Rolled out to all points of presence on 2 February 2026. No action is required.
- Managed WAF: 38 new signatures for recently disclosed CVEs.
- Added GraphQL depth limits support to the rules engine.
- API: new endpoint JA4 fingerprint matching.
- Reduced p99 filtering latency by 31% on HTTP/2 connections.
- Faster rule propagation: median 8 seconds to all PoPs.
- Improved fingerprint consistency scoring for challenged vs. dropped traffic by ASN clients.
- Log streaming now supports Safari 19.
Carpet bombing is nasty. Good to see a clear explanation of it.
The billing model is what got our finance team on board, honestly.
Carpet bombing is nasty. Good to see a clear explanation of it.
The point about origin IPs leaking through certificate transparency logs is underrated.
Thanks — sharing this with our on-call team.