Summary
Cloudflare put an identity-aware AI Gateway into open beta and made its User Insights feature generally available at no extra cost. Integrated with Cloudflare Access, it builds per-account behavioral baselines and flags sessions that deviate from normal usage, for example comparing a session's cost against an account's trailing 30-day p95 and alerting when spend exceeds 2x that baseline, to surface compromised credentials or misbehaving agents.
What changed
On August 5, 2026 Cloudflare launched the identity-aware AI Gateway (with Cloudflare Access) in open beta and made User Insights generally available to all AI Gateway customers at no additional cost, adding per-account behavioral baselines and anomaly alerts such as spend exceeding 2x the trailing 30-day p95 session cost.
Why it matters
As agents drive more model traffic, spend and data-exfiltration risk shift from human users to autonomous sessions. Tying AI Gateway telemetry to identity lets teams detect insider risk and runaway or hijacked agents by behavior rather than static rules, giving security teams a usage-and-cost tripwire for the agentic layer.
Evidence excerpt
Identity-aware AI Gateway with Cloudflare Access is now in open beta, and User Insights is generally available to every AI Gateway customer at no additional cost.