Fastly Blog the company blog of Fastly: latest posts and feed

Nov 2

Try the Fastly Platform Free with your AWS Account

Start a Fastly Free Trial via AWS Marketplace. Use your existing AWS account to skip procurement, reduce origin load, and streamline billing.

Oct 21

PHP2Shell: Finding the Needles in a Haystack

Oct 21

Critical RCE Vulnerabilities Discovered in Core PHP: CVE-2026-109618 and CVE-2026-109619

Discover details on critical Core PHP RCE vulnerabilities CVE-2026-109618 and CVE-2026-109619. Learn about impacts, patching guidance, and Fastly WAF protection.

Oct 21

Fastly’s Proactive Protection for PHP2Shell, Critical PHP RCE CVE-2026-109618 and CVE-2026-109619

Learn about Fastly’s proactive protection and virtual patching for the critical php2shell vulnerabilities (CVE-2026-109618 and CVE-2026-109619). Read our deep dive.

Oct 20

Building Resilience: Why We Started with Secondary DNS

Learn why starting with Secondary DNS builds instant application resilience, eliminates single points of failure, and keeps your web resolution fast and reliable.

Oct 20

CVEs and Good Corporate Citizenship

A Retrospective on the PHP2Shell Response

Oct 15

Beyond Blocking: Creative Ways to Detect and Hamper Video Piracy

Discover smart ways to mitigate live video piracy, slow down restreamers with clever CDN tricks, and protect your streams.

Oct 14

Fastly Named a Leader in the 2026 IDC MarketScape for WAAP

Fastly named a Leader in the 2026 IDC MarketScape for WAAP. Learn how Fastly protects web apps and APIs with automated defense and low false positives.

Oct 13

Defense Without Detours: Introducing Fastly Network Protect

Discover Fastly Network Protect: scalable, hardwareless Layer 3 and 4 DDoS defense with unmatched global capacity, inline protection, and zero detours.

Oct 13

AI Bot Cosplay

In a single day over 6M requests posed as AI bots to probe for.env files, Git metadata, credentials and other private files. Unpack the threat of AI bot cosplay and learn how Fastly's WAF rules can block impostors.

Oct 8

The Video Data Myth: Why AI Hasn't "Watched" the Internet Yet

AI hasn't watched the internet yet – not due to speed, but token costs and a lack of video labels. Discover the real data bottleneck.

Oct 7

High Performance by Default: Why Speed Shouldn't Be a Setup Step

Discover how Fastly's Recommended Defaults automatically optimize performance with built-in compression, HTTP/3, and TLS so speed is never a setup step.

Oct 6

Back to Basics: Insecure Deserialization

Learn what insecure deserialization is, how attackers exploit it, and how to prevent attacks using secure coding best practices and the Fastly Next-Gen WAF.

Sep 29

Fastly Unveils AEDA: Autonomous Edge Security in Gemini Enterprise

Discover Fastly’s Autonomous Edge Defense Agent (AEDA) in Gemini Enterprise, designed to streamline incident response and slash MTTR.

Sep 28

Fastly's 2025 Sustainability Report: Running the Decarbonization Marathon

Fastly’s 2025 Sustainability Report: our renewable energy commitment delivered, Scope 3 emissions focus, and what’s ahead in our sustainability work.

Sep 21

AI Feeling Out of Control? Govern, Protect, and Control Every Request with Fastly

Scale your AI securely. Fastly for AI gives enterprise leaders complete visibility into model usage, real-time cost controls, and edge-based threat protection

Sep 20

Knowledge Is Power: Control AI Bot Scraping with Fastly Bot Management

Learn how Fastly Bot Management and ContentGuard help you strategically control AI scrapers and protect your cached content in the AI era.

Sep 20

Introducing Fastly’s AI Runtime Control: Why Your AI Strategy Needs a Control Plane

Discover Fastly’s AI Runtime Control. Gain real-time visibility, manage token spend, and govern enterprise AI usage securely at the edge.

Sep 17

Building Metered Streams with MPP and Fastly Compute

Learn how to build an MPP streaming demo on Fastly Compute comparing Stripe Shared Payment Tokens and native Tempo payment sessions for pay-as-you-go agent APIs.

Sep 17

Preventing Automated Security Decisions from Impacting Critical Events

Learn how Fastly DDoS Protection's new Challenge action prevents false positives and keeps legitimate traffic flowing during critical events.

Sep 16

What is Style Smuggler (CVE-2026-75650)?

CVE-2026-75650 (StyleSmuggler) is a critical SSTI being actively exploited in ecommerce platforms. Learn what it is and how Fastly customers can stay protected.

Sep 15

The New DDoS Playbook: Lessons from Khan Academy, Yottaa, and Magnolia

Khan Academy, Yottaa, and Magnolia stop DDoS attacks with automation that reacts faster than any team could. See how Fastly protects them at scale.

Sep 9

CMCDv2: Leveling Up Your Video Streaming Telemetry

Elevate your video streaming telemetry with CMCDv2. Discover how Request, Response, and Event modes offer deeper, full-stack insights into viewer performance.

Sep 8

Accelerate Migrations: Introducing Direct Fetch for Fastly Object Storage

Accelerate your data migrations with Fastly's new Direct Fetch API for Object Storage. Transfer from S3-compatible sources directly, bypassing client limits.

Sep 3

Building Fastly Log Analytics Tools: An Open-Source Approach to Deeper Insights

Gain deeper insights with Fastly Log Analytics. Build an open-source, self-hosted dashboard to own your data, reduce vendor costs, and troubleshoot instantly.