Post-quantum encryption for Cloudflare IPsec is generally available
2026-05-06T19:24:18Z•86c4ceebe5bd22e335657fc65afebe59d01bcd5968c46ab0c5e4dc1b2b06afbb
account-abuseai-securityai-security-for-appsapi-tokensclient-side-securitycloudflareddosfraud-preventionhybrid-kemipseclog-explorermanaged-oauthmatrixmcpoauthpingorapost-quantumpost-quantum-roadmapradarrequest-smuggling','acme-validationresource-scoped-permissionsrfc-9728vulnerability-scannerweb-api-scannerworkers-vpc
What happened
Cloudflare published a collection of security-focused updates: GA support for post‑quantum IPsec (hybrid ML‑KEM) with Cisco/Fortinet interoperability and a corporate target of 2029 for full post‑quantum readiness; expanded PQ telemetry in Radar and PQ-enabled demos (Matrix homeserver). Product and developer security improvements include scannable API tokens, resource‑scoped permissions, Managed OAuth for Access (RFC 9728), MCP governance guidance, and Workers VPC open beta. Defensive capabilities and detections were advanced: Client‑Side Security made broadly available with AI-driven detection
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- cloudflare_security_blog
- Record identifier
- 86c4ceebe5bd22e335657fc65afebe59d01bcd5968c46ab0c5e4dc1b2b06afbb
- Enrichment time
- 2026-05-06T19:24:18Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.