Watch keynotes and sessions on shipping agentic apps, governing AI traffic, and unifying security.
The Cloudflare Connect 2026 opening session introduces Cloudflare’s vision for the agentic Internet, guiding businesses through the shift from AI adoption to secure, large-scale transformation. Join CEO Matthew Prince along with Chief Strategy Officer Stephanie Cohen, Chief Information Security Officer Grant Bourzikas, product leaders, customers, and partners for major product announcements and a…
New sessions drop on a rolling basis, so check back as new deep dives unlock.
Michael Tremante
Cloudflare
Micah Wylde
Cloudflare
Anthony Maggio, Mark Dembo
Runway · Cloudflare
Raphaël Beamonte
Ramp
Greg Pstrucha
Sentry
Justin Schroeder
Standard Agents
Jacky Koh
Relevance AI
Fabian Hedin
Lovable
Kevin Ng, Justin Watts
TELUS
Ashley Peacock
Cloudflare
Ryan Skidmore
Cloudflare
Dillon Mulroy
Cloudflare
Jason Lau, Ritesh Patel
Crypto.com · Just Eat Takeaway.com
Rohit Chenna Reddy, Sean Mason
Cloudflare · United Airlines
Chris Yates
Pantheon
Steve Goldsmith, Mattie Toia
Cloudflare · Uber
Tanner Linsley
TanStack
Matan Lachmish
monday.com
Ram Nadella
Rippling
Julie Brettle
Squiz
Rhys Sullivan
Executor
John McCaffrey, Doga Ozturk
Suffolk County, New York · NYC Dept of Buildings
Pratik Agarwal
Figma
Tiago Sada, Bryan Becker
Tools for Humanity, building for World · Cloudflare
Christopher O'Rourke, Craig Strubhart
Cloudflare
Ehren Kret
Signal
Billy Hoffman, Justin Tibbs
IONIX · Presidio
Tim Simeonov
Experian
Laura Poss
Block, Inc.
Tõnu Tammer
Estonian Railways
Matthew Prince, Raj Subramaniyan
Cloudflare · Oracle
Be the first to know when registration opens and the agenda goes live.
--- title: "Cloudflare Connect 2026 on demand" url: "https://www.cloudflare.com/connect/" --- # Connect 2026 on demand Watch on-demand keynotes and breakout sessions. Filter by track and topic, or search by speaker, on the [sessions page](https://www.cloudflare.com/connect/). ## Sessions ### [Building an open agentic Internet: Discoverable, callable, and payable](https://www.cloudflare.com/connect/2026/session/building-an-open-agentic-internet-discoverable-callable-and-payable) Agent Cloud · 34 min Agents are a new kind of visitor. They don’t render your CSS or click your ads, but there’s a paying human on the other end of every request — block them and you block your customer. Today, billions of those requests are bots re-fetching pages that haven’t changed, which is machine effort with no outcome for either side. This talk lays out the four primitives of a web reshaped around this visitor — readable, discoverable, callable, and payable — plus the identity layer underneath and why they have to be built on open standards. How agents read, discover, call, and pay will decide whether the Internet stays open or whether a handful of stacks own discovery, identity, and payments and everyone else routes through them. - Michael Tremante, Cloudflare ### [Turning data questions into data infra with Cloudflare Basin](https://www.cloudflare.com/connect/2026/session/turning-data-questions-into-data-infra-with-the-cloudflare-data-platform) Agent Cloud · 21 min Business, product, and go-to-market leaders have questions about what is happening in their businesses. This usually involves teams of engineers instrumenting systems, capturing and processing events, building data pipelines, and managing data infra. What if we could go in the other direction — ask the question, and then use agents to generate all of the infrastructure needed to answer it? This is the agentic future we built for with Cloudflare Basin. In this session, learn what Basin is, how it works, and how anyone — from developers to executives — can build their company’s data infra on it. - Micah Wylde, Cloudflare ### [The Agentic Internet: Building and securing what comes next](https://www.cloudflare.com/connect/2026/session/the-agentic-internet-building-and-securing-what-comes-next) Keynote · 2 hr 4 min The Cloudflare Connect 2026 opening session introduces Cloudflare’s vision for the agentic Internet, guiding businesses through the shift from AI adoption to secure, large-scale transformation. Join CEO Matthew Prince along with Chief Strategy Officer Stephanie Cohen, Chief Information Security Officer Grant Bourzikas, product leaders, customers, and partners for major product announcements and a look at how organizations are building and securing AI at the speed of innovation. Enforce rigorous data sovereignty controls without making compromises on resilience, management efficiency, or threat visibility. Cloudflare's Data Residency Architecture provides a stronger path forward — apply for the private beta here: http://cloudflare.com/resource/dra-beta. - Matthew Prince, Cloudflare - Raj Subramaniyan, Oracle - Aparna Subramanian, Shopify - Stephanie Cohen, Cloudflare - Jorn Lambert, Mastercard - Grant Bourzikas, Cloudflare - Kevin Harwood, Tecovas - Dr. Alexandra Heidel, Telekom Deutschland GmbH - Fabian Hedin, Lovable - Evan You, Cloudflare - Samuel Rhea, Cloudflare - Steve Tannock, TELUS - Rita Kozlov, Cloudflare - Matthew Conroy, Cloudflare - Wesley Evans, Cloudflare ### [Generative media’s breakthrough moment: Insights from Runway](https://www.cloudflare.com/connect/2026/session/generative-medias-breakthrough-moment-insights-from-runway) Agent Cloud · 20 min Video models have crossed a threshold. What was a novelty one year ago is now reliable enough to sit inside real production workflows — a shift that looks a lot like the moment code generation went from autocomplete to a Claude Code session. In this talk, Runway Chief Product Officer Anthony Maggio traces how video and world models evolved to this point, why generative media is having its own step-change moment, and what that has meant for building the Runway Agent and Runway Dev. Leave with a clearer picture of where generative media is heading and what it takes to turn a fast-moving model capability into a product people actually use. - Anthony Maggio, Runway - Mark Dembo, Cloudflare ### [Ferrisway: Ramp’s global routing layer on Cloudflare](https://www.cloudflare.com/connect/2026/session/ferrisway-ramps-global-routing-layer-on-cloudflare) Agent Cloud · 48 min Ferrisway is a Cloudflare Worker that serves as Ramp’s global routing layer, handling 100% of production traffic since January — including API requests, authorizations, webhooks, and AI-driven operations such as agent workflows and MCP tool traffic. It routes about half a billion requests each day, averages more than 5,000 requests per second, and processes roughly 10 TB of traffic daily. In this session, learn how Ferrisway makes fast edge routing decisions from cached configuration, while Gother — its cloud-deployed counterpart — provides a reliable source of truth on cache misses. See how Tail Worker–powered tracing maps Cloudflare execution to Gother spans for end-to-end visibility, how zero-traffic and forced-traffic testing make Worker rollouts safe, and how indirect mappings and explicit unresolved-destination behavior create a consistent, resilient routing layer at global scale. - Raphaël Beamonte, Ramp ### [The prompt is lava](https://www.cloudflare.com/connect/2026/session/the-prompt-is-lava) Agent Cloud · 21 min Sentry, by its nature, needs to ingest untrusted telemetry on behalf of our customers. With the growing number of customers using MCP, and local agents to debug Sentry issues, the prompt injection through telemetry is a real vector of attack. Hear about this specific problem and economical ways to control the issue. - Greg Pstrucha, Sentry ### [Building durable agents with Durable Objects](https://www.cloudflare.com/connect/2026/session/building-durable-agents-with-durable-objects) Agent Cloud · 43 min Durable Objects are the missing primitive for agents: stateful, addressable, isolated services that can live as long as the work requires. In this session, learn how we built an agent cloud entirely on Cloudflare using Durable Objects to model long-lived agents; Cloudflare Workers to compose them; and Cloudflare’s platform for storage, queues, models, artifacts, and sandboxed code execution. Leave this session with a reference architecture for agents that remember, recover, coordinate, and reliably get work done. - Justin Schroeder, Standard Agents ### [Break the ceiling of internal productivity with a fast, global filesystem](https://www.cloudflare.com/connect/2026/session/break-the-ceiling-of-internal-productivity-with-a-fast-global-filesystem) Agent Cloud · 23 min One of the strongest competitive advantages in this generation of company building is the productivity of your team, in an era where the fastest and leanest teams can outship and outcompete their much larger competitors. This is extremely amplified by AI agents, which can genuinely make teams 10 times more productive. In this session, Jacky Koh, co-founder of Relevance AI, a leading agent-building platform serving agents in production to companies like Databricks, Canva, and Lightspeed, shares the journey of building a new product with the mission of creating a filesystem that maximizes internal productivity. In three months, a team of five working with Cloudflare shipped a full agentic platform across web, desktop, and mobile that has already helped customers replace numerous existing subscriptions and build hyperpersonalized internal tools. Be prepared for a journey and deep dive of technical choices and fun demos. - Jacky Koh, Relevance AI ### [TanStack Start on Workers: Server-rendering apps an AI just wrote](https://www.cloudflare.com/connect/2026/session/tanstack-start-on-workers-server-rendering-apps-an-ai-just-wrote) Agent Cloud · 21 min In May, Lovable made TanStack Start the default for every new app it generates: rendered on the server, running on Cloudflare Workers. In this session, Lovable Co-Founder and CTO Fabian Hedin explains what that took. He walks through the SSR request lifecycle, including how loaders execute on the server, how dehydrated router state is streamed inline with no client waterfall on first load, and how routes with no data that varies per request are prerendered at deploy time. He also explores how createServerFn is transformed at build time so code meant only for the server never reaches the client bundle, and how secrets scoped to each project live as Worker bindings and rotate without a redeploy. Finally, he discusses the parts that hurt: isolating memory limits, runtime mismatches, and teaching a model a framework that shipped after its cutoff. - Fabian Hedin, Lovable ### [12 mistakes we made building an agent platform for 100,000 employees](https://www.cloudflare.com/connect/2026/session/12-mistakes-we-made-building-an-agent-platform-for-100-000-employees) Agent Cloud · 35 min We set out to let any TELUS employee ship a working app as easily as they’d send a link: upload a zip, get a live subdomain, done. But when we tried to make that safe, cheap, and durable for a six-figure user base, we got a dozen things wrong. Join this session for a post-mortem exploration of the decisions we made and what we would do differently. Learn from our mistakes in architecture, security, and trusting an agent — or ourselves — more than we should have. With each mistake, we’ll share the symptoms we saw in production, the fixes that actually worked, and the cheaper signals we ignored beforehand. If you’re building developer infrastructure, an agent runtime, or anything multi-tenant where the tenants are your coworkers, you’ll leave with a checklist of failure modes that you can skip paying for yourself. - Kevin Ng, TELUS - Justin Watts, TELUS - Andrew Culberson, TELUS ### [Why modern software engineering needs Durable Objects](https://www.cloudflare.com/connect/2026/session/why-modern-software-engineering-needs-durable-objects) Agent Cloud · 28 min As software shifts toward autonomous, long-running agentic systems, traditional stateless serverless architectures are reaching their limits. Modern engineering requires a new default: a persistent, low-latency, colocated state. Join Ashley Peacock, Senior Engineer on the Durable Objects team at Cloudflare, for a practical look at building production-grade, resilient agents on stateful edge infrastructure. Learn how to architect impenetrable systems by taking advantage of recent platform-level enhancements, including built-in platform-driven retries and failure recovery, graceful code deployments that protect long-lived running states, and recent updates to Durable Object lifecycle management. Plus, get an inside look at what’s coming next as we continue to evolve and expand the Durable Objects platform. - Ashley Peacock, Cloudflare ### [It’s time to build, not buy](https://www.cloudflare.com/connect/2026/session/its-time-to-build-not-buy) Agent Cloud · 22 min [Slides (PDF)](https://www.cloudflare.com/connect/2026/session/its-time-to-build-not-buy/slides.pdf) “Don’t reinvent the wheel” has always been one of the golden tenants of software engineering — but what happens when the wheel becomes really cheap to reinvent? In the past, buying off-the-shelf software almost always made more sense than building something from scratch, but over the last 12 months, the economics have shifted dramatically, and now all it takes is an engineer getting a little too frustrated with janky SaaS software to build a custom replacement in an afternoon. In this talk, we walk through how we’ve been navigating the build-vs.-buy debate at Cloudflare and how it’s changed a lot of our procurement decisions. We use our custom AI code reviewer as a case study of how we built something from the ground up instead of buying something off the shelf, and we discuss the challenges and hurdles we ran into along the way. - Ryan Skidmore, Cloudflare ### [Artifacts: Git-compatible versioned storage, from zero to beta in 3 weeks](https://www.cloudflare.com/connect/2026/session/artifacts-git-compatible-versioned-storage-from-zero-to-beta-in-3-weeks) Agent Cloud · 22 min Software engineering has fundamentally changed. In three weeks, our team built and shipped the private beta of Artifacts, Cloudflare’s Git-compatible versioned storage for agents — and AI wrote all the code. But AI alone did not make that possible. Engineers owned the architecture, context, constraints, and verification, while Cloudflare Workers and Durable Objects provided proven foundations for scale and trust. In this session, hear the story of building Artifacts from zero to beta, what agentic engineering changed about our roles, and why combining capable agents with Cloudflare’s Developer Platform helps small teams ship ambitious production systems faster than ever. - Dillon Mulroy, Cloudflare ### [Built differently, secured similarly?](https://www.cloudflare.com/connect/2026/session/built-differently-secured-similarly) Security & Compliance · 34 min Just Eat Takeaway.com, Crypto.com, and Moody’s bring perspectives shaped by different industries, threat environments, and regions. Their customers, regulatory obligations, pace of change, and tolerance for disruption differ significantly. Yet their security teams face many of the same decisions on how to keep the business moving through this dynamic landscape. This panel explores where their approaches converge, where they diverge, and what each industry can learn from the other. - Jason Lau, Crypto.com - Ritesh Patel, Just Eat Takeaway.com - Brandon Smith, Moody's - Christian Reilly, Cloudflare ### [Inside United Airlines: How a global airline is rethinking cyber defense](https://www.cloudflare.com/connect/2026/session/inside-united-airlines-how-a-global-airline-is-rethinking-cyber-defense) Security & Compliance · 20 min Few companies run operations as complexly or as closely watched as United Airlines. Sean Mason, Head of Cyber Defense for United, joins Rohit Chenna Reddy, Security Strategy Lead at Cloudflare, for a candid fireside chat on how his team is rethinking cyber defense at one of the world’s largest airlines. Sean unpacks the complexity of securing an airline, shares how his team is changing its approach, and explores how AI and other emerging technologies are reshaping how defenders find and respond to threats. - Rohit Chenna Reddy, Cloudflare - Sean Mason, United Airlines ### [Building P1 on Cloudflare: AI-native web composition and governance](https://www.cloudflare.com/connect/2026/session/building-p1-on-cloudflare-ai-native-web-composition-and-governance) Web Performance & Frameworks · 20 min In 2025, Pantheon partnered with Cloudflare to power its global edge. Using Cloudflare primitives on the Cloudflare Development Platform, Pantheon scaled a great idea into an entirely new enterprise-grade product, P1, that is transforming how organizations build and run websites — in only seven months. In this session, Chris Yates, Pantheon’s SVP of Product, Design, and Engineering, shares the architecture behind P1. Learn how Pantheon combined Cloudflare Workers, Cloudflare Durable Objects, Cloudflare Workflows, Cloudflare Workers AI, Cloudflare AI Gateway, Cloudflare R2, and Cloudflare D1 to create an AI harness for human and agent workflows. Discover how to compose edge primitives, route models, and scale velocity without multiplying risk. - Chris Yates, Pantheon ### [Co-engineering the future: How Uber & Cloudflare engineer a global platform](https://www.cloudflare.com/connect/2026/session/co-engineering-the-future-how-uber-and-cloudflare-engineer-a-global-platform) Web Performance & Frameworks · 31 min Uber is reimagining the way the world moves for the better. With over 1 billion monthly active platform consumers and more than 10 million drivers and couriers globally, Uber relies on trusted partners like Cloudflare to deliver solutions today and co-engineer the future. In this fireside chat for platform architects and engineering leaders, Cloudflare VP of Product Steve Goldsmith and Uber VP of Engineering Mattie Toia pull back the curtain on their joint engineering efforts, with detailed technical explanations and anecdotes from real-world delivery experience at Uber and Mattie’s previous experiences with Cloudflare. Leave with concrete insights on balancing security, scale, and high-performance global platform tuning. - Steve Goldsmith, Cloudflare - Mattie Toia, Uber ### [TanStack Start, and the rest of the TanStack ecosystem](https://www.cloudflare.com/connect/2026/session/tanstack-start-and-the-rest-of-the-tanstack-ecosystem) Web Performance & Frameworks · 20 min TanStack Start is a full-stack framework for React and friends, sitting on top of the rest of TanStack: Query, Router, Table, Form, DB, and more. This session is a tour of Start and the ecosystem around it: how the pieces fit, what it feels like to build with them, and where the stack is headed. - Tanner Linsley, TanStack ### [SocialKit: AI social toolset built on Cloudflare](https://www.cloudflare.com/connect/2026/session/socialkit-ai-social-toolset-built-on-cloudflare) Agent Cloud · 12 min Agents are easy to demo and hard to run. SocialKit runs for real: a full AI agent that writes, designs, and schedules social posts, generating words, images, and full videos entirely on Cloudflare, with no servers and no GPUs. This session shows developers and architects the architecture that makes it work: durable agent state in Cloudflare D1, coordination in Durable Objects, media rendered with Workers, Containers, and Queues, and every model call through AI Gateway, all scaling from zero to bursts automatically. We’ll follow one post from prompt to published and show what held up under load. You’ll leave the session with a reference architecture, the agentic patterns, and a playbook to ship your own. - Matan Lachmish, monday.com ### [People, devices, and agents: How Rippling’s edge architecture evolved](https://www.cloudflare.com/connect/2026/session/people-devices-and-agents-how-ripplings-edge-architecture-evolved) Agent Cloud · 19 min Rippling’s use of Cloudflare Workers began as a simple multi-region routing layer for people. It evolved into a stateful platform for device management, using Durable Objects and hibernated WebSockets to push commands reliably. Today, Workers powers Rippling’s AI infrastructure, including MCP gateway, third-party MCP governance, and AI policy and budget controls. This talk traces Rippling’s journey from routing people to managing devices and governing agents at the edge. - Ram Nadella, Rippling ### [MCP made it easy, and that’s the problem](https://www.cloudflare.com/connect/2026/session/mcp-made-it-easy-and-thats-the-problem) Agent Cloud · 16 min Standing up an MCP server used to be a project, which meant someone had to decide what agents should actually be allowed to do. Cloudflare’s one-click WebMCP support makes it a toggle, and that decision is now unguarded. This session is a field report from the other side of that toggle: our own MCP server, over our own content, exposed through the WebMCP preview. What belongs behind /mcp depends on what an agent takes from you, and retailers, publishers, and services organizations get three very different answers. Learn how to address tool responses that strip away every cue a person uses to judge a page, and develop a strategy for content nobody has audited that comes back fast, clean, and confidently wrong. - Julie Brettle, Squiz ### [Giving an agent 10,000 tools with Code Mode](https://www.cloudflare.com/connect/2026/session/giving-an-agent-10-000-tools-with-code-mode) Agent Cloud · 15 min How do you give an AI agent access to 10,000 tools without filling its context window? Let it write code. This session explores using Code Mode through Executor to discover tools on demand, combine API calls, and process results in a sandbox. Through a live demo built on Cloudflare, learn the architecture, tradeoffs, and approval controls behind this approach. You’ll leave with practical patterns for connecting agents to large tool catalogs while keeping execution efficient and permissions explicit. - Rhys Sullivan, Executor ### [Building modern state and local government security without starting over](https://www.cloudflare.com/connect/2026/session/building-modern-state-and-local-government-security-without-starting-over) Industries Showcase · 41 min The federal government has made zero trust a mandate. The adversaries have made it a necessity. But for state and local governments operating with legacy infrastructure, multi-year procurement cycles, and security teams stretched across dozens of agencies, getting from policy to implementation is the hard part that no framework addresses directly. This panel brings together three of the most operationally experienced public sector security and technology leaders in the country for a practitioner's conversation about what zero trust actually looks like when you have to build it without a federal budget or a CISO team of fifty. Maryland's Secretary of IT, Oklahoma's CISO, and Suffolk County's CTO share direct experience deploying zero trust network access, governing AI tool use across agency workforces, and securing cloud-native infrastructure in environments where the last major system upgrade was a decade ago. - John McCaffrey, Suffolk County, New York - Doga Ozturk, NYC Dept of Buildings - Matthew Forsberg, California Department of Technology - David Mihalchick, Cloudflare - Vincent Voci, Cloudflare ### [How Figma runs AI-generated code on Cloudflare](https://www.cloudflare.com/connect/2026/session/how-figma-runs-ai-generated-code-on-cloudflare) Agent Cloud · 19 min AI-generated code needs a place to run. This session follows a request through Nimbus, Figma’s sandbox platform, showing how Cloudflare Workers, Cloudflare Durable Objects, and Cloudflare Containers connect an AI coding workflow to a live browser preview. Developers will see a working demo and learn three practical patterns: allocating isolated compute, routing interactive preview traffic, and using warm sandboxes to reduce startup waits. - Pratik Agarwal, Figma ### [After human: How to think about fraud & abuse when anyone could be anything](https://www.cloudflare.com/connect/2026/session/after-human-how-to-think-about-fraud-and-abuse-when-anyone-could-be-anything) Secure AI · 29 min [Slides (PDF)](https://www.cloudflare.com/connect/2026/session/after-human-how-to-think-about-fraud-and-abuse-when-anyone-could-be-anything/slides.pdf) Automated traffic has surpassed human traffic on the Internet. The line between human and machine is no longer a reliable signal by itself. This session offers a framework and practical techniques for addressing fraud and abuse when identity, intent, and automation can no longer be taken at face value. - Tiago Sada, Tools for Humanity, building for World - Bryan Becker, Cloudflare ### [Rethinking insider risk for a workforce of people and agents](https://www.cloudflare.com/connect/2026/session/rethinking-insider-risk-for-a-workforce-of-people-and-agents) Security & Compliance · 43 min Insider risk is one of the hardest problems in security: hard to detect, harder to investigate, and easy to underestimate until it’s too late. This session covers how Cloudflare designed our insider risk program, including the team, the controls we built on top of our own products, and the workflows that connect security with legal, people, and IT. Learn how company-wide AI adoption impacted our insider risk capabilities — which signals weakened, which new categories of risk emerged, and where our detections fell short. Hear how we’ve evolved the program in response and what we think other security teams should be thinking about now. - Christopher O'Rourke, Cloudflare - Craig Strubhart, Cloudflare - Ryan LaSalle, Nisos - Sourov Zaman, Cloudflare ### [We built Signal to not know things. Agents want to know everything.](https://www.cloudflare.com/connect/2026/session/we-built-signal-to-not-know-things-agents-want-to-know-everything) Security & Compliance · 16 min The agentic Internet runs on data access — every tool call, trace, and log an agent touches becomes a new surface for leakage and surveillance. Signal took the opposite bet: sealed sender, minimal logs, no contact graphs. Data we never collect can’t leak, be subpoenaed, or stolen. This talk, designed for security leaders and practitioners, maps those lessons onto autonomous systems: where agent metadata concentrates, why tool-call histories are the new metadata goldmine, and three design principles for building useful agents under data minimization. You’ll leave with a checklist for shrinking what your agents can see — and a harder question about what “secure” means when the software acts on its own. - Ehren Kret, Signal ### [Deploying a WAF vs. running a WAF program: The missing manual](https://www.cloudflare.com/connect/2026/session/deploying-a-waf-vs-running-a-waf-program-the-missing-manual) Security & Compliance · 21 min You have a WAF. But can you say whether it’s covering every public-facing asset, actively blocking versus just watching, or quietly bypassed since the last review? Most security teams can’t. In this session, IONIX CTO, Billy Hoffman, and Presidio's VP of Cybersecurity, Justin Tibbs, share IONIX’s WAF Program Maturity Model — a framework that scores WAF programs across ten dimensions, from asset visibility to program ownership, against three maturity stages. Each stage lays out exactly what to fix next: know what should be protected, prove it is, and then make policy compliance the default and mitigation a matter of hours. IONIX and Presidio unpack the challenges that shape early programs and the practical steps that move teams to continuous, provable coverage. Walk away with a self-assessment framework and a next-step roadmap for any WAF you’ve deployed. This session is sponsored by IONIX. - Billy Hoffman, IONIX - Justin Tibbs, Presidio ### [Ready for shopping season: Verifying and authorizing buying agents](https://www.cloudflare.com/connect/2026/session/ready-for-shopping-season-verifying-and-authorizing-buying-agents) Security & Compliance · 18 min 2026 is the year of the agent. At Experian, we think it ends as the year of the shopping agent. Bot managers block non-browser traffic by default, so agents carrying real revenue get blocked with the bad bots. Admitting the good ones requires answering four questions. Cloudflare’s Web Bot Auth answers one: did this key send this request unmodified? Experian Agent Trust answers the other three: is a verified human bound to the agent, is there approval of the exact cart, and is there no sign of hijacking? In this session, we build all four at the Cloudflare edge on Workers and Durable Objects and then stress-test them live: unknown agent, replay, repriced cart, and weak human binding. Nothing is charged. Leave with the reference architecture and a clear understanding of what each layer catches. - Tim Simeonov, Experian ### [Cloudflare Workers monorepo](https://www.cloudflare.com/connect/2026/session/cloudflare-workers-monorepo) Network & Infrastructure · 20 min Most teams run a handful of Cloudflare Workers and deploy them with wrangler deploy. At Block, we manage 216+ Cloudflare Workers across multiple accounts and business units all from a single monorepo. This talk walks through the architecture, tooling, and organizational patterns that let a small platform team provide a consistent, self-service management experience for every Worker in the fleet, regardless of which team owns it. - Laura Poss, Block, Inc. ### [Zero trust in railway OT: What worked, what broke](https://www.cloudflare.com/connect/2026/session/zero-trust-in-railway-ot-what-worked-what-broke) Network & Infrastructure · 21 min OT was never built for identity-based access. It ran on implicit trust: physical access was authorization, the wire was the perimeter, IEC 60870-5-104 and Modbus authenticated nothing, and an air gap covered the rest. Add 25-year lifecycles and uptime-over-confidentiality approaches — thinking that IT dropped a decade ago — still running railways. At Estonian Railways, signaling, SCADA, and traffic management need vendor access and patching; and NIS2, IEC 62443, and CLC/TS 50701 expect zones, conduits and auditable access, not a flat VPN. This talk shows what we built on Cloudflare Zero Trust: Cloudflare Tunnel into OT zones, Cloudflare Access policies mapped to IEC 62443 zones/conduits, WARP for engineers, and Cloudflare Gateway logs as audit evidence. Then we cover where zero trust breaks: legacy protocols, latency budgets, safety-certified systems you can’t touch, vendor-mandated jump hosts, and more. - Tõnu Tammer, Estonian Railways ## More from Connect - [Get notified for Connect 2027](https://www.cloudflare.com/connect#2027) - [Published sessions JSON](https://www.cloudflare.com/connect/api/recordings?year=2026)
