Cloudflare
Cloudflare runs CDN, DDoS protection, Zero Trust access, and Workers edge compute on one network within 50ms of 95% of the world.
For agent and API workloads, CPU-time billing is the feature that actually changes your bill, and the 2026 shipped work backs it up: production CPU and memory profiling, Clef-omni multimodality, faster and cheaper Clef inference. Zero Trust at $0 for 50 employees and R2's zero egress are hard to match on price. Just don't treat Workers as a general-purpose cluster — CPU-bound batch jobs still belong on a hyperscaler, and there is no on-prem option.
Verified 16h ago · liveness 81/100 · cite: rightaichoice.com/tools/cloudflare
- Developers shipping APIs and AI agents that shouldn't be billed for idle LLM wait time
- Security teams consolidating CDN, WAF, DDoS and Zero Trust onto one dashboard and one bill
- Teams that want 100k daily Workers requests, 10GB R2 storage and 50 Zero Trust seats at $0
- Engineering teams that need production CPU and memory profiling for serverless workloads
- CPU-bound batch jobs, large in-memory processing, or anything needing a persistent machine
- Organizations that require on-premises, self-hosted or air-gapped deployment
- Heavy AWS shops where IAM, VPC and Lambda are woven through everything and migration costs exceed savings
We scan live Reddit threads, YouTube comments, X posts, G2 reviews and other communities — and hand you an honest verdict in under a minute.
- Honest verdict, not marketing
- Real pros & cons from real users
- Attributed quotes with receipts
3 free scans · no card needed
Skip Cloudflare if you need CPU-bound batch processing, on-premises or air-gapped deployment, or enterprise SASE features like unlimited CASB and DLP without signing a custom annual contract.
Free Workers covers 100k requests/day; past that requests bill at $0.30 per million and CPU time at $0.02 per million CPU ms.
Expect around $5/mo to start usage-billed Workers, $20/mo billed annually ($25/mo billed monthly) for Pro, and $200/mo billed annually ($250/mo billed monthly) for Business. Zero Trust is free under 50 users, then $7/user/month — well under typical enterprise SASE per-seat contracts, but full CASB and DLP require a custom annual price.
In short
Cloudflare — Cloudflare runs CDN, DDoS protection, Zero Trust access, and Workers edge compute on one network within 50ms of 95% of the world. Best for Developers shipping APIs and AI agents that shouldn't be billed for idle LLM wait time, Security teams consolidating CDN, WAF, DDoS and Zero Trust onto one dashboard and one bill, Teams that want 100k daily Workers requests, 10GB R2 storage and 50 Zero Trust seats at $0. Free to start; paid plans from $5/mo.
What's new in Cloudflare
Checked todayAcross the latest 7 updates: 3 feature updates, 1 launch and 3 news mentions.
On-demand CPU and memory profiling for Workers and Durable Objects
Production flamegraph profiling now available for Workers and Durable Objects to track memory leaks and performance bottlenecks.
Cloudflare adds Clef-omni model with full multimodality
Clef-omni processes audio, video, images and text in one pipeline; Clef-flash pricing cut and Clef inference up to 2.0x faster.
Deno is joining Cloudflare
Deno team joins Cloudflare to simplify self-hosting Workers and Durable Objects, letting developers use the same primitives in more places.
Cloudflare Radar gets a redesign
Radar redesigned with an interactive map and standardized components, aimed at journalists and less technical users.
Cloudflare Managed Defense runs agentic security ops harness
Managed Defense uses specialized AI agents on Workers and network telemetry, separating evidence collection from model inference.
DNS root KSK-2024 rollover set for October 11
DNS root switches to new key-signing key KSK-2024; RFC 8509 trust anchor sentinels let operators test resolver readiness.
Everything Cloudflare launched during Birthday Week 2026
16th birthday roundup: 46 announcements across open source, post-quantum security, AI agents and developer platform upgrades.
What people actually say about Cloudflare — is it worth it?
We ran a structured research pass across product reviews, community discussions, and post-purchase forum threads to surface the patterns vendors won't publish themselves. Below: the recurring strengths, the hidden costs people mention most, and the cohort that consistently regrets adopting this tool.
30 mentions across 7 sources (Reddit, Hacker News, YouTube, Product Hunt, App Store, Stack Overflow, Lemmy), 83 more we could not attribute · researched Oct 16, 2026.
Weighted by the 113 posts each of 7 sources contributed.
- +Free tier includes unmetered DDoS, Universal SSL, and global CDN — unmatched value at $0
- +Workers bills on CPU time, so LLM wait and hibernating WebSockets don't burn budget
- +R2 object storage has no egress fees — a real line-item saver versus S3
- +Zero Trust is free for the first 50 employees, then only $7 per active user
- +Global network within ~50ms of 95% of users, per Cloudflare's own positioning
- −Support is widely described as slow or absent, especially below Enterprise
- −November 2025 global outage took many sites down, proving single-provider fragility
- −WARP and Zero Trust have reported DNS REFUSED and iOS reconnect-loop bugs on managed endpoints
- −Workers dev-to-prod gap causes unexplained 500s where local worked fine
- −AI crawler traffic can quietly run up bandwidth bills if Bot Fight Mode isn't tuned
- • AI crawler traffic can spike bandwidth bills — one Lemmy user reported a $155 overage after bots hammered their site
- • High-volume Workers requests add up fast at $0.30 per million
- • $7/active user/mo Zero Trust pricing surprises teams that thought Zero Trust was always free
- • Add-on features (Advanced WAF, Image Resizing, Argo) are billed separately from base plans
Viability Score
How well maintained and how widely used is Cloudflare? Built from what the vendor actually publishes (docs, changelog, tutorials, integrations, pricing), whether the site is live, and how much real users discuss it. How we calculate this
Last calculated: October 2026
How we score →Key Features
- Global CDN delivering content from 335+ cities, within 50ms of 95% of the world's population
- Unmetered DDoS mitigation and WAF running on every request from every tier
- Workers serverless functions billed on CPU time, never wall-clock wait time
- On-demand CPU and memory profiling for Workers and Durable Objects with production flamegraphs
- Containers running any language in secure global containers with up to 20 GB disk per instance
- Durable Objects for stateful real-time coordination and SQLite-backed storage
- R2 object storage with no egress fees
- D1 serverless SQL database and Workers KV global key-value store
- Workflows for multi-step orchestration and Browser Rendering for headless browsers
- Workers AI inference at the edge including the Clef-omni multimodal model (audio, video, image, text)
- Clef-flash with reduced pricing and Clef inference up to 2.0x faster
- AI Gateway with real-time spend limits and User Insights across model providers
- AI Search for agentic search over your own data, plus Vectorize and Agent Memory
- Zero Trust platform (ZTNA, SWG, DEX) with 100% uptime SLA on paid tiers
- Managed Defense agentic security operations using AI agents on Workers and network telemetry
About Cloudflare
Cloudflare sells one network for application delivery, workforce security, and edge compute. A Free plan covers unmetered DDoS mitigation, Universal SSL, managed rules, and a global CDN — paid tiers add depth rather than baseline protection. On the compute side, Workers bills CPU time instead of wall clock: the company's own example charges a 2,500ms LLM call that burns 0.5ms of CPU as 0.5ms, so long agent loops and hibernating WebSockets don't meter waiting. Around Workers sit Durable Objects for stateful coordination, Containers for any language, R2 object storage with no egress fees, D1 SQL, Workers KV, Workflows, Browser Rendering, and Workers for Platforms. Paid usage starts at $5/mo with $0.30 per million requests and $0.02 per million CPU ms; Zero Trust is free for the first 50 employees, then $7 per active user per month. The recent cadence is heavier on operations and AI than on new primitives. On-demand CPU and memory profiling now produces production flamegraphs for Workers and Durable Objects, which turns memory-leak hunting from guesswork into a trace. Clef-omni joined the model lineup with audio, video, image and text in a single pipeline, Clef-flash pricing dropped, and Clef inference got up to 2.0x faster. Deno's team joining Cloudflare points at self-hosting Workers and Durable Objects with the same primitives, though that's direction, not a shipped product you can buy today. Birthday Week 2026 carried 46 announcements, and Managed Defense now runs an agentic security-ops harness. Typical buyers are developers deploying APIs and AI agents who refuse to pay for idle LLM wait time, and security teams collapsing CDN, WAF, DDoS and Zero Trust onto one dashboard and one invoice. Almost everything self-serve starts without a credit card. Versus AWS, GCP, or Azure, the pitch is fewer primitives to assemble and predictable spend — not raw compute breadth. Versus Fastly or Akamai on the edge, the difference is Zero Trust and AI tooling sitting on the
Behind the Verdict
We'd reach for Cloudflare when the workload is request-shaped and spiky. An API that calls an LLM for two seconds and computes for half a millisecond is the exact case Workers was priced for, and paying $0.02 per million CPU ms instead of per wall-clock second is a structural saving, not a discount. Pair it with AI Gateway's spend limits and you have a cost ceiling you can defend to finance. The 90-day news cycle makes the operations story the interesting one. Production flamegraph profiling for Workers and Durable Objects is the kind of feature you only appreciate after a leak takes down a Durable Object at 3am — having it on-demand, in production, is a real upgrade over local-only tooling. Clef-omni processing audio, video, images and text in one pipeline, plus a Clef-flash price cut and up to 2.0x faster Clef inference, means the inference layer is getting cheaper and broader at the same time. Where it bites: Workers is not a general-purpose compute cluster. CPU-bound batch processing, large in-memory jobs, and anything needing a persistent box with a specific kernel hit its limits fast — that work belongs on AWS, GCP or Azure. There is no self-hosted or air-gapped deployment; everything runs on Cloudflare's network, which is fine until a regulator or an internal policy says otherwise. Teams already deep in AWS with IAM, VPC and Lambda wired into everything should price the migration honestly before switching, because the consolidation savings rarely cover the rewrite. On security, the arithmetic is simple: Zero Trust free for the first 50 employees, then $7 per active user per month on pay-as-you-go, with 100% uptime SLA and 30-day logs at that tier. Against Zscaler or an Okta-priced stack, that's a different order of magnitude for a mid-size company. Log
Researching Cloudflare? Get your full AI stack in 60 seconds.
Free, no signup — tell us your goal and get tools matched to your budget & existing stack.
Real-world workflow fit
Concrete scenarios for the personas Cloudflare actually fits — and what changes day-one when you adopt it.
Deploys a Worker that calls two model providers, routes traffic through AI Gateway with a spend limit, and stores conversation state in Durable Objects.
Outcome: Runs on the Free tier or a $5/mo Workers plan, with CPU-time billing keeping the bill tied to actual compute rather than LLM wait time.
Moves a marketing site onto Cloudflare CDN with WAF and image optimization, then puts Zero Trust in front of internal tools for a 12-person team.
Outcome: Pro at $20/mo billed annually or $25/mo billed monthly covers the site; Zero Trust costs $0 because the team is under 50 users.
Rolls out Cloudflare Access and ZTNA for 80 employees, with browser isolation for contractors and log retention for audits.
Outcome: Pays $7/user/month and gets a 100% uptime SLA with 30-day log retention instead of an enterprise SASE contract.
Use Cases
- Ship a full-stack app on Workers, D1 and R2 with no server management and global CDN included
- Build an agent that calls multiple LLM providers and cap spend with AI Gateway real-time limits
- Replace a legacy VPN with Zero Trust ZTNA/SWG for up to 50 employees at no cost
- Run Python web frameworks and AI orchestration libraries on Workers without JavaScript glue code
- Build agentic search over your own documents with AI Search and Workers AI models
- Give teammates, CI tokens and agents least-privilege per-Worker access scoping
- Block AI training crawlers while staying search-discoverable with AI Crawl Control
- Serve images through Cloudflare Images pipelines with optimization and delivery built in
Models Under the Hood
as of 2026-10-16
Limitations
- Cloudflare is a broad platform spanning CDN, Zero Trust, edge compute and AI services, and pricing is usage-based across most products: the Network & CDN tiers run from Free to Pro at $20/mo (annual) or $25/mo monthly, Business at $200/mo annual, with mission-critical use on custom contracts.
- Workers is serverless compute billed on CPU time, so it fits request-handling and edge workloads rather than unconstrained long-running batch jobs.
- Zero Trust is free for teams under 50 users, $7/user/month on a pay-as-you-go tier for teams over 50, and custom-priced for full-featured SASE.
- Everything runs on Cloudflare's own network (335+ cities, serving ~20% of web traffic) with no self-hosted or on-prem option.
as of 2026-09-29
Verification history
We have re-verified Cloudflare 21 times since . Each pass re-reads the vendor's own pages and re-checks every listed field against that evidence; passes where nothing had changed are marked as such.
- — re-checked, vendor evidence unchanged
- — re-verified summary, description, our verdict, our analysis, pricing model, pricing tiers, features, integrations, who it suits, who should skip it
- — re-verified summary, description, our verdict, our analysis, pricing model, pricing tiers, features, integrations, who it suits, who should skip it
- — re-verified summary, description, our verdict, our analysis, pricing model, pricing tiers, features, integrations, who it suits, who should skip it
- — re-verified summary, description, our verdict, our analysis, pricing model, pricing tiers, features, integrations, who it suits, who should skip it
- — re-verified summary, description, our verdict, our analysis, pricing model, pricing tiers, features, integrations, who it suits, who should skip it
Showing the 6 most recent of 21 verification passes.
Free to cite with attribution — this page re-verifies continuously.
12-month cost
Project the real annual outlay, including the implied monthly cost when only an annual tier is published.
Vendor list price only. Add-on usage, seat overages, and contract minimums are surfaced under Hidden costs & gotchas.
Plans compared
For each published Cloudflare tier: who it actually fits, and what it adds vs. the previous tier. Cross-reference the cost calculator above for projected annual outlay.
Free (Network & CDN)
$0/mo
Workers Paid / Compute
From $5/mo
Zero Trust Free
$0 forever
Ideal for
Teams of up to 50 people replacing a VPN with ZTNA, SWG and DEX
What this tier adds
Starting tier: free forever for the first 50 users with 24-hour log retention and community support
Zero Trust Pay-as-you-go
$7/user/month
Ideal for
Teams past 50 users solving narrow SSE use cases without enterprise support
What this tier adds
Removes the 50-user cap, adds a 100% uptime SLA, 30-day log retention and chat plus ticket support at $7/user/month
Pro
$20/mo billed annually ($25/mo billed monthly)
Ideal for
Professional websites and small businesses that need image optimization and bot protection
What this tier adds
Adds lossless image optimization and bot protection on top of Free, with ticket support; $20/mo billed annually or $25/mo billed monthly
Business
$200/mo billed annually ($250/mo billed monthly)
Ideal for
Small businesses operating online with compliance and uptime requirements
What this tier adds
Adds PCI DSS 4.0 compliance, a 100% uptime SLA and 1x uptime service credits over Pro; $200/mo billed annually or $250/mo billed monthly
Contract (Network & CDN)
Custom (billed annually)
Zero Trust Contract
Custom (annual price per user)
Ideal for
Organizations building toward full-featured SASE or workspace security
What this tier adds
Adds unlimited CASB and DLP, Logpush to SIEM or cloud storage, up to 6 months log retention and 24/7 phone support at a custom annual per-user price
Where the pricing makes sense
The company stage and team size where Cloudflare's pricing actually pencils out — and where peers do it cheaper.
Expect around $5/mo to start usage-billed Workers, $20/mo billed annually ($25/mo billed monthly) for Pro, and $200/mo billed annually ($250/mo billed monthly) for Business. Zero Trust is free under 50 users, then $7/user/month — well under typical enterprise SASE per-seat contracts, but full CASB and DLP require a custom annual price.
Setup time & first value
How long it actually takes to get something useful out of Cloudflare — broken out by persona, not the marketing-page minute.
A simple Worker deploys in minutes with npm create cloudflare@latest or the Wrangler CLI. Adding DNS and CDN in front of an existing site is typically under an hour. Zero Trust rollout for a small team is a same-day job using the free 50-user tier. Containers, Durable Objects and multi-step Workflows take longer — usually a few days — because they involve state and orchestration design.
Switching to or from Cloudflare
How to bring data in from common predecessors and how to get it back out — written for the switcher, not the buyer.
- →From AWS CloudFront + Lambda: move static delivery to Cloudflare CDN and rewrite handlers as Workers, keeping R2 as the S3 replacement with no egress fees.
- →From a standalone WAF vendor: enable Cloudflare WAF managed rulesets and remove the separate appliance or subscription.
- →From a legacy VPN: deploy Cloudflare Access and ZTNA with the free 50-user tier, then scale at $7/user/month.
- →From AWS S3 for object storage: migrate buckets to R2 and eliminate egress charges.
- →From Heroku or a PaaS: run Workers, D1 and KV to replace dynos and managed Postgres primitives.
- ↗To AWS: rebuild Workers as Lambda plus API Gateway, move R2 back to S3 and Durable Objects to a managed coordination service.
- ↗To a pure CDN like Fastly: move delivery and caching but reprovision WAF, bot management and Zero Trust separately.
- ↗To Zscaler or another SASE vendor: replace Cloudflare Zero Trust when you need enterprise CASB and DLP under an existing contract.
- ↗To Vercel or Netlify: shift frontend and edge functions, then rebuild D1, KV and Durable Objects on another stack.
Integrations
Resources & Guides
- Documentationcloudflare.com
Docs · Cloudflare
Full product docs from cloudflare.com
- Guidedevelopers.cloudflare.com
Guide · Cloudflare
In-depth how-to from developers.cloudflare.com
- Resourcedevelopers.cloudflare.com
Workers Ai · Cloudflare
Helpful link from developers.cloudflare.com
- Resourcedevelopers.cloudflare.com
Ai Gateway · Cloudflare
Helpful link from developers.cloudflare.com
- Resourcedevelopers.cloudflare.com
Durable Objects · Cloudflare
Helpful link from developers.cloudflare.com
- Resourcedevelopers.cloudflare.com
R2 · Cloudflare
Helpful link from developers.cloudflare.com
- Resourcedevelopers.cloudflare.com
D1 · Cloudflare
Helpful link from developers.cloudflare.com
- Resourcedevelopers.cloudflare.com
Cloudflare One · Cloudflare
Helpful link from developers.cloudflare.com
- API Referencedevelopers.cloudflare.com
Api · Cloudflare
Methods, params, types from developers.cloudflare.com
- Resourcedevelopers.cloudflare.com
Changelog · Cloudflare
Helpful link from developers.cloudflare.com
Tutorials & Learning
YouTube returned 6 videos for “Cloudflare”, and we withheld 6: 6 could not be judged, because “Cloudflare” is a single word that other videos use for other things. We are showing none, because we could not prove any of them are about Cloudflare.
Tools that pair well with Cloudflare
Common stack mates teams adopt alongside Cloudflare, with the specific reason each pairing earns its keep.
Fimo
Fimo runs autonomous website agents on your own Git repo, keeping your site self-updating after launch.
Predibase
Predibase: managed fine-tuning and multi-LoRA serving for open-source LLMs, now inside Rubrik.
Unsloth
Open-source local AI workspace for fine-tuning and running LLMs, image, and video models on your own GPU
Featured Head-to-Head Comparisons
Cloudflare vs Spider Cloud
You shouldn't be choosing between these. If your problem is getting live, rendered web pages into an agent or RAG pipeline — with proxies, CAPTCHA handling, and streaming crawls — Spider Cloud is purpose-built for exactly that, with MCP onboarding for Claude Code, Cursor, and Codex. If your problem is shipping an API or AI agent globally with edge compute, spend controls, storage, and security on one bill, Cloudflare is the platform. Buy the one that matches the problem; the only real overlap is that Cloudflare's AI Gateway and Workers AI sit downstream of data you'd likely ingest with something like Spider.
Cloudflare vs Screenplayiq
Do not treat this as a head-to-head. ScreenplayIQ is a niche tool for one job: turning a script into structured notes with comparable titles, character charts, and market read — purchased per script with page-length pricing, siloed storage, and no LLM training on your work. Cloudflare is infrastructure: Workers compute billed at 1ms CPU (no wall-clock charge during LLM waits), AI Gateway spend limits, Workers AI edge inference, R2 with no egress fees, and Zero Trust free for the first 50 employees. If you are a writer or producer evaluating a draft, buy ScreenplayIQ. If you are a developer or security team, use Cloudflare. There is no realistic shortlist where one replaces the other.
Cloudflare vs Push Security
These are not competitors. Push Security is a specialist browser-extension layer that stops AiTM, ClickFix, and consent-phishing attacks that slip past email gateways and SWGs, at a flat $5/user/month aimed at sub-500-seat teams. Cloudflare is a platform play: CDN, WAF, Workers, R2, and Zero Trust, sold to developers and security teams who want one bill. If your problem is phishing in the browser, buy Push. If your problem is deploying an API or agent on a global edge with DDoS protection, buy Cloudflare. Shortlisting both would only happen at a very large org where the browser extension fills a blind spot the Cloudflare SWG can't see — and even then, they're complements, not substitutes.
Cloudflare vs Reka
If you need a unified platform to build, secure, and scale web apps or AI agents with serverless compute, DDoS protection, and Zero Trust networking, choose Cloudflare — it offers a generous free tier and transparent pricing. If your priority is real-time multimodal video analysis at the edge for security, broadcasting, or robotics, Reka specializes in that with enterprise-grade models like Reka Edge 2, but expect direct sales and no public pricing.
Alternatives to Cloudflare
View all
Frequently Asked Questions
Categories
Best-of guides
Used Cloudflare? Help shape our editorial sentiment research.