Cloudflare adds programmable Gateway and DLP controls using Workers, with Forward in public beta and Custom Functions planned

Cloudflare announced programmable extensions for Cloudflare Gateway and DLP that let customers run Workers inline with security decisions, available to all Zero Trust plans. The new Forward action is in public beta now for routing matched HTTP requests through a Worker to transform traffic or trigger async actions; Custom Functions for inline policy evaluation are planned before year-end.

Teams that currently run separate proxies or webhook pipelines for custom Gateway behavior could move some of that logic into Workers, reducing infrastructure to patch and monitor. The trade-off is that security policy becomes partly code-driven, so builders must manage testing and governance; the article does not specify limits, failure behavior, or production-readiness beyond Forward being in public beta and Custom Functions still planned.