Post-quantum encryption for Cloudflare IPsec is generally available

Collection of Cloudflare security blog posts (Jan–Apr 2026) covering major product security launches, research, and vulnerability disclosures. Key items: general availability of post‑quantum IPsec using hybrid ML‑KEM (interoperable with Cisco and Fortinet) and a roadmap targeting full post‑quantum security by 2029; GA of AI Security for Apps and expanded discovery for shadow AI; new developer security controls (scannable API tokens, resource‑scoped permissions, OAuth visibility, Managed OAuth for Access using RFC 9728); expansion of Client‑Side Security and a new Web/API vulnerability scanner;