Cloudflare’s URL Scanner, new features, and the story of how we built it

Cloudflare details new capabilities for its URL Scanner, including Security Center integration, an official API with custom headers, multi-device screenshots, unlisted (private) scans, malicious verdicts, and CSP/SRI violation reporting, alongside enhanced search across scanned URLs and resources. The post outlines use cases (phishing/malware detection, tech analysis, risk assessment) and the underlying architecture leveraging Workers, Durable Objects, R2, Queues, and the Browser Rendering API with Puppeteer, provides sample API patterns, and previews future features like geographic scans, richer scan details, and performance improvements.