One network, every service
No separate boxes for CDN, WAF, DNS and compute: a request hits one edge and every capability is available on it. Fewer vendors, fewer invoices, one throat to choke.
Provider profile
Cloudflare.The consolidation play.
One network for CDN, DNS, security, Zero Trust and edge compute: 330+ cities, 500 Tbps of capacity, and a free-to-enterprise ladder that starts at $0 and ends in a seven-figure platform deal. The question is rarely whether Cloudflare can do it, it’s what the consolidated bill looks like, and that’s where we come in.
- One network, every service
- The strongest free-to-paid ladder in the market
- DDoS as a solved problem
- Workers changed the conversation
CloudflareNo. 08/13
330+cities125+countries500 Tbpsnetwork capacity2010launched, San FranciscoNETNYSE listed$0real free planCDN World index · benchmarked
330+cities125+countries500 Tbpsnetwork capacity2010launched, San FranciscoNETNYSE listed$0real free planCDN World index · benchmarkedNetwork figures as published by Cloudflare, 2026 · 13,000+ peered networks
330+cities on the network
500 Tbpsexternal capacity
UnmeteredDDoS mitigation, every plan
$0where the ladder starts
The CDN World scorecard
Cloudflare in seven bars.
Our advisory read, scored against the 25+ provider field we benchmark. Blue is where Cloudflare leads; gray is where the trade-offs live.
Platform breadth9.6
Self-serve velocity9.5
DDoS & network security9.4
Edge compute ecosystem9.2
Enterprise pricing transparency5.2
Media & large-file specialism6.8
Support depth below enterprise6.2
Scores are CDN World’s advisory judgment, not a lab measurement.
What Cloudflare is
Everything, on one network.
Launched in 2010 and now carrying a meaningful share of the web, Cloudflare runs a single global network, 330+ cities, 125+ countries, 500 Tbps, where every server runs every service: delivery, DNS, security, Zero Trust and the Workers developer platform. Consolidation is the pitch, and mostly it delivers.
The strongest free-to-paid ladder in the market
A genuinely useful free plan, self-serve Pro and Business tiers, and an enterprise motion on top. Nothing else in the field converts developers into enterprise deals this smoothly.
DDoS as a solved problem
Unmetered mitigation on every plan, backed by the capacity headroom of the whole network. The attacks that make headlines are the ones it absorbs.
Workers changed the conversation
The Workers platform, with R2 storage famously charging no egress, KV, D1 and Durable Objects, made the edge a place you build applications, not just cache them.
Products
The platform, by line.
The current product names behind each workload, the consolidation pitch, itemized.
Delivery & performanceThe delivery line
CDN & caching · Web, apps & APIs
Core platformAnycast delivery from every city on the network, with tiered cache and cache reserve options.
Argo Smart Routing · Route optimization
Add-onTraffic steered over the fastest measured paths across the network.
Stream & Images · Media
Add-onManaged video delivery and on-the-fly image optimization.
Load Balancing · Traffic management
Add-onHealth-checked steering across origins and regions.
Security & Zero TrustThe security line
DDoS Protection · Network defense
Core platformUnmetered mitigation on every plan, absorbed by network capacity.
WAF · Application firewall
Core platformManaged rulesets with rapid zero-day response across the customer base.
Bot Management · Bot defense
Add-onMachine-learning detection trained on traffic across a meaningful share of the web.
Zero Trust (One) · Workforce security
Add-onAccess, Gateway and WARP: the corporate-network replacement sold alongside delivery.
Developer platformThe Workers line
Workers · Edge compute
Add-onJavaScript and Wasm at the edge, with the largest edge-developer ecosystem in the market.
R2 Object Storage · Storage
Add-onS3-compatible storage with zero egress fees, the product that reframed cloud storage economics.
KV, D1 & Durable Objects · Edge state
Add-onKey-value, SQL and coordinated state primitives for edge applications.
Workers AI · Inference
Add-onModels running on network GPUs, billed per request.
Network
Where the network runs deep.
Qualitative depth by region, our advisory read. Cloudflare’s anycast design means every city runs the full stack; mainland China is served through the JD Cloud partnership for enterprise customers with an ICP filing.
North AmericaDeep
EuropeDeep
Asia-PacificDeep
Latin AmericaStrong
Middle EastStrong
AfricaStrong
Mainland China (via JD Cloud)Partner
Depth is relative to the field we benchmark, not a PoP count; regional presence changes frequently, confirm current coverage with the provider for your specific markets.
Pricing
How Cloudflare is bought.
A ladder from $0 to seven figures, transparent at the bottom, negotiated at the top.
Procurement fileHow Cloudflare is bought
RATE CARD LIVE$0real free plan
Self-servePro & Business tiers
Enterprisenegotiated, annual
Bundledplatform-deal economics
- Free & self-serve plans
Sign up online, no sales call: the free plan carries real workloads, and the paid self-serve tiers are published, flat monthly prices.
- The enterprise cliff
Contractual SLAs, named support, logs and the serious feature set live behind the enterprise wall, where pricing is annual, negotiated and opaque. The jump from Business to Enterprise routinely surprises.
- Bundle economics
Enterprise deals bundle delivery, security, Zero Trust and Workers into one number, which makes the invoice tidy and the line items unbenchmarkable, unless you benchmark them deliberately.
- Unmetered DDoS
Mitigation isn’t billed by attack size on any plan, one genuine pricing fear the platform removes entirely.
- R2 egress
Object storage with zero egress fees changes the economics of media and data-heavy estates, and is often the wedge that starts a consolidation.
- Mainland China
The China Network via JD Cloud is an enterprise add-on requiring an ICP filing, priced separately, as it should be.
The CDN World routeBenchmark your deal ↗
Self-serve plans, buy them directly, they’re priced fairly and we’ll say so. Enterprise is where we earn our keep: we unbundle the platform quote, benchmark each line against the field, model the renewal leverage, and negotiate with your usage data on the table. Consolidation should earn a discount, not hide one.
Same Cloudflare network, dashboard and support either way, the channel changes the negotiation, not the service.
Features
The technical checklist.
The line items we verify when benchmarking Cloudflare against the field, the same checklist behind our comparison pages.
DiagnosticsAcceleration & platform
HTTP/2 & HTTP/3 (QUIC)
SupportedServed at the edge; Cloudflare drove much of QUIC’s adoption.
IPv6
SupportedDual-stack by default.
Zstandard compression
SupportedThe one major CDN serving zstd to clients today.
Brotli compression
SupportedEdge compression standard.
Instant purge
SupportedGlobal cache invalidation by URL, tag, host or prefix.
Serve-stale
SupportedStale content on origin failure, configurable.
Origin shield / tiering
SupportedTiered Cache and Cache Reserve concentrate origin fetches.
WebSockets
SupportedProxied on all plans.
Real-time logs
EnterpriseLogpush to your endpoints, enterprise-gated.
Full API & Terraform
SupportedEverything in the dashboard is API-first.
Workers
Add-onEdge compute beyond configuration.
DiagnosticsHTTPS & content protection
Managed TLS certificates
IncludedUniversal SSL on every plan, including free.
Bring your own certificate
SupportedCustom certs on paid tiers.
Token auth / signed URLs
SupportedEdge validation via rules or Workers.
Geo blocking
SupportedCountry-level controls in the firewall.
IP allow / deny lists
SupportedFirewall rules on every plan.
Hotlink protection
SupportedOne-click, plus granular rules.
mTLS
SupportedMutual TLS for API and origin protection.
Unmetered DDoS
IncludedEvery plan, no attack-size billing.
Mainland China
PartnerEnterprise add-on via JD Cloud, ICP required.
Support
Docs, humans, status.
Documentation
developers.cloudflare.com is extensive and current, with a large community filling the gaps between docs and reality.
Support tiers
Community and tickets on self-serve plans; named support, chat and response commitments arrive with enterprise.
Live status
cloudflarestatus.com, per-city detail in the open.
SLA
100%-uptime style SLAs on enterprise contracts, credit-backed; self-serve plans carry none, plan accordingly.
Our verdict
Where it wins. Where it doesn’t.
The honest summary we give clients before any Cloudflare conversation.
Choose Cloudflare when
Consolidation is the goal: delivery, security, DNS, Zero Trust and edge compute from one vendor, with a developer platform your team will actually use, and a self-serve ladder that lets you prove it before you commit.
It quietly beats rivals at
Removing whole categories of fear: unmetered DDoS, zero-egress storage, free TLS everywhere. Its pricing model deletes the anxiety line items other vendors monetize.
Think twice when
You need specialist media delivery at broadcast scale, hands-on support below the enterprise tier, or line-item pricing transparency, the platform bundle is built to resist exactly that.
And negotiate deliberately
The enterprise jump is where the economics turn opaque; walk in with benchmarks and the bundle unpacked, or accept the number on the slide. This is the single most common renewal we’re hired to fix.
Go deeper
Cloudflare across the site.
The benchmarked head-to-heads and working guides that pair with this profile.
FAQCloudflare questions,
Cloudflare questions,
answered straight.
Is the free plan really free?
Yes, and genuinely useful: CDN, DNS, unmetered DDoS and a basic WAF at $0, indefinitely. It’s the top of the smartest sales funnel in the industry, you’re the pipeline, but as free tiers go, nothing else comes close.
Does Cloudflare cover mainland China?
Uniquely among Western platforms, yes: the China Network runs on JD Cloud data centers in-country, available to enterprise customers with an ICP filing, priced as its own line. We quote it honestly alongside the alternatives.
What’s the catch with enterprise pricing?
Opacity. Self-serve prices are published; enterprise is negotiated annually and bundles delivery, security, Zero Trust and Workers into one number. That number is movable, materially, when you arrive with benchmarks, which is exactly what we bring.
Is Cloudflare good for media delivery?
Competent and improving, with Stream for managed video and R2’s zero egress reshaping storage economics. For broadcast-scale live events, the media-specialist networks still carry the deeper toolkits; we benchmark both when streaming is the workload.
What are Workers and R2?
Workers runs your JavaScript or Wasm at the edge in every city on the network; R2 is S3-compatible object storage with zero egress fees. Together they’re the reason Cloudflare conversations are increasingly platform conversations, not CDN ones.
How does Cloudflare compare to Akamai?
Cloudflare wins on self-serve velocity, platform breadth and pricing psychology; Akamai wins on enterprise depth, media scale and hands-on service. The full head-to-head is in our comparison.
All product names, logos and brands are the property of their respective owners and are used for identification purposes only. CDN World is an independent advisory and is not endorsed by, sponsored by, or affiliated with any provider listed unless expressly stated. Provider information is published for general information and may change without notice, please confirm current details directly with the provider before relying on them.