Skip to content

Changelog

New updates and improvements at Cloudflare.

Browser Isolation
hero image
  1. Remote Browser Isolation now supports Canvas Remoting, improving performance for HTML5 Canvas applications by sending vector draw commands instead of rasterized bitmaps.

    Key improvements

    • 10x bandwidth reduction: Microsoft Word and other Office apps use 90% less bandwidth
    • Smooth performance: Google Sheets maintains consistent 30fps rendering
    • Responsive terminals: Web-based development environments and AI notebooks work in real-time
    • Zero configuration: Enabled by default for all Browser Isolation customers

    How it works

    Instead of sending rasterized bitmaps for every Canvas update, Browser Isolation now:

    1. Captures Canvas draw commands at the source
    2. Converts them to lightweight vector instructions
    3. Renders Canvas content on the client

    This reduces bandwidth from hundreds of kilobytes per second to tens of kilobytes per second.

    Managing Canvas Remoting

    To temporarily disable for troubleshooting:

    • Right-click the isolated webpage background
    • Select Disable Canvas Remoting
    • Re-enable the same way by selecting Enable Canvas Remoting

    Limitations

    Currently supports 2D Canvas contexts only. WebGL and 3D graphics applications continue using bitmap rendering. For more information, refer to Canvas Remoting.

  1. Remote Browser Isolation (RBI) now supports SAML HTTP-POST bindings, enabling seamless authentication for SSO-enabled applications that rely on POST-based SAML responses from Identity Providers (IdPs) within a Remote Browser Isolation session. This update resolves a previous limitation that caused 405 errors during login and improves compatibility with multi-factor authentication (MFA) flows.

    With expanded support for major IdPs like Okta and Azure AD, this enhancement delivers a more consistent and user-friendly experience across authentication workflows. Learn how to set up Remote Browser Isolation.

  1. A new Browser Isolation Overview page is now available in the Cloudflare Zero Trust dashboard. This centralized view simplifies the management of Remote Browser Isolation (RBI) deployments, providing:

    This update consolidates previously disparate settings, accelerating deployment, improving visibility into isolation activity, and making it easier to ensure your protections are working effectively.

    Browser Isolation Overview

    To access the new overview, log in to your Cloudflare Zero Trust dashboard and find Browser Isolation in the side navigation bar.

  1. We're excited to announce that new logging capabilities for Remote Browser Isolation (RBI) through Logpush are available in Beta starting today!

    With these enhanced logs, administrators can gain visibility into end user behavior in the remote browser and track blocked data extraction attempts, along with the websites that triggered them, in an isolated session.

    {
    "AccountID": "$ACCOUNT_ID",
    "Decision": "block",
    "DomainName": "www.example.com",
    "Timestamp": "2025-02-27T23:15:06Z",
    "Type": "copy",
    "UserID": "$USER_ID"
    }

    User Actions available:

    • Copy & Paste
    • Downloads & Uploads
    • Printing

    Learn more about how to get started with Logpush in our documentation.

  1. You can now type in languages that use diacritics (like á or ç) and character-based scripts (such as Chinese, Japanese, and Korean) directly within the remote browser. The isolated browser now properly recognizes non-English keyboard input, eliminating the need to copy and paste content from a local browser or device.