between environments as conditions change, reducing operational risk while allowing services to migrate on their own timelines.

- Oscar Moreno Garza, Uber
- Noah Crouch, Cloudflare

### [Oracle and Cloudflare: Building a stronger foundation for enterprise innovation](https://www.cloudflare.com/connect/2026/session/oracle-and-cloudflare-building-a-stronger-foundation-for-enterprise-innovation)

Security & Compliance · 11 min

What becomes possible when two enterprise technology leaders combine their strengths? In this session, executives from Cloudflare and Oracle explore their partnership and its potential to help organizations around the world simplify, secure, and accelerate their digital operations. The conversation looks at the complementary capabilities of both companies, the customer needs driving the collaboration, and how the partnership can give businesses a stronger foundation for their applications, data, and future innovation. This session is sponsored by Oracle.

- David Bredbenner, Cloudflare
- Todd Tornga, Oracle

### [From the endpoint to the edge: Simplifying security in the AI era](https://www.cloudflare.com/connect/2026/session/from-the-endpoint-to-the-edge-simplifying-security-in-the-ai-era)

Security & Compliance · 19 min

Environmental complexity is growing. At the same time, attacks are getting faster, more complex, and coming from more directions then ever. Learn how SentinelOne and Cloudflare have partnered to deliver integrations and solutions to help bring enterprise-class automation, network security, and endpoint intelligence and response to any organization. See how Cloudflare’s SASE and zero trust services combine with SentinelOne’s Autonomous Security Intelligence platform to address real scenarios and attacks organizations are facing today. This demo session is sponsored by SentinelOne.

- Tyler Greenfield, SentinelOne

### [Transforming the enterprise WAN](https://www.cloudflare.com/connect/2026/session/transforming-the-enterprise-wan)

Network & Infrastructure · 21 min

Discover how users leverage Cloudflare WAN with BGP to consolidate and simplify private wide-area networks. This session reveals how Cloudflare WAN solved the routing limitations and operational complexity that traditional solutions couldn’t address.

- Naresh Chhetri, Accenture
- Steve Welham, Cloudflare

### [How to measure real-world network quality for end users](https://www.cloudflare.com/connect/2026/session/how-to-measure-real-world-network-quality-for-end-users)

Network & Infrastructure · 26 min

Speed tests are a common tool for diagnosing poor connections and comparing Internet service providers. But traditional tests often measure performance under ideal conditions, not the real-world experience users actually have. Cloudflare helps customers measure end-user connections in the wild, where network quality really matters. In this session, hear our approach to measuring network quality and learn from the industry leaders at Orb, who are redefining what it means to understand your Internet connection. Also, see a demo of how you can use the Network Quality API to build end-user performance measurements and improve performance for your customers.

- Doug Suttles, Orb
- Lai Yi Ohlsen, Cloudflare

### [Inside healthcare: Securing and scaling enterprise networks with AI](https://www.cloudflare.com/connect/2026/session/inside-healthcare-securing-and-scaling-enterprise-networks-with-ai)

Industries Showcase · 42 min

Designed for technology leaders in healthcare, this showcase explores how to secure and scale infrastructure using AI. Regulated industries face complex challenges, from sophisticated application programming interface (API) vulnerabilities to hyper-volumetric, distributed denial-of-service (DDoS) attacks. Hear from industry peers on how they’re solving these threats and adding value with emerging technologies.

- Aaron McAllister, Cloudflare
- Emery Coxe, Inspira Financial
- Jacob Arledge, OhioHealth
- Jason Shrack, Aya Healthcare

### [Build low-latency pub/sub applications with MoQ](https://www.cloudflare.com/connect/2026/session/build-low-latency-pub-sub-applications-with-moq)

Agent Cloud · 19 min

Developers building real-time applications often choose between media delivery protocols such as HLS and DASH and interactive technologies such as WebRTC. Media over QUIC (MoQ) provides a shared pub/sub model and lets applications tune latency and reliability as conditions change. Learn how MoQ works, when to use it, and how to build with it in browsers and native apps using Cloudflare’s relay and open source tools. Demos will cover live media and other low-latency use cases, from one-to-one communication to large-scale fan-out.

- Renan Dincer, Cloudflare

### [A runtime for developers and their agents](https://www.cloudflare.com/connect/2026/session/a-runtime-for-developers-and-their-agents)

Web Performance & Frameworks · 18 min

The Cloudflare Workers runtime rests on a few primitives: V8 isolates as the unit of execution, bindings as a capability model instead of ambient network access, conformance to web standards and ECMA-262, and Node.js compatibility. None of these were built with agents in mind. Isolates predate today’s AI by years, and bindings were built to connect a Worker to a database, not sandbox untrusted code. This session covers how these primitives add up to something bigger: a developer platform where human-written and agent-written code run on equal footing. Learn how the web is reshaping around agents as a new kind of visitor and how the developer platform is reshaping around agents as a new kind of developer — one that writes TypeScript to call your tools or completes an entire coding session not typed by hand. Code Mode and the Sandbox SDK are two such examples. The Workers runtime forms the foundation of this evolving developer world view.

- James Snell, Cloudflare

### [Protecting origins in the agentic era](https://www.cloudflare.com/connect/2026/session/protecting-origins-in-the-agentic-era)

Web Performance & Frameworks · 20 min

AI agent traffic is surging, with more than 51% of web traffic being already automated. As agents multiply, origin servers face two to five times load growth. The traditional fix of buying more servers doesn’t scale. This talk walks through how Smart Shield consolidates multiple origin protection capabilities into one platform so that your existing infrastructure can handle the explosion. We’ll show you how Tiered Cache eliminates redundant requests, connection reuse consolidates hundreds of connections into one, Cache Reserve caches long-tail content permanently, and dedicated egress IPs lock down origin access to a limited number of IPs.

- Chad Nachiappan, Cloudflare

### [EmDash: The secure WordPress successor for humans and agents](https://www.cloudflare.com/connect/2026/session/emdash-the-secure-wordpress-successor-for-humans-and-agents)

Web Performance & Frameworks · 15 min

[Slides (PDF)](https://www.cloudflare.com/connect/2026/session/emdash-the-secure-wordpress-successor-for-humans-and-agents/slides.pdf)

WordPress powers 43% of the web but was built for another age. At Cloudflare, we asked, “What would WordPress look like if it were built for the agentic era?” In this talk, Matt Kane (creator of EmDash) introduces EmDash — a full-stack TypeScript CMS powered by Astro and Cloudflare Workers. EmDash keeps what made WordPress successful (extensibility, plugin ecosystem, familiar admin UX) but rebuilds it on secure, sandboxed foundations with agents as first-class citizens.

- Matt Kane, Cloudflare

### [Securing Internet traffic for the quantum computing era](https://www.cloudflare.com/connect/2026/session/securing-internet-traffic-for-the-quantum-computing-era)

Web Performance & Frameworks · 18 min

Post-quantum encryption is moving from research topic to operational reality, but deploying new cryptography across the Internet requires more than flipping a switch. This session is for security, networking, and infrastructure teams planning for post-quantum migration. Walk through Cloudflare’s lessons from rolling out post-quantum protection at scale, including how we built our system to test compatibility, understand performance tradeoffs, support adoption, monitor failures, and communicate risk. Leave this session with practical guidance for making post-quantum encryption real in production environments and an understanding of how Cloudflare accomplished this work based on our automatic SSL/TLS system and how it is protecting customers (and speeding them up) at scale.

- Alex Krivit, Cloudflare
- Syed Suleman Ahmad, Cloudflare

### [From intent to infrastructure: Rethinking CDN resiliency with AI](https://www.cloudflare.com/connect/2026/session/from-intent-to-infrastructure-rethinking-cdn-resiliency-with-ai)

Web Performance & Frameworks · 15 min

CDN configurations encode the same delivery intent in vendor-specific ways, making migrations and multi-CDN operations slow and risky. In this session, Cloudflare introduces an intent-driven approach: define behavior once, use AI to generate reviewable tests and candidate configuration, and validate the result with end-to-end evidence in an isolated environment. Through a live demo, see how human approval, deterministic safeguards, and automated recovery turn configuration into a test-driven workflow. Built for infrastructure architects and SREs, this session offers a practical model for owning intent and tests while vendors implement against a shared behavioral contract.

- Alex Kuck, Cloudflare

### [Cloudflare OS is an architecture of distrust](https://www.cloudflare.com/connect/2026/session/cloudflare-os-is-an-architecture-of-distrust)

Agent Cloud · 17 min

"Cloudflare OS is an architecture of distrust." At least, that’s what an AI said when it reviewed the code, because Cloudflare OS is designed to distrust the AI. Most agent harnesses these days simply give the AI free rein and pray for alignment. Cloudflare OS is different. It implements an extensive set of guardrails that make it nearly impossible for the AI to make serious mistakes. The goal: you should be able to give Cloudflare OS to anyone at your company while allowing your security and compliance teams to sleep at night. Kenton Varda is the architect of these guardrails (and the architect of the Cloudflare Workers platform). In this talk, he will walk through all of the details. Learn why an AI described the capability-based security model as a “leash” and the sandbox a “cage,” and discover how the system sets up a “fabricated reality” for the agent that relieves the human operator from having to supervise every action.

- Kenton Varda, Cloudflare

### [Your AI agent is a distributed system](https://www.cloudflare.com/connect/2026/session/your-ai-agent-is-a-distributed-system)

Agent Cloud · 22 min

AI agents look simple in a demo: give a model some tools and let it run. Production changes the problem completely. Agents need durable state, retries, scheduling, concurrency, real-time communication, observability, and a way to survive failures without losing their place. In other words, they start looking a lot like distributed systems. This session explores the infrastructure patterns behind reliable, long-running agents, what we’ve learned building them at Cloudflare, and how those lessons change the way developers should think about agent architecture.

- , Cloudflare

### [Adaptive Intelligence: Detecting sophisticated and persistent attackers](https://www.cloudflare.com/connect/2026/session/adaptive-intelligence-detecting-sophisticated-and-persistent-attackers)

Secure AI · 21 min

This session is intended for security professionals and practitioners managing bot threats. There is an open ecosystem devoted to bypassing bot detection — toolkits that forge fingerprints, drive real browsers, and solve challenges automatically. When a detection catches them, contributors patch and ship within days. Against a static defense, every block teaches an attacker exactly where the edges are. Adaptive Intelligence changes the economics: detection signals that keep moving mean attackers can never bank what they learned, making attacks too costly to attempt. Discover why static models have a structural weakness against persistent adversaries and how continuous model retraining and automated disposable rules change attacker economics. Learn what is live today in Cloudflare’s Adaptive Intelligence program and what is coming.

- Chris Pope, Cloudflare

### [Trusting the toolchain: Securing agentic MCP and package registry usage](https://www.cloudflare.com/connect/2026/session/trusting-the-toolchain-securing-agentic-mcp-and-package-registry-usage)

Secure AI · 11 min

An agent is only as trustworthy as the tools, packages, and third-party applications it can call. This session walks through risks associated with agentic tool use: discover and reroute MCP traffic, detect agentic package usage, and limit the scope of impact when a dependency becomes compromised.

- AJ Gerstenhaber, Cloudflare

### [5 questions every CTO must answer about AI agents](https://www.cloudflare.com/connect/2026/session/5-questions-every-cto-must-answer-about-ai-agents)

Secure AI · 20 min

Your business units are already building AI agents, each on a different platform, with their own identity, logging, and bill. That speed creates blind spots, runaway cost, and compliance gaps with no clear ownership. This session for CTOs and technology leaders reframes the problem as five questions every leader should be asking: How do agents connect? Who do they act as? What stops them from doing harm? What can they see? How much do they cost? The answer is a consistent way to govern agents regardless of the platform they run on, instead of maintaining one policy per team. Learn about where the controls are real today and explore a vendor-agnostic solution blueprint to connect, secure, and govern your multi-platform agentic AI strategy

- Miguel Nunes, Cloudflare

### [Monetizing AI agent traffic: Write your first Monetization Gateway rule](https://www.cloudflare.com/connect/2026/session/monetizing-ai-agent-traffic-write-your-first-monetization-gateway-rule)

Secure AI · 18 min

The majority of Internet traffic is now driven by AI agents, which means that businesses must learn how to charge AI agents for their consumption. In this session, developers and business strategists will learn how to set up their first monetization rule in the Cloudflare Monetization Gateway, experiment with pricing strategies, and track what agents actually pay for.

- Rohin Lohe, Cloudflare
- Will Papper, Cloudflare

### [MCP is the door, and the control plane is the house](https://www.cloudflare.com/connect/2026/session/mcp-is-the-door-and-the-control-plane-is-the-house)

Secure AI · 17 min

MCP makes it easy to connect agents to tools. That is both the unlock and the danger. At Cloudflare, we connected internal agents to systems like GitLab, Backstage, Jira, Sentry, Prometheus, Google Workspace, and our internal Release Manager. It quickly became clear that the hard problem was not “can the agent call a tool?” It was “which tool, for which user, under which policy, with what context cost, and what scope of impact?” This talk covers MCP at enterprise scale: how we use Cloudflare Access for identity, MCP server portals for governance, Code Mode to reduce token overhead, and sandboxed execution to constrain what model-generated code can do. We share lessons from running MCP internally and why unmanaged MCP becomes entropy surprisingly fast.

- Ayush Thakur, Cloudflare
- Kenny Johnson, Cloudflare

### [Securing your workforce for the AI era](https://www.cloudflare.com/connect/2026/session/securing-your-workforce-for-the-ai-era)

Secure AI · 15 min

As organizations scale AI services and internal tools, the access control surface grows faster than policy can keep up. This session walks through a practical workflow for securing your workforce across applications, browsers, and devices. Organize resources and apply policy at the right level of granularity. Enforce step-up authentication where it matters. Make access time-bound so it expires when the job is done. The focus is on composing controls that work together across the stack without creating configuration sprawl or policy debt. Leave this session with a deployable model for tightening security posture across any workload, AI or otherwise.

- Noelle Kagan, Cloudflare

### [Merkle Tree Certificates and the next phase of the WebPKI](https://www.cloudflare.com/connect/2026/session/merkle-tree-certificates-and-the-next-phase-of-the-webpki)

Security & Compliance · 15 min

Cloudflare has been experimenting with Chrome on the next-generation architecture for post-quantum authentication for the web: Merkle Tree Certificates. Recent developments in quantum technology have led us to expedite the deadline for completing our transition to post-quantum cryptography to 2029. This forces us to shift our focus from harvest-now, decrypt-later attacks to protecting authentication systems from quantum attackers. The cost of post-quantum authentication is the sheer size of digital signatures compared to their classical counterparts, so the primary goal of Merkle Tree Certificates is to reduce the number of signatures needed to establish a connection to a website. In this session, learn about the current deployment status of this new architecture and what clients and site operators need to do to prepare.

- Christopher Patton, Cloudflare

### [Cloudflare OS: Automating work with agents connected to your systems](https://www.cloudflare.com/connect/2026/session/cloudflare-os-automating-work-with-agents-connected-to-your-systems)

Secure AI · 18 min

Employees want AI that can reach internal systems, and handing out API keys doesn’t scale. Cloudflare OS is an open source agent workspace your company owns and runs. Your teams work with agents that know your organization’s context and reach internal systems through brokered access, producing documents, applications, and workflows that automate recurring work. In this session, watch Cloudflare experts build an app live on stage against a real system of record, learn how per-resource access and model routing keep data and costs under control, and hear about what worked and what didn’t rolling this out at Cloudflare. This session is geared toward IT, security, and platform teams responsible for how their company adopts AI.

- Dan Carter, Cloudflare
- Phillip Jones, Cloudflare

### [Connecting Cloudflare One data protection and secure AI](https://www.cloudflare.com/connect/2026/session/connecting-cloudflare-one-data-protection-and-secure-ai)

Secure AI · 21 min

As AI becomes embedded in everyday work, security teams need a way to protect sensitive data without slowing adoption. This session explores how Cloudflare One data protection capabilities and secure AI controls can work together to provide visibility, policy enforcement, and practical guardrails across users, applications, and AI services. Learn how to reduce exposure, govern sensitive interactions, and create a more consistent control model for AI-driven workflows. The focus of this session is on real-world implementation patterns that help practitioners connect data protection and secure AI into a single, operational approach that supports both security and productivity.

- Abe Carryl, Cloudflare
- Rob Danz, Cloudflare

### [Q-Day is coming: Here’s how to prepare for the threat of a quantum computer](https://www.cloudflare.com/connect/2026/session/q-day-is-coming-heres-how-to-prepare-for-the-threat-of-a-quantum-computer)

Security & Compliance · 38 min

Join Cloudflare’s Sharon Goldberg as she discusses post-quantum cryptography (PQC) and how to prepare for the threat quantum computers pose to the cryptographic systems that underpin the modern Internet. In this introductory discussion, learn what exactly Q-Day is, how PQC works, and how to prepare your organization for the upgrade to PQC. Hear how Cloudflare has spent the last nine years designing, implementing, and advocating for free, standards-based PQC across the Internet. In early 2026, we revised our Q-Day threat horizon to 2029 and are committed to having all our cryptography fully post-quantum by the end 2029.

- Sharon Goldberg, Cloudflare

### [Customer zero: How Cloudflare runs AI engineering for 5,000+ employees](https://www.cloudflare.com/connect/2026/session/customer-zero-how-cloudflare-runs-ai-engineering-for-5-000-employees)

Security & Compliance · 17 min

Rolling out coding tools across a company means managing access, context, and cost. This session for engineering and platform leaders shares how Cloudflare built its internal stack using AI Gateway, MCP server portals, and Access, with platform, knowledge, and enforcement layers. Learn from our rollout decisions and setbacks, and see how to adapt the architecture using the Cloudflare Developer Platform and zero trust products. Leave with a reference architecture, a phased rollout plan, and a public checklist for evaluating open source and proprietary coding tools, informed by our focus on open source harnesses.

- Rajesh Bhatia, Cloudflare
- Scott Roe-Meschke, Cloudflare

### [Building Argus: AI & ML threat detection at scale in Cloudflare](https://www.cloudflare.com/connect/2026/session/building-argus-ai-and-ml-threat-detection-at-scale-in-cloudflare)

Security & Compliance · 20 min

As Customer Zero, Cloudflare faces unique security challenges at massive scale. Every corporate action flows through Cloudflare Gateway, generating billions of events. To spot critical security threats in this ocean of data, we built Argus. Powered by Spark, Argus uses AI and machine learning to ingest Gateway telemetry alongside other Cloudflare logs like DLP to surface high-fidelity anomalies. Generative AI agents then automatically triage and enrich these alerts, creating a continuous, self-improving defense loop. Discover how we transform our own Zero Trust data into a proactive threat detection engine.

- Henry Montagu, Cloudflare

### [Prevent, don’t detect: Introducing Cloud Workload Security](https://www.cloudflare.com/connect/2026/session/prevent-dont-detect-introducing-cloud-workload-security)

Secure AI · 12 min

[Slides (PDF)](https://www.cloudflare.com/connect/2026/session/prevent-dont-detect-introducing-cloud-workload-security/slides.pdf)

Today, cloud security mostly works by detection. Something gets misconfigured, a tool flags it, and someone chases it down. By then, the risky configuration is already live and on the path to exploitation. Cloud Workload Security (CWS) is a new addition to the Cloudflare One platform. It’s a modern inline proxy for the cloud that stops insecure configurations and unapproved actions before they are executed by the cloud provider, across build, deploy, and runtime. In this session, we launch CWS, walk through the use cases driving early adoption, and show where it fits alongside your existing cloud security stack.

- Neil Brown, Cloudflare

### [Unifying network observability: Logs, traces, and the agents you run](https://www.cloudflare.com/connect/2026/session/unifying-network-observability-logs-traces-and-the-agents-you-run)

Security & Compliance · 17 min

This session is tailored for developers, platform teams, and security engineers who troubleshoot on Cloudflare. Logs, analytics, traces, and alerts have lived in separate products with separate query languages, so one question means multiple tabs. This session shows what changes when they become one product and what benefits it brings: one query language to learn, answers without standing up a pipeline first, and alerts on anything you can query. Also learn about observability for the AI agents you build on Cloudflare Workers and where the network starts fixing what it can on its own. You will leave knowing what this replaces in your setup and how to get your telemetry into the tools you already run.

- Rian van der Merwe, Cloudflare

### [The rogue agent problem: When AI adoption outpaces your security](https://www.cloudflare.com/connect/2026/session/the-rogue-agent-problem-when-ai-adoption-outpaces-your-security)

Security & Compliance · 14 min

AI adoption doesn't roll out — it spreads. One approved tool becomes ten unapproved ones. One experiment becomes a production deployment nobody secured. For security investigation and response teams, every ungoverned AI deployment is a blind spot — new attack surface you can't monitor, new data flows you can't inspect, and new behaviors your detections weren't built to catch. This session covers the real patterns behind AI sprawl — shadow AI, ungoverned deployments, supply chain risk, and data leakage — through the lens of security investigations and incident response. We'll share the frameworks Cloudflare's security response team built to identify, investigate, and respond to AI-driven risk at scale.

- Milo Gilad, Cloudflare

### [Beyond IP addresses: Cryptographic primitives for honest bots](https://www.cloudflare.com/connect/2026/session/beyond-ip-addresses-cryptographic-primitives-for-honest-bots)

Security & Compliance · 17 min

With the rise in traffic from AI agents, it’s no longer clear what’s considered a bot. There are some clearly malicious bots, like ones that DoS your site, and ones that you want, like search engine crawlers. In this session, the Cloudflare research team explains how we are building cryptographic primitives that move automated clients’ legitimacy away from IP addresses and User-Agent rules. Hear about Web Bot Auth and privacy-preserving approaches, why these systems matter as agents multiply across the Internet, and how they can protect origins without weakening users’ privacy. Learn where the proposals stand today, how companies are adopting them, and how website and agent operators can use Cloudflare to prepare.

- Thibault Meunier, Cloudflare

### [Closing the loop: Agentic threat intelligence and threat response](https://www.cloudflare.com/connect/2026/session/closing-the-loop-agentic-threat-intelligence-and-threat-response)

Security & Compliance · 19 min

Security teams are drowning in two asymmetries: attackers move at machine speed, while analysts triage and write intelligence at human speed. This session presents two production systems — built entirely on Cloudflare’s developer platform — that close that gap by embedding agentic-driven agents on both sides of the defensive lifecycle: threat intelligence agents that reason over what we know, and threat response agents that act on what we find. On the response side: a lightweight endpoint agent that streams forensic artifacts where an agentic pipeline extracts IOCs and enriches them. On the intelligence side: software that turns enrichment output into finished reporting.

- Blake Darche, Cloudflare
- Javier Castro, Cloudflare

### [6 architecture patterns that repeat across enterprise customers](https://www.cloudflare.com/connect/2026/session/6-architecture-patterns-that-repeat-across-enterprise-customers)

Network & Infrastructure · 15 min

Most enterprise architecture conversations feel unique to the customer, such as for a regulated bank, a multi-tenant SaaS platform, a media business, or a manufacturer. The surface differences (vertical, geography, regulation, and threat model) are real, but the decisions underneath them are mostly the same. After a year of engagements across iGaming, financial services, retail, manufacturing, and media, we have found six patterns surface in nearly every conversation. This session names the six patterns, decomposes the decision underneath each one, and offers questions that surface them earlier in the conversation. This session is ideal for senior architects, infrastructure leads, and IT/security leaders.

- Damiete King-Harry, Cloudflare

### [Self-hosting Durable Objects](https://www.cloudflare.com/connect/2026/session/self-hosting-durable-objects)

Web Performance & Frameworks · 20 min

[Slides (PDF)](https://www.cloudflare.com/connect/2026/session/self-hosting-durable-objects/slides.pdf)

This session explores the architecture of celld, which allows you to self-host Cloudflare Durable Objects and Cloudflare Workers across many VMs. Learn how this relates to the Deno acquisition and the team’s nascent plans to bring this functionality into workerd.

- Ryan Dahl, Cloudflare

### [Move fast, stay reliable: Cloudflare’s multilayer resilience strategy](https://www.cloudflare.com/connect/2026/session/move-fast-stay-reliable-cloudflares-multilayer-resilience-strategy)

Network & Infrastructure · 18 min

This session pulls back the curtain on Cloudflare’s resilience-focused engineering strategy, detailing Cloudflare’s high availability, disaster recovery, business continuity, and safe change efforts. Discover how Cloudflare proactively validates its systems through real-world chaos engineering — including automated top-of-rack testing and weekly cut tests — and how our team is reducing engineer-driven incidents and the scope of impact. Leave with an inside look at how Cloudflare’s rollout safety, service-level segmentation, and other resilience efforts are coming together with chaos engineering to prevent, detect, and isolate issues and eliminate the global scope of impact.

- Nayla Raad, Cloudflare

### [Cloudflare Workers VPC: Build globally, connect privately](https://www.cloudflare.com/connect/2026/session/cloudflare-workers-vpc-build-globally-connect-privately)

Network & Infrastructure · 14 min

Cloudflare Workers applications often need to reach APIs and databases that cannot be exposed to the public Internet. Cloudflare Workers VPC connects Workers and Hyperdrive to private networks through existing Cloudflare One connectivity, including Cloudflare Tunnel. This session follows a request from a Worker to a private service: how Cloudflare resolves a private hostname, carries the connection, returns traffic without giving the Worker a stable network identity, and limits access through explicit bindings. It also compares a VPC Service for one approved destination with broader VPC Network access for dynamic destinations, account-wide routes, and Gateway-controlled egress.

- Matt Alonso, Cloudflare

### [How the Internet really works: Into the depths of Internet infrastructure](https://www.cloudflare.com/connect/2026/session/how-the-internet-really-works-into-the-depths-of-internet-infrastructure)

Network & Infrastructure · 17 min

You might have heard statements like "70% of Internet traffic passes through Northern Virginia" or that satellite communications are how intercontinental communication happens. Would it surprise you that neither of those statements is true? This talk dives into the depths of how Internet infrastructure is all around you, what actually carries your Internet traffic, and how a network like Cloudflare is perfectly suited for the evolving demands of Internet infrastructure with AI.

- Tom Paseka, Cloudflare

### [Rearchitecting the Cloudflare network for the AI revolution](https://www.cloudflare.com/connect/2026/session/rearchitecting-the-cloudflare-network-for-the-ai-revolution)

Network & Infrastructure · 13 min

Join this session to walk through the Cloudflare operations infrastructure. The session starts with a historical look back and ends with outlining the ongoing work in modernizing the Cloudflare Global Network.

- Tom Strickx, Cloudflare

### [How we built Cloudflare’s global network](https://www.cloudflare.com/connect/2026/session/how-we-built-cloudflares-global-network)

Network & Infrastructure · 15 min

Learn how Cloudflare built and continues to expand one of the world’s largest global networks — spanning more than 330 cities across more than 120 countries. Discover how we think about data center placement, peering and interconnection strategy, and traffic engineering, and learn about the policy considerations that shape building a network at global scale.

- David Tuber, Cloudflare
- Emily Music, Cloudflare

### [From chaos to control: Building a harness for personal agents](https://www.cloudflare.com/connect/2026/session/from-chaos-to-control-building-a-harness-for-personal-agents)

Web Performance & Frameworks · 22 min

Late last year, we got a taste of what a personal AI agent can look like. You can give it access to your calendar, email, and to-do list and let the agent handle the boring tasks for you. The harness worked, until it didn’t. In this talk, I'll share the architecture of the harness I built for my personal agent that lives on the edge. You’ll get to see the harness that separates demo from production: sub-agents, memory, sandboxing, and human in the loop. Then, I'll share the real issues I ran into during development and the architectural decisions I made to overcome them.

- Harshil Agrawal, Cloudflare

### [From ranking to recommended: Answer engine optimization (AEO)](https://www.cloudflare.com/connect/2026/session/from-ranking-to-recommended-answer-engine-optimization-aeo)

Web Performance & Frameworks · 34 min

[Slides (PDF)](https://www.cloudflare.com/connect/2026/session/from-ranking-to-recommended-answer-engine-optimization-aeo/slides.pdf)

Discovery is moving from search rankings to AI recommendations. Customers ask an assistant, and it names a shortlist before anyone visits your site. Unlike search, there's no impression count and no missed-click report, so when a competitor is recommended instead of you, you never find out. This session is for marketers and site owners who want to tackle AI-driven discovery. See how Cloudflare measures how often assistants recommend you against competitors, using realistic customer prompts. Join this session to see your recommendation metrics, find where you're named but not cited, and take action to improve your results.

- Ashish Vinodkumar, Cloudflare
- Will Rowe, Cloudflare

### [The integrated Cloudflare stack for trusted AI adoption](https://www.cloudflare.com/connect/2026/session/the-integrated-cloudflare-stack-for-trusted-ai-adoption)

Secure AI · 49 min

[Slides (PDF)](https://www.cloudflare.com/connect/2026/session/the-integrated-cloudflare-stack-for-trusted-ai-adoption/slides.pdf)

AI adoption is moving fast, but trusted adoption requires a control plane that can keep pace. This session explores how the integrated Cloudflare stack connects visibility, policy enforcement, data protection, and operational control into a practical model for secure AI. See how to secure AI traffic, reduce data exposure, and apply consistent governance across users, applications, and AI services without adding friction. With a focus on real-world architecture and day-to-day operations, this session helps practitioners gain a clear, deployable approach to building an integrated control plane that balances security with adoption.

- Simon Thorpe, Cloudflare

### [Internal DNS: The end of the appliance era](https://www.cloudflare.com/connect/2026/session/internal-dns-the-end-of-the-appliance-era)

Web Performance & Frameworks · 28 min

Your public DNS lives on Cloudflare’s global network. Your internal DNS lives in a closet. That gap costs you in three ways: latency from regional appliances, complexity from running two DNS stacks, and risk from infrastructure patched twice a year. Legacy on-premises DNS was never designed for the network you run today. Internal DNS puts authoritative and recursive resolution for private namespaces on the same anycast platform that powers 1.1.1.1: sub-5-second propagation, identity-aware resolution through Cloudflare Gateway. This demo session covers the architecture, looks at real customer migrations off legacy DNS, and explores what closing the gap unlocks.

- Enrique Somoza, Cloudflare

### [Code Mode: Fit 2,500 API endpoints into 1,000 tokens](https://www.cloudflare.com/connect/2026/session/code-mode-fit-2-500-api-endpoints-into-1-000-tokens)

Web Performance & Frameworks · 16 min

MCP promises to be the USB port for AI agents, but every tool consumes tokens. Cloudflare’s API has 2,500 endpoints; exposing them all would eat 1.17 million tokens, exceeding any model’s context window. We built Code Mode, an open source technique that collapses any number of tools into 2 functions and roughly 1,000 tokens, a 99.9% reduction. Agents write JavaScript to query OpenAPI specs and call endpoints on demand inside sandboxed V8 isolates where credentials never touch the model. In this talk, see production numbers from our internal deployment and leave with the SDK to implement this on your own MCP servers today.

- Léo Arsenin, Cloudflare

### [Reducing payloads with shared compression dictionaries](https://www.cloudflare.com/connect/2026/session/reducing-payloads-with-shared-compression-dictionaries)

Web Performance & Frameworks · 18 min

Modern web applications ship repeated patterns across JavaScript, CSS, APIs, and page responses, but traditional compression treats many of those responses independently. This problem is more pronounced in the vibe-coding era. In this session, developers, platform teams, and performance engineers can learn to make sites faster while reducing bandwidth costs. Learn how shared compression dictionaries work, where they help most, and how you can deploy them safely through Cloudflare. You will leave with a practical model for identifying dictionary-friendly traffic, measuring performance impact, and rolling out compression improvements without changing application code.

- Alex Krivit, Cloudflare
- Tim Kadlec, Cloudflare

### [Securing agentic harnesses: Control, visibility, and safe tool use](https://www.cloudflare.com/connect/2026/session/securing-agentic-harnesses-control-visibility-and-safe-tool-use)

Secure AI · 37 min

As organizations build agentic systems that call tools, retrieve data, and take action, security must move beyond prompt-level controls. This session explores how to secure agentic harnesses with the visibility, policy, and access controls needed to make tool-using AI safe and governable in production. Learn to implement authentication, authorization, logging, and policy enforcement across model calls, tools, and retrieval flows — keeping agents useful without giving them unchecked reach. Also learn practical patterns for controlling agent behavior, reducing risk from unsafe tool use, and making agentic systems auditable and operationally defensible.

- Gérard Zapf, Cloudflare

### [Behind the scenes: Challenges of running AI models at scale](https://www.cloudflare.com/connect/2026/session/behind-the-scenes-challenges-of-running-ai-models-at-scale)

Agent Cloud · 19 min

Cloudflare runs at a massive scale — but what does scale mean when it comes to running AI models? We can talk about scale in different dimensions: global scale (routing, autoscaling, and concurrency), model catalog scale (breadth and modalities of models), and even model scale (trillion+ parameter models). Cloudflare does all of the above. Join this session for a behind-the-scenes look at the systems behind Workers AI infrastructure and how we operate them.

- Michelle Chen, Cloudflare

### [The agentic network: Secure private connectivity for agents](https://www.cloudflare.com/connect/2026/session/the-agentic-network-secure-private-connectivity-for-agents)

Secure AI · 28 min

[Slides (PDF)](https://www.cloudflare.com/connect/2026/session/the-agentic-network-secure-private-connectivity-for-agents/slides.pdf)

AI agents can’t use VPN clients or type MFA codes, so every agentic workflow breaks at the same point: the agent needs to reach a private database, internal API, or MCP server. Exposing those resources publicly is a security risk, and legacy VPNs grant too much access and leave no audit trail. In this demo session, see how Cloudflare Mesh becomes the universal connectivity fabric for the agentic era. We’ll build three secure patterns from scratch in five minutes each: a coding agent reaching a private database, a Worker using a VPC binding to fetch from an internal API, and bidirectional node-to-node mesh across different cloud providers. See how every connection inherits Cloudflare One Gateway policies and DLP automatically with no extra setup.

- Nikita Cano, Cloudflare

### [Auto model routing saves money, makes users happy, and is inherently flawed](https://www.cloudflare.com/connect/2026/session/auto-model-routing-saves-money-makes-users-happy-and-is-inherently-flawed)

Agent Cloud · 14 min

Cloudflare AI Gateway includes an automatic model router that can reduce AI spending without reducing productivity. This talk walks through the router architecture that was built for performance, interpretability, and adaptability. But despite its obvious benefits, is automatic model routing actually a good idea, or are there smarter ways to waste less money? This talk explores that question.

- Andreas Jansson, Cloudflare

### [Better visibility and control: Shining a light on shadow AI](https://www.cloudflare.com/connect/2026/session/better-visibility-and-control-shining-a-light-on-shadow-ai)

Secure AI · 18 min

Blocking AI traffic on day one is a fast way to lose user trust and drive work into the shadows. This session shows how security teams can discover AI and MCP prompts automatically, run DLP in a non-blocking observation mode, measure what would be caught, and tune detection with context before enforcement. Leave this session with a rollout sequence that treats AI security and data protection as an adoption enabler rather than a binary block-or-allow decision.

- Abe Carryl, Cloudflare

### [Bring your own logic with a fully programmable, secure web gateway](https://www.cloudflare.com/connect/2026/session/bring-your-own-logic-with-a-fully-programmable-secure-web-gateway)

Secure AI · 18 min

A fixed catalog of AI controls cannot anticipate every customer workflow, model, or risk signal. This session demonstrates how teams can extend Cloudflare Gateway policy with custom selectors and Cloudflare Workers invocations to build organization-specific AI guardrails. The walkthrough covers a practical pattern: detect AI or MCP traffic, evaluate customer context, take a policy action, and use reusable components so the control can be applied consistently. The focus is on empowering security and platform teams to adapt without waiting for a product release.

- AJ Gerstenhaber, Cloudflare

### [Prevent cloud misconfigurations and data leakage before they happen](https://www.cloudflare.com/connect/2026/session/prevent-cloud-misconfigurations-and-data-leakage-before-they-happen)

Security & Compliance · 17 min

[Slides (PDF)](https://www.cloudflare.com/connect/2026/session/prevent-cloud-misconfigurations-and-data-leakage-before-they-happen/slides.pdf)

Cloud Workload Security is a new and unique approach to securing cloud resources. While most tools focus on catching risks after the fact, CWS uses an inline proxy to inspect cloud API calls as they happen. It enforces policy as code in real time, blocking insecure or unapproved actions before the cloud provider ever executes them, both at creation and during runtime. The CWS policy engine lets teams enforce controls that weren’t practically possible before. In this session, we walk through two examples: preventing data exfiltration to untrusted external accounts in AWS, and then securing the configuration and runtime of AI services like Amazon Bedrock. Leave understanding how to prevent cloud risks with CWS.

- Neil Brown, Cloudflare
- Vernon Jefferson, Cloudflare

### [Automating app development the secure way: Velocity meets defense in depth](https://www.cloudflare.com/connect/2026/session/automating-app-development-the-secure-way-velocity-meets-defense-in-depth)

Secure AI · 18 min

AI coding assistants have fundamentally transformed developer velocity. Today, developers can describe an app in plain English and deploy it to Cloudflare's global network in minutes. How do engineering teams keep that speed while ensuring every app is ready for real users and data? This session demonstrates a repeatable pattern for building on the Cloudflare Developer Platform with the AI coding tools developers already use. Explore deploying applications on Cloudflare using natural language within platform-enforced guardrails, and then see it automatically inherit your organization's defense-in-depth baseline.

- Chris Adam, Cloudflare

### [How to get started on your FedRAMP journey with Cloudflare](https://www.cloudflare.com/connect/2026/session/how-to-get-started-on-your-fedramp-journey-with-cloudflare)

Security & Compliance · 26 min

Learn how to get started on your FedRAMP Moderate and FedRAMP High journey with Cloudflare in this interactive panel featuring Cloudflare’s Jake Schaeufele, Senior FedRAMP Compliance Specialist, and Tom Lianza, VP of Engineering. Going deep into the architecture, learn how Cloudflare’s developer platform accelerated our roadmap and enabled us to achieve FedRAMP High in under two years. Hear about our lessons learned, alongside real-world advice to help you along your path to FedRAMP status with Cloudflare.

- Ian Kelly, Cloudflare
- Jake Schaeufele, Cloudflare
- Tom Lianza, Cloudflare

### [Poisoning the well: The rise of indirect prompt injection in the agentic age](https://www.cloudflare.com/connect/2026/session/poisoning-the-well-the-rise-of-indirect-prompt-injection-in-the-agentic-age)

Security & Compliance · 20 min

As we shift from simple chatbots to autonomous AI agents that can browse the web, manage our calendars, and even audit our code, we have inadvertently opened a back door for a new breed of silent adversary. Indirect prompt injection (IDPI) allows attackers to weaponize the very data your AI consumes — turning a routine web search or an incoming support ticket into a remote instruction that can exfiltrate sensitive data or hijack tool execution. This session explores how attackers are seeding the open web with malicious payloads designed specifically to compromise the “lethal trifecta” of private data access, tool execution, and inherent reasoning gaps in LLMs. We will map out the increasingly hostile landscape of the agentic era.

- Blake Darche, Cloudflare
- Juliette Cash, Cloudflare

## More from Connect

- [Get notified for Connect 2027](https://www.cloudflare.com/connect#2027)
- [Published sessions JSON](https://www.cloudflare.com/connect/api/recordings?year=2026)