Cloudflare announced new programmable capabilities for Gateway and Data Loss Prevention. The release includes a Forward action and custom validation functions that can use Workers code during policy evaluation.
What the extension point enables
- A Worker can transform or manipulate traffic as part of a policy decision.
- Custom validation functions can bring application-specific data into that evaluation.
- Cloudflare says the capabilities are available on Zero Trust plans, subject to the product's documented requirements.
The post frames this as a way to handle policies that need custom logic without maintaining a separate proxy for each exception. It does not remove the need to review code, data access, and failure behavior in the policy path.
Before adopting the feature, verify current availability and test how errors or timeouts affect traffic. The official post explains the supported action and validation model.