Catch up on everything from Connect 2026.

Watch keynotes and sessions on shipping agentic apps, governing AI traffic, and unifying security.

Browse all sessionsGet notified for 2027

The Agentic Internet: Building and securing what comes next

The Cloudflare Connect 2026 opening session introduces Cloudflare’s vision for the agentic Internet, guiding businesses through the shift from AI adoption to secure, large-scale transformation. Join CEO Matthew Prince along with Chief Strategy Officer Stephanie Cohen, Chief Information Security Officer Grant Bourzikas, product leaders, customers, and partners for major product announcements and a…

Watch The Agentic Internet: Building and securing what comes next

All sessions

New sessions drop on a rolling basis, so check back as new deep dives unlock.

Connect 2027

Connect returns in 2027

Be the first to know when registration opens and the agenda goes live.

By submitting this form, you agree to our Privacy Policy.

cloudflare-connect-2026

---
title: "Cloudflare Connect 2026 on demand"
url: "https://www.cloudflare.com/connect/"
---

# Connect 2026 on demand

Watch on-demand keynotes and breakout sessions. Filter by track and topic, or search by speaker, on the [sessions page](https://www.cloudflare.com/connect/).

## Sessions

### [Building an open agentic Internet: Discoverable, callable, and payable](https://www.cloudflare.com/connect/2026/session/building-an-open-agentic-internet-discoverable-callable-and-payable)

Agent Cloud · 34 min

Agents are a new kind of visitor. They don’t render your CSS or click your ads, but there’s a paying human on the other end of every request — block them and you block your customer. Today, billions of those requests are bots re-fetching pages that haven’t changed, which is machine effort with no outcome for either side. This talk lays out the four primitives of a web reshaped around this visitor — readable, discoverable, callable, and payable — plus the identity layer underneath and why they have to be built on open standards. How agents read, discover, call, and pay will decide whether the Internet stays open or whether a handful of stacks own discovery, identity, and payments and everyone else routes through them.

- Michael Tremante, Cloudflare

### [Turning data questions into data infra with Cloudflare Basin](https://www.cloudflare.com/connect/2026/session/turning-data-questions-into-data-infra-with-cloudflare-basin)

Agent Cloud · 21 min

Business, product, and go-to-market leaders have questions about what is happening in their businesses. This usually involves teams of engineers instrumenting systems, capturing and processing events, building data pipelines, and managing data infra. What if we could go in the other direction — ask the question, and then use agents to generate all of the infrastructure needed to answer it? This is the agentic future we built for with Cloudflare Basin. In this session, learn what Basin is, how it works, and how anyone — from developers to executives — can build their company’s data infra on it.

- Micah Wylde, Cloudflare

### [The Agentic Internet: Building and securing what comes next](https://www.cloudflare.com/connect/2026/session/the-agentic-internet-building-and-securing-what-comes-next)

Keynote · 2 hr 4 min

The Cloudflare Connect 2026 opening session introduces Cloudflare’s vision for the agentic Internet, guiding businesses through the shift from AI adoption to secure, large-scale transformation. Join CEO Matthew Prince along with Chief Strategy Officer Stephanie Cohen, Chief Information Security Officer Grant Bourzikas, product leaders, customers, and partners for major product announcements and a look at how organizations are building and securing AI at the speed of innovation.

Enforce rigorous data sovereignty controls without making compromises on resilience, management efficiency, or threat visibility. Cloudflare's Data Residency Architecture provides a stronger path forward — apply for the private beta here: http://cloudflare.com/resource/dra-beta.

- Matthew Prince, Cloudflare
- Raj Subramaniyan, Oracle
- Aparna Subramanian, Shopify
- Stephanie Cohen, Cloudflare
- Jorn Lambert, Mastercard
- Grant Bourzikas, Cloudflare
- Kevin Harwood, Tecovas
- Dr. Alexandra Heidel, Telekom Deutschland GmbH
- Fabian Hedin, Lovable
- Evan You, Cloudflare
- Samuel Rhea, Cloudflare
- Steve Tannock, TELUS
- Rita Kozlov, Cloudflare
- Matthew Conroy, Cloudflare
- Wesley Evans, Cloudflare

### [Generative media’s breakthrough moment: Insights from Runway](https://www.cloudflare.com/connect/2026/session/generative-medias-breakthrough-moment-insights-from-runway)

Agent Cloud · 20 min

Video models have crossed a threshold. What was a novelty one year ago is now reliable enough to sit inside real production workflows — a shift that looks a lot like the moment code generation went from autocomplete to a Claude Code session. In this talk, Runway Chief Product Officer Anthony Maggio traces how video and world models evolved to this point, why generative media is having its own step-change moment, and what that has meant for building the Runway Agent and Runway Dev. Leave with a clearer picture of where generative media is heading and what it takes to turn a fast-moving model capability into a product people actually use.

- Anthony Maggio, Runway
- Mark Dembo, Cloudflare

### [Ferrisway: Ramp’s global routing layer on Cloudflare](https://www.cloudflare.com/connect/2026/session/ferrisway-ramps-global-routing-layer-on-cloudflare)

Agent Cloud · 48 min

Ferrisway is a Cloudflare Worker that serves as Ramp’s global routing layer, handling 100% of production traffic since January — including API requests, authorizations, webhooks, and AI-driven operations such as agent workflows and MCP tool traffic. It routes about half a billion requests each day, averages more than 5,000 requests per second, and processes roughly 10 TB of traffic daily. In this session, learn how Ferrisway makes fast edge routing decisions from cached configuration, while Gother — its cloud-deployed counterpart — provides a reliable source of truth on cache misses. See how Tail Worker–powered tracing maps Cloudflare execution to Gother spans for end-to-end visibility, how zero-traffic and forced-traffic testing make Worker rollouts safe, and how indirect mappings and explicit unresolved-destination behavior create a consistent, resilient routing layer at global scale.

- Raphaël Beamonte, Ramp

### [The prompt is lava](https://www.cloudflare.com/connect/2026/session/the-prompt-is-lava)

Agent Cloud · 21 min

Sentry, by its nature, needs to ingest untrusted telemetry on behalf of our customers. With the growing number of customers using MCP, and local agents to debug Sentry issues, the prompt injection through telemetry is a real vector of attack. Hear about this specific problem and economical ways to control the issue.

- Greg Pstrucha, Sentry

### [Building durable agents with Durable Objects](https://www.cloudflare.com/connect/2026/session/building-durable-agents-with-durable-objects)

Agent Cloud · 43 min

Durable Objects are the missing primitive for agents: stateful, addressable, isolated services that can live as long as the work requires. In this session, learn how we built an agent cloud entirely on Cloudflare using Durable Objects to model long-lived agents; Cloudflare Workers to compose them; and Cloudflare’s platform for storage, queues, models, artifacts, and sandboxed code execution. Leave this session with a reference architecture for agents that remember, recover, coordinate, and reliably get work done.

- Justin Schroeder, Standard Agents

### [Break the ceiling of internal productivity with a fast, global filesystem](https://www.cloudflare.com/connect/2026/session/break-the-ceiling-of-internal-productivity-with-a-fast-global-filesystem)

Agent Cloud · 23 min

One of the strongest competitive advantages in this generation of company building is the productivity of your team, in an era where the fastest and leanest teams can outship and outcompete their much larger competitors. This is extremely amplified by AI agents, which can genuinely make teams 10 times more productive. In this session, Jacky Koh, co-founder of Relevance AI, a leading agent-building platform serving agents in production to companies like Databricks, Canva, and Lightspeed, shares the journey of building a new product with the mission of creating a filesystem that maximizes internal productivity. In three months, a team of five working with Cloudflare shipped a full agentic platform across web, desktop, and mobile that has already helped customers replace numerous existing subscriptions and build hyperpersonalized internal tools. Be prepared for a journey and deep dive of technical choices and fun demos.

- Jacky Koh, Relevance AI

### [TanStack Start on Workers: Server-rendering apps an AI just wrote](https://www.cloudflare.com/connect/2026/session/tanstack-start-on-workers-server-rendering-apps-an-ai-just-wrote)

Agent Cloud · 21 min

In May, Lovable made TanStack Start the default for every new app it generates: rendered on the server, running on Cloudflare Workers. In this session, Lovable Co-Founder and CTO Fabian Hedin explains what that took. He walks through the SSR request lifecycle, including how loaders execute on the server, how dehydrated router state is streamed inline with no client waterfall on first load, and how routes with no data that varies per request are prerendered at deploy time. He also explores how createServerFn is transformed at build time so code meant only for the server never reaches the client bundle, and how secrets scoped to each project live as Worker bindings and rotate without a redeploy. Finally, he discusses the parts that hurt: isolating memory limits, runtime mismatches, and teaching a model a framework that shipped after its cutoff.

- Fabian Hedin, Lovable

### [12 mistakes we made building an agent platform for 100,000 employees](https://www.cloudflare.com/connect/2026/session/12-mistakes-we-made-building-an-agent-platform-for-100-000-employees)

Agent Cloud · 35 min

We set out to let any TELUS employee ship a working app as easily as they’d send a link: upload a zip, get a live subdomain, done. But when we tried to make that safe, cheap, and durable for a six-figure user base, we got a dozen things wrong. Join this session for a post-mortem exploration of the decisions we made and what we would do differently. Learn from our mistakes in architecture, security, and trusting an agent — or ourselves — more than we should have. With each mistake, we’ll share the symptoms we saw in production, the fixes that actually worked, and the cheaper signals we ignored beforehand. If you’re building developer infrastructure, an agent runtime, or anything multi-tenant where the tenants are your coworkers, you’ll leave with a checklist of failure modes that you can skip paying for yourself.

- Kevin Ng, TELUS
- Justin Watts, TELUS
- Andrew Culberson, TELUS

### [Why modern software engineering needs Durable Objects](https://www.cloudflare.com/connect/2026/session/why-modern-software-engineering-needs-durable-objects)

Agent Cloud · 28 min

As software shifts toward autonomous, long-running agentic systems, traditional stateless serverless architectures are reaching their limits. Modern engineering requires a new default: a persistent, low-latency, colocated state. Join Ashley Peacock, Senior Engineer on the Durable Objects team at Cloudflare, for a practical look at building production-grade, resilient agents on stateful edge infrastructure. Learn how to architect impenetrable systems by taking advantage of recent platform-level enhancements, including built-in platform-driven retries and failure recovery, graceful code deployments that protect long-lived running states, and recent updates to Durable Object lifecycle management. Plus, get an inside look at what’s coming next as we continue to evolve and expand the Durable Objects platform.

- Ashley Peacock, Cloudflare

### [It’s time to build, not buy](https://www.cloudflare.com/connect/2026/session/its-time-to-build-not-buy)

Agent Cloud · 22 min

[Slides (PDF)](https://www.cloudflare.com/connect/2026/session/its-time-to-build-not-buy/slides.pdf)

“Don’t reinvent the wheel” has always been one of the golden tenants of software engineering — but what happens when the wheel becomes really cheap to reinvent? In the past, buying off-the-shelf software almost always made more sense than building something from scratch, but over the last 12 months, the economics have shifted dramatically, and now all it takes is an engineer getting a little too frustrated with janky SaaS software to build a custom replacement in an afternoon. In this talk, we walk through how we’ve been navigating the build-vs.-buy debate at Cloudflare and how it’s changed a lot of our procurement decisions. We use our custom AI code reviewer as a case study of how we built something from the ground up instead of buying something off the shelf, and we discuss the challenges and hurdles we ran into along the way.

- Ryan Skidmore, Cloudflare

### [Artifacts: Git-compatible versioned storage, from zero to beta in 3 weeks](https://www.cloudflare.com/connect/2026/session/artifacts-git-compatible-versioned-storage-from-zero-to-beta-in-3-weeks)

Agent Cloud · 22 min

Software engineering has fundamentally changed. In three weeks, our team built and shipped the private beta of Artifacts, Cloudflare’s Git-compatible versioned storage for agents — and AI wrote all the code. But AI alone did not make that possible. Engineers owned the architecture, context, constraints, and verification, while Cloudflare Workers and Durable Objects provided proven foundations for scale and trust. In this session, hear the story of building Artifacts from zero to beta, what agentic engineering changed about our roles, and why combining capable agents with Cloudflare’s Developer Platform helps small teams ship ambitious production systems faster than ever.

- Dillon Mulroy, Cloudflare

### [Built differently, secured similarly?](https://www.cloudflare.com/connect/2026/session/built-differently-secured-similarly)

Security & Compliance · 34 min

Just Eat Takeaway.com, Crypto.com, and Moody’s bring perspectives shaped by different industries, threat environments, and regions. Their customers, regulatory obligations, pace of change, and tolerance for disruption differ significantly. Yet their security teams face many of the same decisions on how to keep the business moving through this dynamic landscape. This panel explores where their approaches converge, where they diverge, and what each industry can learn from the other.

- Jason Lau, Crypto.com
- Ritesh Patel, Just Eat Takeaway.com
- Brandon Smith, Moody's
- Christian Reilly, Cloudflare

### [Inside United Airlines: How a global airline is rethinking cyber defense](https://www.cloudflare.com/connect/2026/session/inside-united-airlines-how-a-global-airline-is-rethinking-cyber-defense)

Security & Compliance · 20 min

Few companies run operations as complexly or as closely watched as United Airlines. Sean Mason, Head of Cyber Defense for United, joins Rohit Chenna Reddy, Security Strategy Lead at Cloudflare, for a candid fireside chat on how his team is rethinking cyber defense at one of the world’s largest airlines. Sean unpacks the complexity of securing an airline, shares how his team is changing its approach, and explores how AI and other emerging technologies are reshaping how defenders find and respond to threats.

- Rohit Chenna Reddy, Cloudflare
- Sean Mason, United Airlines

### [Building P1 on Cloudflare: AI-native web composition and governance](https://www.cloudflare.com/connect/2026/session/building-p1-on-cloudflare-ai-native-web-composition-and-governance)

Web Performance & Frameworks · 20 min

In 2025, Pantheon partnered with Cloudflare to power its global edge. Using Cloudflare primitives on the Cloudflare Development Platform, Pantheon scaled a great idea into an entirely new enterprise-grade product, P1, that is transforming how organizations build and run websites — in only seven months. In this session, Chris Yates, Pantheon’s SVP of Product, Design, and Engineering, shares the architecture behind P1. Learn how Pantheon combined Cloudflare Workers, Cloudflare Durable Objects, Cloudflare Workflows, Cloudflare Workers AI, Cloudflare AI Gateway, Cloudflare R2, and Cloudflare D1 to create an AI harness for human and agent workflows. Discover how to compose edge primitives, route models, and scale velocity without multiplying risk.

- Chris Yates, Pantheon

### [Co-engineering the future: How Uber & Cloudflare engineer a global platform](https://www.cloudflare.com/connect/2026/session/co-engineering-the-future-how-uber-and-cloudflare-engineer-a-global-platform)

Web Performance & Frameworks · 31 min

Uber is reimagining the way the world moves for the better. With over 1 billion monthly active platform consumers and more than 10 million drivers and couriers globally, Uber relies on trusted partners like Cloudflare to deliver solutions today and co-engineer the future. In this fireside chat for platform architects and engineering leaders, Cloudflare VP of Product Steve Goldsmith and Uber VP of Engineering Mattie Toia pull back the curtain on their joint engineering efforts, with detailed technical explanations and anecdotes from real-world delivery experience at Uber and Mattie’s previous experiences with Cloudflare. Leave with concrete insights on balancing security, scale, and high-performance global platform tuning.

- Steve Goldsmith, Cloudflare
- Mattie Toia, Uber

### [TanStack Start, and the rest of the TanStack ecosystem](https://www.cloudflare.com/connect/2026/session/tanstack-start-and-the-rest-of-the-tanstack-ecosystem)

Web Performance & Frameworks · 20 min

TanStack Start is a full-stack framework for React and friends, sitting on top of the rest of TanStack: Query, Router, Table, Form, DB, and more. This session is a tour of Start and the ecosystem around it: how the pieces fit, what it feels like to build with them, and where the stack is headed.

- Tanner Linsley, TanStack

### [SocialKit: AI social toolset built on Cloudflare](https://www.cloudflare.com/connect/2026/session/socialkit-ai-social-toolset-built-on-cloudflare)

Agent Cloud · 12 min

Agents are easy to demo and hard to run. SocialKit runs for real: a full AI agent that writes, designs, and schedules social posts, generating words, images, and full videos entirely on Cloudflare, with no servers and no GPUs. This session shows developers and architects the architecture that makes it work: durable agent state in Cloudflare D1, coordination in Durable Objects, media rendered with Workers, Containers, and Queues, and every model call through AI Gateway, all scaling from zero to bursts automatically. We’ll follow one post from prompt to published and show what held up under load. You’ll leave the session with a reference architecture, the agentic patterns, and a playbook to ship your own.

- Matan Lachmish, monday.com

### [People, devices, and agents: How Rippling’s edge architecture evolved](https://www.cloudflare.com/connect/2026/session/people-devices-and-agents-how-ripplings-edge-architecture-evolved)

Agent Cloud · 19 min

Rippling’s use of Cloudflare Workers began as a simple multi-region routing layer for people. It evolved into a stateful platform for device management, using Durable Objects and hibernated WebSockets to push commands reliably. Today, Workers powers Rippling’s AI infrastructure, including MCP gateway, third-party MCP governance, and AI policy and budget controls. This talk traces Rippling’s journey from routing people to managing devices and governing agents at the edge.

- Ram Nadella, Rippling

### [MCP made it easy, and that’s the problem](https://www.cloudflare.com/connect/2026/session/mcp-made-it-easy-and-thats-the-problem)

Agent Cloud · 16 min

Standing up an MCP server used to be a project, which meant someone had to decide what agents should actually be allowed to do. Cloudflare’s one-click WebMCP support makes it a toggle, and that decision is now unguarded. This session is a field report from the other side of that toggle: our own MCP server, over our own content, exposed through the WebMCP preview. What belongs behind /mcp depends on what an agent takes from you, and retailers, publishers, and services organizations get three very different answers. Learn how to address tool responses that strip away every cue a person uses to judge a page, and develop a strategy for content nobody has audited that comes back fast, clean, and confidently wrong.

- Julie Brettle, Squiz

### [Giving an agent 10,000 tools with Code Mode](https://www.cloudflare.com/connect/2026/session/giving-an-agent-10-000-tools-with-code-mode)

Agent Cloud · 15 min

How do you give an AI agent access to 10,000 tools without filling its context window? Let it write code. This session explores using Code Mode through Executor to discover tools on demand, combine API calls, and process results in a sandbox. Through a live demo built on Cloudflare, learn the architecture, tradeoffs, and approval controls behind this approach. You’ll leave with practical patterns for connecting agents to large tool catalogs while keeping execution efficient and permissions explicit.

- Rhys Sullivan, Executor

### [Building modern state and local government security without starting over](https://www.cloudflare.com/connect/2026/session/building-modern-state-and-local-government-security-without-starting-over)

Industries Showcase · 41 min

The federal government has made zero trust a mandate. The adversaries have made it a necessity. But for state and local governments operating with legacy infrastructure, multi-year procurement cycles, and security teams stretched across dozens of agencies, getting from policy to implementation is the hard part that no framework addresses directly. This panel brings together three of the most operationally experienced public sector security and technology leaders in the country for a practitioner's conversation about what zero trust actually looks like when you have to build it without a federal budget or a CISO team of fifty. Maryland's Secretary of IT, Oklahoma's CISO, and Suffolk County's CTO share direct experience deploying zero trust network access, governing AI tool use across agency workforces, and securing cloud-native infrastructure in environments where the last major system upgrade was a decade ago.

- John McCaffrey, Suffolk County, New York
- Doga Ozturk, NYC Dept of Buildings
- Matthew Forsberg, California Department of Technology
- David Mihalchick, Cloudflare
- Vincent Voci, Cloudflare

### [How Figma runs AI-generated code on Cloudflare](https://www.cloudflare.com/connect/2026/session/how-figma-runs-ai-generated-code-on-cloudflare)

Agent Cloud · 19 min

AI-generated code needs a place to run. This session follows a request through Nimbus, Figma’s sandbox platform, showing how Cloudflare Workers, Cloudflare Durable Objects, and Cloudflare Containers connect an AI coding workflow to a live browser preview. Developers will see a working demo and learn three practical patterns: allocating isolated compute, routing interactive preview traffic, and using warm sandboxes to reduce startup waits.

- Pratik Agarwal, Figma

### [After human: How to think about fraud & abuse when anyone could be anything](https://www.cloudflare.com/connect/2026/session/after-human-how-to-think-about-fraud-and-abuse-when-anyone-could-be-anything)

Secure AI · 29 min

[Slides (PDF)](https://www.cloudflare.com/connect/2026/session/after-human-how-to-think-about-fraud-and-abuse-when-anyone-could-be-anything/slides.pdf)

Automated traffic has surpassed human traffic on the Internet. The line between human and machine is no longer a reliable signal by itself. This session offers a framework and practical techniques for addressing fraud and abuse when identity, intent, and automation can no longer be taken at face value.

- Tiago Sada, Tools for Humanity, building for World
- Bryan Becker, Cloudflare

### [Rethinking insider risk for a workforce of people and agents](https://www.cloudflare.com/connect/2026/session/rethinking-insider-risk-for-a-workforce-of-people-and-agents)

Security & Compliance · 43 min

Insider risk is one of the hardest problems in security: hard to detect, harder to investigate, and easy to underestimate until it’s too late. This session covers how Cloudflare designed our insider risk program, including the team, the controls we built on top of our own products, and the workflows that connect security with legal, people, and IT. Learn how company-wide AI adoption impacted our insider risk capabilities — which signals weakened, which new categories of risk emerged, and where our detections fell short. Hear how we’ve evolved the program in response and what we think other security teams should be thinking about now.

- Christopher O'Rourke, Cloudflare
- Craig Strubhart, Cloudflare
- Ryan LaSalle, Nisos
- Sourov Zaman, Cloudflare

### [We built Signal to not know things. Agents want to know everything.](https://www.cloudflare.com/connect/2026/session/we-built-signal-to-not-know-things-agents-want-to-know-everything)

Security & Compliance · 16 min

The agentic Internet runs on data access — every tool call, trace, and log an agent touches becomes a new surface for leakage and surveillance. Signal took the opposite bet: sealed sender, minimal logs, no contact graphs. Data we never collect can’t leak, be subpoenaed, or stolen. This talk, designed for security leaders and practitioners, maps those lessons onto autonomous systems: where agent metadata concentrates, why tool-call histories are the new metadata goldmine, and three design principles for building useful agents under data minimization. You’ll leave with a checklist for shrinking what your agents can see — and a harder question about what “secure” means when the software acts on its own.

- Ehren Kret, Signal

### [Deploying a WAF vs. running a WAF program: The missing manual](https://www.cloudflare.com/connect/2026/session/deploying-a-waf-vs-running-a-waf-program-the-missing-manual)

Security & Compliance · 21 min

You have a WAF. But can you say whether it’s covering every public-facing asset, actively blocking versus just watching, or quietly bypassed since the last review? Most security teams can’t. In this session, IONIX CTO, Billy Hoffman, and Presidio's VP of Cybersecurity, Justin Tibbs, share IONIX’s WAF Program Maturity Model — a framework that scores WAF programs across ten dimensions, from asset visibility to program ownership, against three maturity stages. Each stage lays out exactly what to fix next: know what should be protected, prove it is, and then make policy compliance the default and mitigation a matter of hours. IONIX and Presidio unpack the challenges that shape early programs and the practical steps that move teams to continuous, provable coverage. Walk away with a self-assessment framework and a next-step roadmap for any WAF you’ve deployed. This session is sponsored by IONIX.

- Billy Hoffman, IONIX
- Justin Tibbs, Presidio

### [Ready for shopping season: Verifying and authorizing buying agents](https://www.cloudflare.com/connect/2026/session/ready-for-shopping-season-verifying-and-authorizing-buying-agents)

Security & Compliance · 18 min

2026 is the year of the agent. At Experian, we think it ends as the year of the shopping agent. Bot managers block non-browser traffic by default, so agents carrying real revenue get blocked with the bad bots. Admitting the good ones requires answering four questions. Cloudflare’s Web Bot Auth answers one: did this key send this request unmodified? Experian Agent Trust answers the other three: is a verified human bound to the agent, is there approval of the exact cart, and is there no sign of hijacking? In this session, we build all four at the Cloudflare edge on Workers and Durable Objects and then stress-test them live: unknown agent, replay, repriced cart, and weak human binding. Nothing is charged. Leave with the reference architecture and a clear understanding of what each layer catches.

- Tim Simeonov, Experian

### [Cloudflare Workers monorepo](https://www.cloudflare.com/connect/2026/session/cloudflare-workers-monorepo)

Network & Infrastructure · 20 min

Most teams run a handful of Cloudflare Workers and deploy them with wrangler deploy. At Block, we manage 216+ Cloudflare Workers across multiple accounts and business units all from a single monorepo. This talk walks through the architecture, tooling, and organizational patterns that let a small platform team provide a consistent, self-service management experience for every Worker in the fleet, regardless of which team owns it.

- Laura Poss, Block, Inc.

### [Zero trust in railway OT: What worked, what broke](https://www.cloudflare.com/connect/2026/session/zero-trust-in-railway-ot-what-worked-what-broke)

Network & Infrastructure · 21 min

OT was never built for identity-based access. It ran on implicit trust: physical access was authorization, the wire was the perimeter, IEC 60870-5-104 and Modbus authenticated nothing, and an air gap covered the rest. Add 25-year lifecycles and uptime-over-confidentiality approaches — thinking that IT dropped a decade ago — still running railways. At Estonian Railways, signaling, SCADA, and traffic management need vendor access and patching; and NIS2, IEC 62443, and CLC/TS 50701 expect zones, conduits and auditable access, not a flat VPN. This talk shows what we built on Cloudflare Zero Trust: Cloudflare Tunnel into OT zones, Cloudflare Access policies mapped to IEC 62443 zones/conduits, WARP for engineers, and Cloudflare Gateway logs as audit evidence. Then we cover where zero trust breaks: legacy protocols, latency budgets, safety-certified systems you can’t touch, vendor-mandated jump hosts, and more.

- Tõnu Tammer, Estonian Railways

### [100 billion profiles, one early bet on Cloudflare Durable Objects](https://www.cloudflare.com/connect/2026/session/100-billion-profiles-one-early-bet-on-cloudflare-durable-objects)

Web Performance & Frameworks · 17 min

In this fireside chat, Mark Dembo, Head of Solutions for Cloudflare's developer platform, sparks a conversation with Alexander Braunreuther, Chief Architect at Contentful, about being a first mover and why it was worth it. Alex talks through the early Cloudflare Durable Objects bet: the speed and scale it unlocked, the missing features his team built themselves, and the collaboration with Cloudflare that closed the gaps.

- Alexander Braunreuther, Contentful
- Mark Dembo, Cloudflare

### [Into the tunnel: Secure, metadata-driven routing at scale](https://www.cloudflare.com/connect/2026/session/into-the-tunnel-secure-metadata-driven-routing-at-scale)

Web Performance & Frameworks · 18 min

Cloudflare Tunnels aren’t just for secure access. We use them to load-balance traffic into our AWS-powered network, at scale, across every hostname in our zone. No open ports. Just secure, distributed traffic flowing exactly where it needs to go. We pushed Tunnels and Cloudflare for SaaS past their expected limits, combining them with metadata in ways that got creative fast. In this session, see how we built smarter, more flexible routing out of that combination. Learn about the real problems we hit, the workarounds we tried, and the approach that finally stuck. You’ll leave with practical patterns you can apply to your own multi-tenant or SaaS routing setup, no matter how messy your infrastructure already is.

- Joe Dixon, Laravel

### [Durable AI workflows with Effect: Maintaining open source at scale](https://www.cloudflare.com/connect/2026/session/durable-ai-workflows-with-effect-maintaining-open-source-at-scale)

Web Performance & Frameworks · 20 min

Every project produces signals that help guide its evolution. Products learn from telemetry, usage, and customer behavior, while open source projects like Effect learn from issues, pull requests, discussions, and contributor feedback. The rise of AI-assisted development dramatically increased the volume of these signals, eventually outpacing our ability to review, interpret, and act on them. To address this problem, we built “The Janitor,” an AI maintainer that reviews incoming issues and pull requests, gathers missing context, organizes related work, and surfaces what needs human attention. We show how running durable workflows with Effect on Cloudflare’s Developer Platform helps us separate signal from noise so maintainers can spend time where it matters most.

- Maxwell Brown, Effectful Technologies, Inc

### [State under siege: How Estonia stopped Russia’s DDoS campaigns](https://www.cloudflare.com/connect/2026/session/state-under-siege-how-estonia-stopped-russias-ddos-campaigns)

Security & Compliance · 26 min

Estonia knows what nation-state DDoS looks like. As Russia’s aggression has intensified, Estonian government websites, media, and critical public services have faced sustained, politically timed volumetric attacks designed to paralyze Estonian society. In the first half of 2026, Cloudflare observed a surge in attacks exceeding 1 Tbps, with DNS floods emerging as the dominant vector and geopolitical flashpoints driving campaign timing. In this panel discussion, Estonia’s Information System Authority shares how it built a proactive national cyber defense posture with Cloudflare’s global network and threat intelligence and what defenders everywhere can learn from a country that has been on the front line a long time.

- Brian Carter, Cloudflare
- Jaagup Toome, CERT-EE
- Jacob Crisp, Cloudflare
- Jürgen Tamm, CERT-EE

### [Scaling Discord’s voice on Cloudflare’s edge](https://www.cloudflare.com/connect/2026/session/scaling-discords-voice-on-cloudflares-edge)

Web Performance & Frameworks · 32 min

Moving Discord’s voice and video onto Cloudflare took the migration well beyond a typical rollout. This session takes you through that migration. Hear how we were able to hold the reliability bar by partnering directly with Cloudflare’s engineering teams and working down to the kernel level to understand behavior neither team had mapped before. That collaboration led to fixes on both sides of the stack and changes from Cloudflare that carry forward to other customers running similar workloads. Today, Cloudflare carries more than half of Discord’s voice and video traffic, with quality improving in roughly 70% of migrated regions, pings down more than 30%, and packet loss down 20–60% in multiple regions.

- Jonas Bengtson, Discord

### [How we built Command Code, the most used open-model harness, at 950T tokens](https://www.cloudflare.com/connect/2026/session/how-we-built-command-code-the-most-used-open-model-harness-at-950t-tokens)

Agent Cloud · 21 min

How did Command Code make DeepSeek outperform Claude Opus with tool repair harness engineering research? Now at 950 trillion–token scale and over 100K developers, Command Code is fixing billions of tokens for open models. A couple of months ago, developers did not trust open models. Bounced tool calls, wasted context, and poor cache hit ratios made capable models look broken. We purpose-built a coding agent harness for open models: a repair layer that fixes malformed tool calls, a taste model that learns your coding preferences, and per-provider cache pinning that holds a 99.43% cache hit rate at trillions of tokens per day. In this talk, learn how you can cut your AI costs by 10 to 20 times while also increasing the amount of work done using an abundance of tokens with top open models.

- Ahmad Awais, Command Code

### [I built your personal software ecosystem](https://www.cloudflare.com/connect/2026/session/i-built-your-personal-software-ecosystem)

Agent Cloud · 25 min

What if you had your own npm registry, your own GitHub, your own cron, your own email address, and your own database? And what if your favorite AI assistant could build with all of it on your behalf? That’s Kody. Every user gets a fully isolated software ecosystem. Your AI writes packages into your own Git repos, publishes to your personal registry, schedules jobs, runs services and workflows, and gets email at your own address. In this session, learn how software engineer and educator Kent C. Dodds built Kody entirely on Cloudflare, the only place it could be built. Dig in to sandboxing AI-authored code with Worker Loaders, per-user Git hosting with Artifacts, namespaced Durable Objects, and wiring D1, R2, Vectorize, Queues, Workflows, and Email Routing into a multi-tenant platform. When AI builds software for everyone, this is what’s underneath. You can start today.

- Kent C. Dodds, kody.codes

### [From YOLO mode to zero trust: Building an agentic engineering control plane](https://www.cloudflare.com/connect/2026/session/from-yolo-mode-to-zero-trust-building-an-agentic-engineering-control-plane)

Agent Cloud · 46 min

Autonomous agents now rapidly write code, patch servers, and operate infrastructure. They can exfiltrate IP or take down production just as fast. The velocity is real; so is the scope of impact. Drawing on Swiss Post’s zero trust program and codeflare.ch, we build the control plane live on one whiteboard. No slides here. We explore Cloudflare AI Gateway for semantic DLP and cost caps, identity lineage tying every agent action to a real engineer, MCP portals cutting tool footprints by up to 99%, and ephemeral sandboxes detonated after every run. The cherry on top is an inference mesh turning idle hardware into a private LLM fabric. No prompt leaves your network, and cost collapses. Leave with a blueprint to deploy tomorrow.

- Nikola Novoselec, Swiss Post

### [Financial services panel: Resilience, security, and AI](https://www.cloudflare.com/connect/2026/session/financial-services-panel-resilience-security-and-ai)

Industries Showcase · 43 min

Join fellow finance leaders and innovators at our exclusive industry meetup. Connect with peers, share insights, and hear how Cloudflare is helping financial institutions secure applications, harness AI, and optimize performance. Don't miss this opportunity to learn, network, and shape the future of digital finance together.

- Kathleen Peters, Experian
- Jordan Hager, Q2 Software
- Ajit Gaddam, HealthEquity
- Sean Dougherty, Cloudflare

### [Don't block shadow AI on campus. Out-design it.](https://www.cloudflare.com/connect/2026/session/dont-block-shadow-ai-on-campus-out-design-it)

Secure AI · 17 min

[Slides (PDF)](https://www.cloudflare.com/connect/2026/session/dont-block-shadow-ai-on-campus-out-design-it/slides.pdf)

Conventional shadow AI controls do not survive contact with university governance, and FERPA exposure grows daily. There is a different answer: stop treating the campus network as an enforcement point and start treating it as a strategic platform. When on-campus AI unlocks institutional context (degree audits, LMS, scheduling, and ERPs) that off-campus AI cannot reach, students and faculty seek the network out. Governance follows naturally. In this session for higher education CIOs and IT leaders, a Cloudflare SE and a higher education technology leader share a deployable reference architecture, discuss the framing to socialize it internally, and provide a live demo.

- Michael Hacker, Montclair State University
- Michael Kowal, Cloudflare

### [Disrupting scam and fraud networks with armies of AI agents on Cloudflare](https://www.cloudflare.com/connect/2026/session/disrupting-scam-and-fraud-networks-with-armies-of-ai-agents-on-cloudflare)

Secure AI · 18 min

Scams and fraud are run as businesses, and often their defenders can only react once the money has moved. Apate gets there first. In this session, hear how Apate uses thousands of AI agents to engage scammers across chat, WhatsApp, Telegram, email, and voice, participating in hundreds of thousands of messages and calls per day. See how agents can reach victims mid-scam, before the payment leaves.

- Peter Eckermann, Apate.ai

### [Your agent wrote it. Who’s on call?](https://www.cloudflare.com/connect/2026/session/your-agent-wrote-it-whos-on-call)

Network & Infrastructure · 21 min

Cloudflare shipped an OAuth library for Cloudflare Workers largely written by AI, publishing prompts alongside code for the industry to review commit by commit. This provided an early, honest look at what agent-authored production code takes to get right: a lot of review. As generation stops being the bottleneck, the constraint moves downstream — to review, CI, and production, where failures land on on-call engineers who didn’t write the code. This panel examines the data: Factory brings throughput numbers from agentic coding teams; Sentry brings failure profiles — error classes, revert rates, triage time. Is generated code’s distinct failure pattern a generation problem or a review problem?

- Dane Knecht, Cloudflare
- Madison Faulkner, Factory
- Aaron Jacobson, NEA
- Chris De Vylder, Sentry

### [Modern customer security engineering](https://www.cloudflare.com/connect/2026/session/modern-customer-security-engineering)

Secure AI · 20 min

This session details how we rebuilt a security-focused production data processing platform on the Cloudflare Developer Platform. Learn about designing an AI-native architecture using the developer platform and building and operating AI-driven processing pipelines in production. Discover how we leveled up our workflows with Cloudflare AI Gateway, and explore coordinating distributed workflows and long-running processes. Additional topics include observability, reliability, and operational lessons learned; what became significantly simpler and what remained challenging; and what we would approach differently if starting again today.

- Cristian Cortez, eBay
- Patrick Walker, eBay

### [Canary to cloud: Building a flexible traffic strategy](https://www.cloudflare.com/connect/2026/session/canary-to-cloud-building-a-flexible-traffic-strategy)

Network & Infrastructure · 27 min

Moving from an on-premises stack to cloud environments changes more than where applications run; it changes how traffic must be controlled throughout the transition. In this session, Uber and Cloudflare share how they are modernizing load balancing to route traffic safely between on-premises and cloud environments. Learn how Cloudflare’s flexible traffic controls and custom rules help Uber direct selected traffic to canary environments, validate changes, and expand deployments gradually. We also explore how Uber can rapidly shift traffic between environments as conditions change, reducing operational risk while allowing services to migrate on their own timelines.

- Oscar Moreno Garza, Uber
- Noah Crouch, Cloudflare

### [Oracle and Cloudflare: Building a stronger foundation for enterprise innovation](https://www.cloudflare.com/connect/2026/session/oracle-and-cloudflare-building-a-stronger-foundation-for-enterprise-innovation)

Security & Compliance · 11 min

What becomes possible when two enterprise technology leaders combine their strengths? In this session, executives from Cloudflare and Oracle explore their partnership and its potential to help organizations around the world simplify, secure, and accelerate their digital operations. The conversation looks at the complementary capabilities of both companies, the customer needs driving the collaboration, and how the partnership can give businesses a stronger foundation for their applications, data, and future innovation. This session is sponsored by Oracle.

- David Bredbenner, Cloudflare
- Todd Tornga, Oracle

### [From the endpoint to the edge: Simplifying security in the AI era](https://www.cloudflare.com/connect/2026/session/from-the-endpoint-to-the-edge-simplifying-security-in-the-ai-era)

Security & Compliance · 19 min

Environmental complexity is growing. At the same time, attacks are getting faster, more complex, and coming from more directions then ever. Learn how SentinelOne and Cloudflare have partnered to deliver integrations and solutions to help bring enterprise-class automation, network security, and endpoint intelligence and response to any organization. See how Cloudflare’s SASE and zero trust services combine with SentinelOne’s Autonomous Security Intelligence platform to address real scenarios and attacks organizations are facing today. This demo session is sponsored by SentinelOne.

- Tyler Greenfield, SentinelOne

### [Transforming the enterprise WAN](https://www.cloudflare.com/connect/2026/session/transforming-the-enterprise-wan)

Network & Infrastructure · 21 min

Discover how users leverage Cloudflare WAN with BGP to consolidate and simplify private wide-area networks. This session reveals how Cloudflare WAN solved the routing limitations and operational complexity that traditional solutions couldn’t address.

- Naresh Chhetri, Accenture
- Steve Welham, Cloudflare

### [How to measure real-world network quality for end users](https://www.cloudflare.com/connect/2026/session/how-to-measure-real-world-network-quality-for-end-users)

Network & Infrastructure · 26 min

Speed tests are a common tool for diagnosing poor connections and comparing Internet service providers. But traditional tests often measure performance under ideal conditions, not the real-world experience users actually have. Cloudflare helps customers measure end-user connections in the wild, where network quality really matters. In this session, hear our approach to measuring network quality and learn from the industry leaders at Orb, who are redefining what it means to understand your Internet connection. Also, see a demo of how you can use the Network Quality API to build end-user performance measurements and improve performance for your customers.

- Doug Suttles, Orb
- Lai Yi Ohlsen, Cloudflare

### [Inside healthcare: Securing and scaling enterprise networks with AI](https://www.cloudflare.com/connect/2026/session/inside-healthcare-securing-and-scaling-enterprise-networks-with-ai)

Industries Showcase · 42 min

Designed for technology leaders in healthcare, this showcase explores how to secure and scale infrastructure using AI. Regulated industries face complex challenges, from sophisticated application programming interface (API) vulnerabilities to hyper-volumetric, distributed denial-of-service (DDoS) attacks. Hear from industry peers on how they’re solving these threats and adding value with emerging technologies.

- Aaron McAllister, Cloudflare
- Emery Coxe, Inspira Financial
- Jacob Arledge, OhioHealth
- Jason Shrack, Aya Healthcare

## More from Connect

- [Get notified for Connect 2027](https://www.cloudflare.com/connect#2027)
- [Published sessions JSON](https://www.cloudflare.com/connect/api/recordings?year=2026)