Changelog (10)

Last updated Apr 16, 2026

2026-07-22

• Turnstile may now make requests to hagen.challenges.cloudflare.com or brunhild.challenges.cloudflare.com as part of browser verification. Add both hostnames to your network allowlist so Turnstile can access them. For more information, refer to Failed subdomain network requests during Turnstile challenges.

2024-08-12

• Added [flexible] width widget size.
• Added new dimensions for Turnstile's compact size.
• Added a Feedback Report toggle on the widget's configuration.

2024-04-10

• Added [refresh-timeout] and document new automatic interactive timeout-refresh.

2024-03-25

• Added more supported languages.

2023-12-18

• Added Pre-Clearance mode.

2023-08-24

• Added Client-side errors.

2023-07-31

• Added [turnstile.isExpired].
• Added uk language.

2023-05-25

• Added idempotency support for POST /siteverify requests via the idempotency_key parameter.

2023-04-17

• Added references to Turnstile Public API.
• Added references for [after-interactive-callback], [before-interactive-callback], and [unsupported-callback].

2023-03-06

• Added [execution] and [appearance].

2023-02-15

• Added the [turnstile.ready] callback.

2023-02-01

• Added the [data-]language parameter.

2022-12-12

• POST /siteverify supports JSON requests now.

2022-11-11

• Added retry and retry-interval for controlling retry behavior.

2022-10-28

• Renamed the [data-]expired-callback callback to [data-]timeout-callback (called when the challenge times out).
• Added the [data-]expired-callback callback (called when the token expires).

2022-10-24

• Added response-field and response-field-name for controlling the input element created by Turnstile.
• Added option for changing the size of the Turnstile widget.

2022-10-13

• Added validation for action: /^[a-z0-9_-]{0,32}$/i
• Added validation for cData: /^[a-z0-9_-]{0,255}$/i

2022-10-11

• Added turnstile.remove

Was this helpful?

YesNo

On this page

Docs

{"@context":"https://schema.org","@type":"BlogPosting","@id":"https://developers.cloudflare.com/turnstile/changelog/#page","headline":"Changelog","description":"Track the latest updates and changes to Cloudflare Turnstile.","url":"https://developers.cloudflare.com/turnstile/changelog/","inLanguage":"en","image":"https://developers.cloudflare.com/turnstile/changelog/og.png?v=51a6aaf0a2ebc19c","dateModified":"2026-04-16","publisher":{"@type":"Organization","name":"Cloudflare","description":"One platform for your apps, agents, and workforce. Build, secure, and scale without managing infrastructure","url":"https://www.cloudflare.com/","sameAs":["https://github.com/cloudflare","https://www.linkedin.com/company/cloudflare","https://x.com/cloudflare"],"logo":{"@type":"ImageObject","url":"https://developers.cloudflare.com/logo.svg"},"address":{"@type":"PostalAddress","streetAddress":"101 Townsend St","addressLocality":"San Francisco","addressRegion":"CA","postalCode":"94107","addressCountry":"US"},"contactPoint":[{"@type":"ContactPoint","contactType":"Customer Support","url":"https://support.cloudflare.com/","availableLanguage":["English"]},{"@type":"ContactPoint","contactType":"Sales","url":"https://www.cloudflare.com/contact/","availableLanguage":["English"]}]},"isPartOf":{"@type":"WebSite","@id":"https://developers.cloudflare.com/#website","name":"Cloudflare Docs","url":"https://developers.cloudflare.com/"}}

description: The Cloudflare Web Application Firewall (WAF) provides automatic protection from vulnerabilities and the flexibility to create custom rules. title: Cloudflare Web Application Firewall image: https://developers.cloudflare.com/waf/og.png?v=293443b6d6cce5fe

Skip to content

Documentation Index
Fetch the complete documentation index at: https://developers.cloudflare.com/waf/llms.txt
Use this file to discover all available pages before exploring further.