Cloudflare Logpush comes to Free, Pro and Business plans
Cloudflare opened Logpush, SQL log transformers, custom dashboards and per-resource RBAC to every plan. Ship your raw logs to storage you own.
Enterprise-only logging just stopped being enterprise-only. On October 2, Cloudflare said Logpush is now available on Free, Pro and Business plans with self-service, pay-as-you-go pricing. That is the feature that streams your raw request, firewall and Workers logs to your own storage. It came with SQL log transformers, custom dashboards, wider role-based access and a set of higher Workers limits.
What actually happened
Cloudflare's update post reports on its pledge, made a year ago, to make every feature available to every customer. The key items:
- Logpush on all plans, with new datasets: account-level firewall events, WebSocket analytics and post-quantum visibility per zone. The post does not list per-unit prices, so check your billing page before you turn it on.
- Logpush Transformers, now GA on all plans. You write SQL to drop noise, redact sensitive fields, enrich events and reformat logs before they leave Cloudflare.
- Custom dashboards on all plans.
- RBAC on nearly all products at account and zone level. Workers, R2 and Access now support roles on single resources.
- Higher limits on all plans: Worker startup time goes to 1 second from 400 ms, WebSocket messages to 32 MiB from 1 MiB, subrequests to 1 million per request from 1,000, and Browser Run concurrency to 200 from 30.
Cloudflare also says every GA feature it launched that week on an Enterprise plan is available to pay-as-you-go customers too.
Why it matters for your business
Most small shops we work with run Cloudflare on Pro or Business and see their traffic only through the dashboard. When a checkout breaks or a bot hits the login page, the data you need lives in Cloudflare's UI for a limited time, in Cloudflare's format.
Own the raw record. Push HTTP and firewall logs to an R2 or S3 bucket you control. When you need to answer "what happened at 2:14 a.m.," you query your own data, not a dashboard.
Redact at the edge. Use Transformers to strip emails, tokens and full IP addresses before they reach storage. The less personal data you keep, the less you have to protect.
Give access per resource. A contractor who maintains one Worker can now get access to that Worker only, not the whole account. Use it.
Key takeaways
- Cloudflare Logpush is now on Free, Pro and Business plans at pay-as-you-go pricing
- SQL Transformers filter and redact logs before delivery, on every plan
- Workers, R2 and Access now support RBAC on a single resource
- Worker startup, WebSocket, subrequest and Browser Run limits went up on all plans
- Prices were not in the announcement; check billing before you push high-volume logs
Want logs you actually own? We wire Cloudflare Logpush into storage and alerts you control, with redaction set up front. See our services, or tell us what you need to see.
Sources: Cloudflare blog: Updates on our pledge to make Cloudflare features accessible to everyone.
- #cloudflare
- #logpush
- #rbac
- #observability
- #workers
Tommy Rush — Founder, Rush Commerce
Operator turned builder. 15+ years running operations — now shipping the systems businesses run on. More
Get The Rush Report weekly — one email, zero fluff.
Keep reading
Perplexity Decisions API: $0.04 per million, open weights too
Perplexity launched a Decisions API on pplx-decider-v1-27b at $0.04 per million input tokens, with Apache 2.0 weights. Price your ticket routing again.
Read itCloudflare Protected Quick Tunnels: share localhost with a guest list
Cloudflare Protected Quick Tunnels add an --allowed-mail flag to cloudflared 2026.9.3. Share a local app by URL, but only verified emails get in. Free.
Read it