Provider profile

Cloudflare.The consolidation play.

One network for CDN, DNS, security, Zero Trust and edge compute: 330+ cities, 500 Tbps of capacity, and a free-to-enterprise ladder that starts at $0 and ends in a seven-figure platform deal. The question is rarely whether Cloudflare can do it, it’s what the consolidated bill looks like, and that’s where we come in.

AT A GLANCECloudflare
INDEX TRACKED
330+cities
125+countries
500 Tbpsnetwork capacity
2010launched, San Francisco
NETNYSE listed
$0real free plan
Network figures as published by Cloudflare, 2026 · 13,000+ peered networks
330+cities on the network
500 Tbpsexternal capacity
UnmeteredDDoS mitigation, every plan
$0where the ladder starts
Measured in your browserWe advise on speed. We practice it.Loaded just now · real numbers from this visit, not a lab score.
Page loaded
First byte
DOM ready
First paint
Largest paint
DNS lookup
TLS handshake
Transferred
Saved by compression
Requests
The CDN World scorecard

Cloudflare in seven bars.

Our advisory read, scored against the 25+ provider field we benchmark. Blue is where Cloudflare leads; gray is where the trade-offs live.

Platform breadth9.6
Self-serve velocity9.5
DDoS & network security9.4
Edge compute ecosystem9.2
Enterprise pricing transparency5.2
Media & large-file specialism6.8
Support depth below enterprise6.2

Scores are CDN World’s advisory judgment, not a lab measurement.

What Cloudflare is

Everything, on one network.

Launched in 2010 and now carrying a meaningful share of the web, Cloudflare runs a single global network, 330+ cities, 125+ countries, 500 Tbps, where every server runs every service: delivery, DNS, security, Zero Trust and the Workers developer platform. Consolidation is the pitch, and mostly it delivers.

One network, every service

No separate boxes for CDN, WAF, DNS and compute: a request hits one edge and every capability is available on it. Fewer vendors, fewer invoices, one throat to choke.

The strongest free-to-paid ladder in the market

A genuinely useful free plan, self-serve Pro and Business tiers, and an enterprise motion on top. Nothing else in the field converts developers into enterprise deals this smoothly.

DDoS as a solved problem

Unmetered mitigation on every plan, backed by the capacity headroom of the whole network. The attacks that make headlines are the ones it absorbs.

Workers changed the conversation

The Workers platform, with R2 storage famously charging no egress, KV, D1 and Durable Objects, made the edge a place you build applications, not just cache them.

Products

The platform, by line.

The current product names behind each workload, the consolidation pitch, itemized.

Delivery & performanceThe delivery line
CDN & caching · Web, apps & APIs

Anycast delivery from every city on the network, with tiered cache and cache reserve options.

Core platform
Argo Smart Routing · Route optimization

Traffic steered over the fastest measured paths across the network.

Add-on
Stream & Images · Media

Managed video delivery and on-the-fly image optimization.

Add-on
Load Balancing · Traffic management

Health-checked steering across origins and regions.

Add-on
Security & Zero TrustThe security line
DDoS Protection · Network defense

Unmetered mitigation on every plan, absorbed by network capacity.

Core platform
WAF · Application firewall

Managed rulesets with rapid zero-day response across the customer base.

Core platform
Bot Management · Bot defense

Machine-learning detection trained on traffic across a meaningful share of the web.

Add-on
Zero Trust (One) · Workforce security

Access, Gateway and WARP: the corporate-network replacement sold alongside delivery.

Add-on
Developer platformThe Workers line
Workers · Edge compute

JavaScript and Wasm at the edge, with the largest edge-developer ecosystem in the market.

Add-on
R2 Object Storage · Storage

S3-compatible storage with zero egress fees, the product that reframed cloud storage economics.

Add-on
KV, D1 & Durable Objects · Edge state

Key-value, SQL and coordinated state primitives for edge applications.

Add-on
Workers AI · Inference

Models running on network GPUs, billed per request.

Add-on
Network

Where the network runs deep.

Qualitative depth by region, our advisory read. Cloudflare’s anycast design means every city runs the full stack; mainland China is served through the JD Cloud partnership for enterprise customers with an ICP filing.

North AmericaDeep
EuropeDeep
Asia-PacificDeep
Latin AmericaStrong
Middle EastStrong
AfricaStrong
Mainland China (via JD Cloud)Partner

Depth is relative to the field we benchmark, not a PoP count; regional presence changes frequently, confirm current coverage with the provider for your specific markets.

Pricing

How Cloudflare is bought.

A ladder from $0 to seven figures, transparent at the bottom, negotiated at the top.

Procurement fileHow Cloudflare is bought
RATE CARD LIVE
$0real free plan
Self-servePro & Business tiers
Enterprisenegotiated, annual
Bundledplatform-deal economics
Free & self-serve plans

Sign up online, no sales call: the free plan carries real workloads, and the paid self-serve tiers are published, flat monthly prices.

The enterprise cliff

Contractual SLAs, named support, logs and the serious feature set live behind the enterprise wall, where pricing is annual, negotiated and opaque. The jump from Business to Enterprise routinely surprises.

Bundle economics

Enterprise deals bundle delivery, security, Zero Trust and Workers into one number, which makes the invoice tidy and the line items unbenchmarkable, unless you benchmark them deliberately.

Unmetered DDoS

Mitigation isn’t billed by attack size on any plan, one genuine pricing fear the platform removes entirely.

R2 egress

Object storage with zero egress fees changes the economics of media and data-heavy estates, and is often the wedge that starts a consolidation.

Mainland China

The China Network via JD Cloud is an enterprise add-on requiring an ICP filing, priced separately, as it should be.

The CDN World routeBenchmark your deal ↗

Self-serve plans, buy them directly, they’re priced fairly and we’ll say so. Enterprise is where we earn our keep: we unbundle the platform quote, benchmark each line against the field, model the renewal leverage, and negotiate with your usage data on the table. Consolidation should earn a discount, not hide one.

Same Cloudflare network, dashboard and support either way, the channel changes the negotiation, not the service.
Features

The technical checklist.

The line items we verify when benchmarking Cloudflare against the field, the same checklist behind our comparison pages.

DiagnosticsAcceleration & platform
HTTP/2 & HTTP/3 (QUIC)

Served at the edge; Cloudflare drove much of QUIC’s adoption.

Supported
IPv6

Dual-stack by default.

Supported
Zstandard compression

The one major CDN serving zstd to clients today.

Supported
Brotli compression

Edge compression standard.

Supported
Instant purge

Global cache invalidation by URL, tag, host or prefix.

Supported
Serve-stale

Stale content on origin failure, configurable.

Supported
Origin shield / tiering

Tiered Cache and Cache Reserve concentrate origin fetches.

Supported
WebSockets

Proxied on all plans.

Supported
Real-time logs

Logpush to your endpoints, enterprise-gated.

Enterprise
Full API & Terraform

Everything in the dashboard is API-first.

Supported
Workers

Edge compute beyond configuration.

Add-on
DiagnosticsHTTPS & content protection
Managed TLS certificates

Universal SSL on every plan, including free.

Included
Bring your own certificate

Custom certs on paid tiers.

Supported
Token auth / signed URLs

Edge validation via rules or Workers.

Supported
Geo blocking

Country-level controls in the firewall.

Supported
IP allow / deny lists

Firewall rules on every plan.

Supported
Hotlink protection

One-click, plus granular rules.

Supported
mTLS

Mutual TLS for API and origin protection.

Supported
Unmetered DDoS

Every plan, no attack-size billing.

Included
Mainland China

Enterprise add-on via JD Cloud, ICP required.

Partner
Support

Docs, humans, status.

Documentation

developers.cloudflare.com is extensive and current, with a large community filling the gaps between docs and reality.

Support tiers

Community and tickets on self-serve plans; named support, chat and response commitments arrive with enterprise.

Live status

cloudflarestatus.com, per-city detail in the open.

SLA

100%-uptime style SLAs on enterprise contracts, credit-backed; self-serve plans carry none, plan accordingly.

Our verdict

Where it wins. Where it doesn’t.

The honest summary we give clients before any Cloudflare conversation.

Choose Cloudflare when

Consolidation is the goal: delivery, security, DNS, Zero Trust and edge compute from one vendor, with a developer platform your team will actually use, and a self-serve ladder that lets you prove it before you commit.

It quietly beats rivals at

Removing whole categories of fear: unmetered DDoS, zero-egress storage, free TLS everywhere. Its pricing model deletes the anxiety line items other vendors monetize.

Think twice when

You need specialist media delivery at broadcast scale, hands-on support below the enterprise tier, or line-item pricing transparency, the platform bundle is built to resist exactly that.

And negotiate deliberately

The enterprise jump is where the economics turn opaque; walk in with benchmarks and the bundle unpacked, or accept the number on the slide. This is the single most common renewal we’re hired to fix.

FAQ

Cloudflare questions,
answered straight.

Is the free plan really free?

Yes, and genuinely useful: CDN, DNS, unmetered DDoS and a basic WAF at $0, indefinitely. It’s the top of the smartest sales funnel in the industry, you’re the pipeline, but as free tiers go, nothing else comes close.

Does Cloudflare cover mainland China?

Uniquely among Western platforms, yes: the China Network runs on JD Cloud data centers in-country, available to enterprise customers with an ICP filing, priced as its own line. We quote it honestly alongside the alternatives.

What’s the catch with enterprise pricing?

Opacity. Self-serve prices are published; enterprise is negotiated annually and bundles delivery, security, Zero Trust and Workers into one number. That number is movable, materially, when you arrive with benchmarks, which is exactly what we bring.

Is Cloudflare good for media delivery?

Competent and improving, with Stream for managed video and R2’s zero egress reshaping storage economics. For broadcast-scale live events, the media-specialist networks still carry the deeper toolkits; we benchmark both when streaming is the workload.

What are Workers and R2?

Workers runs your JavaScript or Wasm at the edge in every city on the network; R2 is S3-compatible object storage with zero egress fees. Together they’re the reason Cloudflare conversations are increasingly platform conversations, not CDN ones.

How does Cloudflare compare to Akamai?

Cloudflare wins on self-serve velocity, platform breadth and pricing psychology; Akamai wins on enterprise depth, media scale and hands-on service. The full head-to-head is in our comparison.