Platform status

What’s live, checked right now.

21 Cloudflare Workers and 15 add-on capabilities are live in production today. This page pulls its numbers from the same catalog that powers the product page, and probes real infrastructure from your browser — nothing here is a static claim.

Live signal

A real health check, not a status page that just says green.

The tiles below are fetched from your browser against live infrastructure the moment you load this page — a genuine network round trip, not a canned animation.

Live platform pulseDirect browser probe

Brain Lite

Checking…

Durable Queue

Checking…

Secrets Vault

Checking…

Voice Brain

Checking…

Browser Reports

Checking…

Compliance

Checking…

A live signal from the infrastructure behind your workspace, checked right now from your browser. Full detail on system status.

The full catalog

Every capability, labeled honestly.

Everything marked Live is deployed and in use today. Everything marked Roadmap is not — we label it that way here and everywhere else we talk about it, including on the pricing page.

21

live Cloudflare Workers

15

live add-on capabilities

5

platform categories

6

labeled roadmap, not oversold

Billing & Ops

Live

Signup

Self-serve signup with Stripe-backed plan selection.

Cloudflare Worker

Billing & Ops

Live

Provisioner

Automated workspace provisioning — databases, configuration, and connectivity stood up the moment you sign up.

Cloudflare Worker

Billing & Ops

Live

Licensing

Ed25519-signed license issuance for self-host and desktop installs — offline-tolerant.

Cloudflare Worker

Agent Runtime

Live

MCP Gateway

The governed MCP Streamable HTTP surface every connected agent talks to.

Cloudflare Worker

Agent Runtime

Live

Swarm Hub

Durable Object hub coordinating multi-node agent swarms and failover.

Cloudflare Worker

Billing & Ops

Live

Account

Account identity, JWKS verification, and session issuance.

Cloudflare Worker

Billing & Ops

Live

Metering

Analytics Engine usage capture rolled up to Stripe Meters on a cron.

Cloudflare Worker

Memory & Brain

Live

Brain Lite

Vectorize + Workers AI embeddings — a managed semantic-recall tier that scales to zero.

Cloudflare Worker

Memory & Brain

Live

Data Lakehouse

Pipelines to R2 (Apache Iceberg) for queryable interaction-stream history at near-zero egress.

Cloudflare Worker

Agent Runtime

Live

Swarm Node

A dedicated per-workspace Brain node with alarm-driven heartbeat and clean join/leave.

Cloudflare Worker

Memory & Brain

Live

VPC Bridge

Workers VPC + Cloudflare Tunnel bridge from cloud agents to a private on-prem Brain — no public port.

Cloudflare Worker

Billing & Ops

Live

Email Service

Transactional email for magic-links, invites, and 2FA on Cloudflare Email Service.

Cloudflare Worker

Security & Compliance

Live

Secrets Vault

Account-level Secrets Store binding — central rotation, one audit surface, scoped bindings.

Cloudflare Worker

Security & Compliance

Live

Compliance

20-control NIST 800-53 Rev.5 catalog with two-person freeze/approve enforcement.

Cloudflare Worker

Edge & Delivery

Live

Durable Queue

Cloudflare Queues + DLQ behind Stripe webhooks and Brain ingest bursts — fast-ack, durable retry.

Cloudflare Worker

Edge & Delivery

Live

Edge Security

Durable Object rate limiting engine for per-workspace abuse control at the edge.

Cloudflare Worker

Agent Runtime

Live

Code Sandbox

Worker Loaders isolate per agent-authored run — outbound network blocked by the runtime itself.

Cloudflare Worker

Agent Runtime

Live

Brain Container

Dedicated compute for workspaces that need reserved capacity.

Cloudflare Worker

Edge & Delivery

Live

Custom Domains

Cloudflare for SaaS custom-hostname provisioning against the Workers Custom Domains API.

Cloudflare Worker

Agent Runtime

Live

Browser Reports

Browser Rendering generates PDF/PNG proof packs — dashboard snapshots and audit receipts on demand.

Cloudflare Worker

Agent Runtime

Live

Voice Brain

Whisper transcription in, LLM answer, natural TTS out — one gated Workers AI round trip.

Cloudflare Worker

Memory & Brain

Live

Brain Ingest

Queue new memory sources for ingestion without upgrading your plan.

Add-on

Security & Compliance

Live

Governance Manifest

Enterprise governance manifest tooling available on a non-enterprise plan.

Add-on

Billing & Ops

Live

Extra Seats

Additional named seats beyond the plan’s included count, in packs of five.

Add-on

Billing & Ops

Live

Priority Support

Priority queue on support requests with a 4-hour response SLA.

Add-on

Agent Runtime

Live

Dedicated Swarm Node

A cloud Brain node reserved for your workspace instead of the shared pool.

Add-on

Security & Compliance

Live

Federal Compliance Pack

FedRAMP-aligned controls, ISSM role, and freeze/approve audit workflow.

Add-on

Billing & Ops

Live

AI Gateway Budget Control

Every model call routed through one AI Gateway with per-workspace attribution, caching, and metered billing.

Add-on

Security & Compliance

Live

Managed Secrets Vault

Account-level Secrets Store for every per-worker credential — central rotation, one audit surface.

Add-on

Edge & Delivery

Live

Durable Ingest Queue

Durable retry behind the Stripe webhook and Brain ingest bursts — no webhook-timeout risk.

Add-on

Memory & Brain

Live

Hybrid VPC Bridge

The supported way for a cloud agent to reach your private on-prem Brain over a Cloudflare Tunnel.

Add-on

Memory & Brain

Live

Brain Lite (Vectorize)

Managed semantic recall on Vectorize + Workers AI embeddings — scales to zero, no graph to run.

Add-on

Billing & Ops

Live

Metered Recall Overage

Pay-as-you-go recall, ingest, and agent calls beyond your plan’s included pool.

Add-on

Agent Runtime

Live

Code Mode Agent Sandbox

Agent-authored JS in a fresh per-request Worker Loaders isolate — outbound network blocked.

Add-on

Agent Runtime

Live

Voice Brain

Talk to your Brain: whisper transcription, LLM answer, natural TTS — one gated round trip.

Add-on

Agent Runtime

Live

Browser Rendering Reports

On-demand PDF/PNG proof packs — dashboard snapshots, audit receipts, SBOM reports.

Add-on

Security & Compliance

Roadmap

Secure Onboarding Pack

Turnstile bot/abuse defense on signup and reset, plus email-based magic-links and 2FA.

Add-on

Agent Runtime

Roadmap

Managed OAuth + MCP Portal

Your workspace becomes a full sign-in provider for AI tools — bring any agent, on your terms.

Add-on

Memory & Brain

Roadmap

R2 Data Lakehouse

Opt-in activity history streamed to low-cost storage, queryable on demand at near-zero cost.

Add-on

Edge & Delivery

Roadmap

Edge Security Pack

Managed WAF rules, per-route rate limiting, and Bot Management across the whole zone.

Add-on

Edge & Delivery

Roadmap

Custom Brain Domain

Front your Brain on your own domain with Cloudflare for SaaS auto-provisioned certs.

Add-on

Agent Runtime

Roadmap

Dedicated Brain Container

Reserved compute for your workspace’s Brain Container instead of the shared pool.

Add-on

Security & compliance

How we protect what your agents touch.

The controls below are live in production today. For the full architecture, audit approach, and where we’re headed on formal certification, see the Trust page.

Every workspace is isolated

Your memory, configuration, and data run in their own scoped environment — never pooled with another workspace.

Credentials live in one vault

Every worker credential is centrally rotated through a managed secrets store with a single audit surface, not scattered across config files.

Two-person control on sensitive changes

The Federal Compliance add-on enforces a 20-control catalog aligned to NIST 800-53 Rev. 5, including two-person approval before a compliance freeze can be lifted.

Agent-run code is sandboxed

Code an agent writes and executes runs in a fresh, isolated environment with outbound network access blocked by the runtime itself — not by a policy an agent could talk its way around.

Built on Cloudflare’s edge

Every surface sits behind Cloudflare’s global network: TLS in transit by default, DDoS protection, and access control in front of every workspace.

A record for every sensitive action

Spend, external sends, secrets, and production changes leave a verifiable record of what happened and who approved it.