Cloudflare

What the company sells

Cloudflare sells one platform for apps, agents and workforce. Cloudflare describes one network for workloads and security, close to users and close to data. Cloudflare says security, connectivity and code run in 335+ cities around the world, within 50ms of 95% of the world's population. Cloudflare says DDoS protection, WAF, bot management and Zero Trust controls are built into the network and run on every request from day one. Cloudflare says every site gets the same DDoS mitigation, the same global CDN and the same network at every tier.

On DDoS defense, Cloudflare says its DDoS protection absorbs the largest attacks with 500 Tbps of network capacity. Cloudflare Spectrum provides DDoS protection for TCP/UDP applications. Spectrum covers applications built with any protocols, including custom protocols. Magic Transit protects networks, data centers and infrastructure against layer 3 and 4 DDoS attacks. Cloudflare says Anycast absorbs and auto-routes traffic, with mitigations that trigger in seconds and no manual tuning. Cloudflare offers 24/7 email and phone support, including an Under Attack hotline.

For application security, Cloudflare says customers can deploy WAF, rate-limiting, mTLS and Bot Management with a single DNS change, with no agents and no appliances. Cloudflare says one API and dashboard covers edge rules, logs and analytics, and integrates with CI/CD for policy-as-code. Cloudflare says schema validation and mTLS protect REST/GraphQL traffic and enforce client identity, with no SDK required. Cloudflare offers free, auto-renewed certificates and modern transport. Cloudflare provides real-time dashboards plus raw logs to R2/S3/SIEM. Cloudflare says it can detect Magecart-style client-side tampering before customers' card data leaks. Cloudflare says its security platform protects 20% of the Internet.

On bot defense, Cloudflare built a platform to deploy custom machine learning models for every bot management customer. Cloudflare says Super Bot Fight Mode includes bot protection for Pro, Business and all Enterprise customers, and Enterprise Bot Management is the other bot option named.

For workforce security, Cloudflare says internal apps and developer tools can be protected with identity-based access, device posture checks and single sign-on, with no VPN required. Cloudflare says its Zero Trust platform connects and secures users, devices and data, with the first 50 employees free and a flat per-user rate beyond that.

Cloudflare also serves developers who build applications. Cloudflare says customers can bring any JavaScript framework or build tool, connect a git repository and deploy a project to a single Worker serving both front-end and back-end. Cloudflare supports Next.js, Hono, React Router, TanStack, Remix, Astro, Nuxt and RedwoodJS. Cloudflare says it charges only for compute, not wall time, even during long agent workflows or hibernating WebSockets. RealtimeKit handles WebRTC complexities, connection management and global routing. RealtimeKit Agents supports building voice bots, interactive assistants and automated support systems.

Among customers, Shopify powers commerce for millions of merchants and businesses. Shopify uses the Cloudflare WAF, Bot Management, DDoS Protection and Gateway. Cloudflare says the log-only rules in that setup let Shopify preview the impact of security changes before they reach production. Cloudflare works with partners as well: it expanded its worldwide reseller partnership with Rackspace Technology to include managed services offerings. Cloudflare says the Rackspace service includes onboarding support for Cloudflare Managed DNS, Content Delivery Network, Advanced DDoS Protection and Web Application Firewall.

Cloudflare, Inc says its suite of products protects and accelerates any Internet application online without adding hardware, installing software, or changing a line of code. Cloudflare is headquartered in San Francisco, CA, with offices in Austin, TX, Champaign, IL, New York, NY, San Jose, CA, Seattle, WA, Washington, D.C., Toronto, Dubai, Lisbon, London, Munich, Paris, Beijing, Singapore, Sydney and Tokyo. Cloudflare Radar is powered by data from Cloudflare's global network and from aggregated and anonymized data from Cloudflare's 1.1.1.1 public DNS Resolver.^{[1][11][12][13][14][15][16][17][21][22][23][24][25][26][27]}

Categories

• DDoS protection (primary category)
• WAF and WAAP
• SASE and SSE
• DNS security
• Compare Cloudflare with companies in the same categoryside by side

Headquarters

San Francisco, United States^[3][28]

Founded

2009^[4]

Ownership

Public (NYSE: NET)^{[2][10][19][20][28][31][32]}

CISO on record

Not yet on our record. Send a verified source

Website

cloudflare.com

Products and services

Product names as the company writes them; what each does, in our words, from the company's own product pages. Never how well it does it.

• DDoS Protection^{[11][12][13][25][26]}

  DDoS protection backed by 500 Tbps of network capacity.

  Cloudflare says its DDoS protection absorbs the largest attacks with 500 Tbps of network capacity. Cloudflare offers 24/7 email and phone support, including an Under Attack hotline.

• Magic Transit^[12][13]

  DDoS protection for networks at layers 3 and 4.

• Spectrum^[12][13]

  DDoS protection for TCP/UDP applications.

  Cloudflare Spectrum provides DDoS protection for TCP/UDP applications. Spectrum covers applications built with any protocols, including custom protocols.

• Bot Management^{[11][21][22][25]}

  Custom machine learning models for each bot management customer.

  Cloudflare built a platform to deploy custom machine learning models for every bot management customer. Super Bot Fight Mode includes bot protection for Pro, Business and all Enterprise customers.

• RealtimeKit^[24]

  A toolkit for real-time audio and video communication.

  RealtimeKit handles WebRTC complexities, connection management and global routing. RealtimeKit Agents supports building voice bots, interactive assistants and automated support systems.

Competitors and alternatives

The other companies on our record filed under the same categories, category by category: first those that lead with that category and share more of Cloudflare's categories, then alphabetical. A list from the record, never a ranking.

• On ddos protection, Cloudflare competes with A10 Networks, NETSCOUT, Akamai, Blackwall, Brava, Fastly, Imperva, SafeLine, DataDome, Network Critical and 2 more.

• On waf and waap, Cloudflare competes with Akamai, Fastly, Imperva, SafeLine, F5, Indusface, Blackwall, Barracuda Networks, Cequence Security, IONIX and 3 more.

• On sase and sse, Cloudflare competes with Aryaka, AT&T, Cato Networks, Dispersive Stealth Networking, Hewlett Packard Enterprise, Netskope, Skyhigh Security, Versa Networks, Zscaler, Check Point Software Technologies and 8 more.

• On dns security, Cloudflare competes with doxx.net, Infoblox, Brava, DigiCert and EasyDMARC.

What review platforms show

The headline rating and review count each platform showed in public search results on the day we looked, with the link. We do not read or reproduce the reviews, and a rating is the platform's, not ours.

• Gartner Peer Insights · no rating shown · 223 reviews^[20]seen November 3, 2026

Named customers

Organizations publicly named as customers, each linked to the page that names it. Not a complete list, and not an endorsement.

• Canva^[5]Cloudflare
• Discord^[6]Cloudflare
• Shopify^[7]Cloudflare
• Lawrence Berkeley National Laboratory^[8]Cloudflare

Recent news

Dated company events from the last twelve months, each in one sentence of ours with its source. Newest first.

• October 9, 2026

  Cloudflare announced that the Deno team is joining the company, with the stated aim of simplifying self-hosting of Workers and Durable Objects. Cloudflare Blog^[18]

• August 6, 2026

  Cloudflare reported second-quarter 2026 revenue of $696.1 million, up 36% year over year. Cloudflare^[9]

• June 4, 2026

  Cloudflare acquired VoidZero, the open source company behind the Vite JavaScript build tooling ecosystem. Cloudflare^[10]

• May 7, 2026

  Cloudflare reported first-quarter 2026 revenue of $639.8 million, up 34% year over year. Cloudflare^[2]

• April 14, 2026

  Cloudflare announced Cloudflare Mesh, a private networking solution built for AI agents. Cloudflare^[32]

• January 16, 2026

  Cloudflare announced that The Astro Technology Company, creator of the Astro web framework, is joining Cloudflare, and Astro will remain open source. Cloudflare^[30]

• January 15, 2026

  Cloudflare announced it has acquired Human Native, an AI data marketplace that connects creators and AI developers. Cloudflare^[31]

• November 17, 2025

  Cloudflare announced an agreement to acquire Replicate, an AI platform for deploying and running AI models. Cloudflare^[29]

References

Every fact above cites one of these by number. Tier A is the company itself, a regulator or a filing; tier B is trade or business press.

1. [1]cloudflare.comCloudflare · cloudflare.com · undated page, accessed September 27, 2026 · Tier A: the company, a regulator or a filing
2. [2]Cloudflare announces first quarter 2026 financial resultsCloudflare · cloudflare.com · published May 7, 2026 · Tier A: the company, a regulator or a filing
3. [3]About overviewCloudflare · cloudflare.com · undated page, accessed September 27, 2026 · Tier A: the company, a regulator or a filing
4. [4]Technologys promise def con china 1 0 highlightsCloudflare · blog.cloudflare.com · published June 5, 2019 · Tier A: the company, a regulator or a filing
5. [5]CanvaCloudflare · cloudflare.com · undated page, accessed October 10, 2026 · Tier A: the company, a regulator or a filing
6. [6]DiscordCloudflare · cloudflare.com · undated page, accessed October 10, 2026 · Tier A: the company, a regulator or a filing
7. [7]ShopifyCloudflare · cloudflare.com · undated page, accessed October 10, 2026 · Tier A: the company, a regulator or a filing
8. [8]Lawrence berkeley national laboratoryCloudflare · cloudflare.com · undated page, accessed October 10, 2026 · Tier A: the company, a regulator or a filing
9. [9]Cloudflare announces second quarter 2026 financial resultsCloudflare · cloudflare.com · published August 6, 2026 · Tier A: the company, a regulator or a filing
10. [10]Cloudflare acquires voidzero to build the future of the ai native webCloudflare · cloudflare.com · published June 4, 2026 · Tier A: the company, a regulator or a filing
11. [11]Cloudflare: Build for the agent eraCloudflare · undated page, accessed October 23, 2026 · Tier A: the company, a regulator or a filing
12. [12]Cloudflare DDoS Protection & Mitigation SolutionsCloudflare · undated page, accessed October 23, 2026 · Tier A: the company, a regulator or a filing
13. [13]Magic Transit - Unmatched DDoS Protection for NetworksCloudflare · undated page, accessed October 23, 2026 · Tier A: the company, a regulator or a filing
14. [14]US Privacy Law Compliance FAQs | CloudflareCloudflare · undated page, accessed October 23, 2026 · Tier A: the company, a regulator or a filing
15. [15]Cloudflare Stream - All-in-one Video PlatformCloudflare · undated page, accessed October 23, 2026 · Tier A: the company, a regulator or a filing
16. [16]Cloudflare Artifacts - Versioned Git-compatible storage for agentsCloudflare · undated page, accessed October 23, 2026 · Tier A: the company, a regulator or a filing
17. [17]Cloudflare AI Search - Automatic RAG infrastructure and queryingCloudflare · undated page, accessed October 23, 2026 · Tier A: the company, a regulator or a filing
18. [18]Posts tagged "Acquisitions" — Cloudflare BlogCloudflare Blog · published October 9, 2026 · Tier A: the company, a regulator or a filing
19. [19]Cloudflare Application Security and Performance Reviews 2026 - G2G2 · undated page, accessed October 23, 2026 · Tier C
20. [20]Cloudflare Reviews, Ratings & Features 2026 | Gartner Peer InsightsGartner Peer Insights · undated page, accessed October 23, 2026 · Tier C
21. [21]Web Security Platform - WAF, DDoS Protection, Bot ManagementCloudflare · undated page, accessed November 3, 2026 · Tier A: the company, a regulator or a filing
22. [22]Building unique, per-customer defenses against advanced bot threats in the AI era | Cloudflare BlogCloudflare Blog · undated page, accessed November 3, 2026 · Tier A: the company, a regulator or a filing
23. [23]Frontend Development PlatformCloudflare · undated page, accessed November 3, 2026 · Tier A: the company, a regulator or a filing
24. [24]Cloudflare RealtimeKit - Voice, Video & Multimodal AppsCloudflare · undated page, accessed November 3, 2026 · Tier A: the company, a regulator or a filing
25. [25]Shopify & Cloudflare | Customer StoryCloudflare · undated page, accessed November 3, 2026 · Tier A: the company, a regulator or a filing
26. [26]Cloudflare and Rackspace Technology Expand Partnership with Managed Services | Cloudflare BlogCloudflare Blog · undated page, accessed November 3, 2026 · Tier A: the company, a regulator or a filing
27. [27]Cloudflare Partner Program Now Supports SASE & Zero Trust Managed Services | Cloudflare BlogCloudflare Blog · undated page, accessed November 3, 2026 · Tier A: the company, a regulator or a filing
28. [28]About | Cloudflare RadarCloudflare Radar · undated page, accessed November 3, 2026 · Tier A: the company, a regulator or a filing
29. [29]Cloudflare to Acquire Replicate to Build the Most Seamless AI Cloud for DevelopersCloudflare · published November 17, 2025 · Tier A: the company, a regulator or a filing
30. [30]Cloudflare Acquires Astro to Accelerate the Future of High-Performance Web DevelopmentCloudflare · published January 16, 2026 · Tier A: the company, a regulator or a filing
31. [31]Cloudflare Strengthens Content Offering to AI Companies with Acquisition of Human NativeCloudflare · published January 15, 2026 · Tier A: the company, a regulator or a filing
32. [32]Cloudflare Launches Mesh to Secure the AI Agent LifecycleCloudflare · published April 14, 2026 · Tier A: the company, a regulator or a filing

Last verified October 10, 2026. Our code found the quoted passage behind each fact on its source page when the fact was recorded, and re-checks every record against its sources each month.

Recorded September 27, 2026, expanded November 3, 2026 from the references above.

Work for Cloudflare? Suggest a correction to a fact on this page (with a source on your own domain), or claim this entry by publishing a small file on your domain.