Post-quantum encryption for Cloudflare IPsec is generally available
2026-05-06T07:24:14Z•c9ec28425e365be869b350c0336125580a07f155e7bb21402d40f105c20a9ae0
31.4TbpsACMEAI-Security-for-AppsAI-securityCiscoDDoSFortinetIPsecMatrixPQPingoraPingora-0.8.0RFC-9728','OAuth','scannable-api-tokens','resource-scoped-perms'Radaraccount-abuse-protectioncertificate-validationclient-side-securityfraud-preventionhybrid-ML-KEMkey-transparencymanaged-oauthpost-quantumpost-quantum-roadmaprequest-smugglingvulnerability-mitigation
What happened
Cloudflare published a broad security update covering multiple areas: post‑quantum (PQ) adoption (IPsec hybrid ML‑KEM GA with Cisco/Fortinet interoperability, PQ roadmap moved to 2029, PQ telemetry in Radar and PQ Matrix homeserver PoC), new and updated defensive products (AI Security for Apps GA, Client‑Side Security open to all, Account Abuse Protection EA, Web/API Vulnerability Scanner, Log Explorer enhanced for multi‑vector investigations), and developer/security controls (scannable API tokens, resource‑scoped permissions, Managed OAuth for Access/RFC 9728). They disclosed and fixed active
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- cloudflare_security_blog
- Record identifier
- c9ec28425e365be869b350c0336125580a07f155e7bb21402d40f105c20a9ae0
- Enrichment time
- 2026-05-06T07:24:14Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.