Infrastructure SaaS Update Radar2026-10-23Railway confirms customer secrets were decrypted: what to rotate, in what orderRailway's October 21 incident pulled customer environment variables in encrypted form and decrypted a subset; here is what was taken, which credentials Railway already reset, and the order to rotate the rest.
Infrastructure SaaS Update Radar2026-10-16Vercel Daemons puts your Celery, Temporal, and CI-runner workers inside your Vercel projectVercel opened Daemons to public beta on October 15, giving long-running queue consumers, workflow workers, and self-hosted CI runners a place in the same project as your app — here is what the beta supports, what a running instance costs, and which teams should pilot it.
Infrastructure SaaS Update Radar2026-10-09Deno joins Cloudflare: Deno Deploy closes in six months, and celld is merging into workerdThe whole Deno team joined Cloudflare on October 9: Deno Deploy shuts down after six months with migration support to Workers, the Deno runtime gets one year of fixes, and celld merges into workerd so self-hosting Workers becomes a supported path.
Infrastructure SaaS Update Radar2026-10-02Cloudflare Sandbox SDK 1.0 hands each sandbox to a Durable Object class you write; 0.x fixes end December 31Cloudflare's September 30 Sandbox SDK 1.0 puts each sandbox under a Durable Object class you write, which picks the Linux image, instance size, lifetime, and saved filesystem — with 0.x bug fixes ending December 31.1
Infrastructure SaaS Update Radar2026-09-25Cloudflare Worker Previews: Durable Objects isolate per branch; KV, D1, and R2 need a staging bindingCloudflare's September 22 Worker Previews give every Git branch its own isolated Worker environment, Durable Objects and Containers included, while KV, D1, and R2 stay shared until you re-bind them.1
Infrastructure SaaS Update Radar2026-09-18Cloudflare scopes Workers access to one Worker: four roles to hand out instead of the accountCloudflare's September 15 update adds four Workers roles that can be granted on a single Worker, so CI pipelines, agents, and teammates can deploy without holding access to every Worker in the account.1
Infrastructure SaaS Update Radar2026-09-11Cloudflare Workflows cuts default Paid retention to 7 days: configure before post-mortems breakCloudflare reduced the default instance retention for new Workflows on Workers Paid from 30 days to seven days; review new pipeline configurations, decouple success from error retention, and prevent silent post-incident debug gaps.1
Infrastructure SaaS Update Radar2026-09-04Cloudflare D1 now enforces daily Free limits: audit row scans before they failCloudflare began returning D1 errors after Workers Free accounts exceed daily row-read or row-write quotas; audit usage, optimize scans, or evaluate Workers Paid before production traffic hits the boundary.1
Infrastructure SaaS Update Radar2026-08-28Cloudflare Durable Objects can now fan out to 10 Dynamic Workers: test the boundary, skip the migrationCloudflare raised Durable Objects’ concurrent Dynamic Workers limit from four to ten; test the higher fan-out locally without moving the rest of your stack.1
Infrastructure SaaS Update Radar2026-08-21Vercel KMS puts JWT signing behind managed keys: adopt the signer, not the platformVercel KMS beta gives Vercel Functions managed asymmetric keys, scoped grants, and public JWKS; test it for token issuance while keeping a whole-stack migration off the table.1
Infrastructure SaaS Update Radar2026-08-14Cloudflare Access now attaches to the Worker: protect every hostname without moving your appCloudflare's new Worker-level Access policies close hostname drift across routes, custom domains, and previews; adopt the policy boundary in place rather than treating it as a reason to migrate your whole stack.1
Infrastructure SaaS Update Radar2026-08-07Cloudflare AI Search gets custom domains and Access: productionize the endpoint, not the hostCloudflare’s Aug. 6 AI Search update adds custom-domain endpoints, Cloudflare Access, namespace routing, and sitemap-free discovery; adopt it to productionize search, not to justify moving the rest of your stack.