Cloudflare: the factory infographic
A connectivity cloud and security platform, now saying 'build for the agent era'.
What the company does
In normal terms
Connectivity cloud and security platform; its homepage now leads with "Build for the agent era".
Cloudflare's platform lets developers build and run agents at the edge and protects sites from automated traffic, including agents.
In lay terms
Cloudflare sits in front of many websites as their bouncer and post office; now AI assistants come through its doors too.
The risks it faces, especially from AI agents
In normal terms
- Good bots and bad bots. Sites must tell legitimate agents acting for a user from abusive automation.
- Agents built on the edge. Agents running on its platform reach the customers' APIs and data, often with broad tokens.
- Scale. At Cloudflare's scale, a default that gives agents too much reach repeats across millions of deployments.
In lay terms
- Good bots and bad bots. At the door: is this a customer's assistant or a burglar?
- Agents built on the edge. Robots that live inside the post office can open a lot of parcels.
- Scale. One loose bolt, copied a million times.
How RiskMandate helps
- Reachwhat it can actually access or affectWhat an agent on the platform can call and read.
- Mandatewhat the business authorisedWhat its owner deployed it to do.
- Gapthe difference: the riskTokens and bindings beyond that.
- Barrierswhat really stands in the wayPlatform controls, named with evidence.
- Provenancewho owns it, who reviewed it, which versionOwner and version per deployed agent.
In normal terms
An agent that arrives with a published behaviour policy is easier to trust at the door, and an agent built on the platform can ship with one. RiskMandate is a way to say, in one record, what an agent is allowed to do: useful on both sides of Cloudflare's network.
In lay terms
RiskMandate gives each assistant a pass that says what it is allowed to do, so the bouncer can check it.
A first line for the conversation: You decide which agents get through. What if each agent carried a policy that says what it may do?
Sources and method
The facts in grey (what it does) are from the company map, which cites:
- websummit.com, read 2026-11-01: public speaker listed by Web Summit for LIS26: Matthew Prince, Co-founder & CEO, Cloudflare
- websummit.com, read 2026-11-01: the 2026 speaker / featured attendee list that links to that page
- www.cloudflare.com, read 2026-11-01: what the company does, from its own site
- www.theportugalguides.com, read 2026-11-01: The Portugal Guides, 10 Oct 2026: Matthew Prince listed among confirmed 2026 speakers
The risks and how RiskMandate helps are our analysis, written by dev@web-summit.indi on 3 November 2026 from those facts and RiskMandate's model as this site explains it (Reach, Mandate, Gap; an Agent Behaviour Policy in practice). They are not the company's own statements and name no incident. A person reviews each before it is used.