Cloudflare
One platform to build, secure, and scale apps and AI agents globally.
Cloudflare is the strongest single-vendor edge platform for teams that want CDN, security, compute, and Zero Trust under one roof. The 1ms CPU billing and AI Gateway spend limits are genuinely novel for agent workloads, and the August 2026 moves (WebMCP, Kitesurf, AI Search) show real agent-first momentum. But Workers' CPU limits still cap heavy compute, and privacy-conscious teams should note Turnstile's WebGL fingerprinting. If you need deep data processing or on-prem-only deployment, look at alternatives like AWS Lambda or Azure Front Door, which offer more traditional infra but with more operational overhead.
Verified 4d ago · liveness 76/100 · cite: rightaichoice.com/tools/cloudflare
- Startups building web apps and APIs; Workers free tier covers 100k req/day.
- Developers deploying AI agents with AI Gateway spend limits and edge inference.
- DevOps teams wanting CDN, security, compute in one platform with one bill.
- Enterprises adopting Zero Trust SASE; first 50 employees free.
- Heavy data processing or batch jobs; Workers CPU limits cap compute.
- Privacy-first projects; Turnstile uses WebGL fingerprinting.
- High-volume CPU-bound workloads; pricing favors lightweight functions.
We scan live Reddit threads, YouTube comments, X posts, G2 reviews and other communities — and hand you an honest verdict in under a minute.
- Honest verdict, not marketing
- Real pros & cons from real users
- Attributed quotes with receipts
3 free scans · no card needed
Skip Cloudflare if you need on-premises deployment, have privacy-sensitive users (Turnstile uses WebGL fingerprinting), or your workloads are heavily CPU-bound beyond typical serverless limits.
Going over 100k Workers requests/day on free tier requires Workers Paid ($5/mo) plus usage charges ($0.30/million requests).
Cloudflare's free tier is more generous than AWS and Azure's limited free tiers, and the $5/mo Workers Paid entry is cheaper for low-volume usage. Zero Trust at $7/user/month beats Microsoft 365 E5's per-user cost. For enterprises, the custom contract pricing is competitive with traditional WAF/CDN vendors like Akamai or Imperva.
In short
Cloudflare — One platform to build, secure, and scale apps and AI agents globally. Best for Startups building web apps and APIs; Workers free tier covers 100k req/day., Developers deploying AI agents with AI Gateway spend limits and edge inference., DevOps teams wanting CDN, security, compute in one platform with one bill.. Free to start; paid plans from $5/user/mo.
What's new in Cloudflare
Checked 4 days agoAcross the latest 5 updates: 5 feature updates.
AI Search now supports GLM-5.3 Flash
AI Search now supports the GLM-5.3 Flash model for text generation, giving users a faster option for search responses.
GLM-5.3 now available on Workers AI
Z.ai's GLM-5.3 is now on Workers AI, featuring a 1M token context window, reasoning, and function calling for agentic coding.
Durable Objects can use up to ten Dynamic Workers
Each Durable Object can now run up to ten Dynamic Workers concurrently with in-flight requests.
Access service token secrets use a scannable format
New Access service token secrets have a recognizable prefix and checksum to aid credential scanning tools.
Bot Preference Sync: aligning robots.txt with AI bot policies
New feature to manage bot access by aligning robots.txt with AI bot policies, replacing static files.
What people actually say about Cloudflare — is it worth it?
We ran a structured research pass across product reviews, community discussions, and post-purchase forum threads to surface the patterns vendors won't publish themselves. Below: the recurring strengths, the hidden costs people mention most, and the cohort that consistently regrets adopting this tool.
49 mentions across 2 sources (Hacker News, YouTube) · researched Jun 1, 2026.
- +Generous free plan with DDoS, SSL, and CDN for hobby projects.
- +Serverless Workers with pay-per-CPU-time billing eliminate idle costs.
- +Global network reaches 95% of Internet users within 50ms.
- +Simple setup and unified dashboard for all services.
- +R2 object storage with zero egress fees.
- −Turnstile's WebGL fingerprinting is privacy-invasive and forced.
- −Cloudflare acts as a gatekeeper, blocking users with privacy tools.
- −Turnstile can lock out users who disable fingerprinting.
- −Fingerprinting may expose users to mass surveillance.
- −Cloudflare's dominance creates a single point of failure.
- • Workers compute time over free tier can add up
- • Advanced security features required Business plan or higher
- • Zero Trust platform costs extra per seat
Viability Score
How well maintained and how widely used is Cloudflare? Built from what the vendor actually publishes (docs, changelog, tutorials, integrations, pricing), whether the site is live, and how much real users discuss it. How we calculate this
Last calculated: September 2026
How we score →Key Features
- Workers serverless with 1ms CPU billing
- AI Gateway with real-time spend limits
- Workers AI inference at the edge
- DDoS mitigation (310B daily threats blocked)
- Zero Trust SASE (ZTNA, SWG, DEX)
- WAF with threat intelligence
- R2 object storage with no egress fees
- Durable Objects for stateful serverless
- Workers KV global key-value store
- Containers for any language
- Cloudflare Internal DNS for private networks
- Cache Response Rules to override origin cache headers
- WebMCP: any site becomes usable by browser AI agents
- Kitesurf: agent-first browser on Workers
- AI Search for building search over your own data
About Cloudflare
Cloudflare is a unified edge platform that combines CDN, security, serverless compute, and Zero Trust networking with AI inference, all running on a global network spanning 335+ cities. It's built for the agent era, letting developers, security teams, and enterprises ship applications and AI agents without managing infrastructure. Instead of stitching together multiple vendors, teams get one dashboard, one bill, and security baked into every request—from DDoS mitigation and WAF to bot management and identity-aware access. Cloudflare powers 45% of the Fortune 500 and is trusted by teams at Shopify, Discord, and DoorDash. Compute is where Cloudflare differentiates. Workers serverless uses 1ms CPU billing, so you pay only when your code actually executes, not while waiting on slow LLM calls or idle WebSockets. AI Gateway adds real-time spend limits across providers, and Workers AI delivers inference at the edge. The platform also includes Workflows for multi-step processes, Containers, Durable Objects for stateful coordination, R2 object storage with no egress fees, and Workers KV for global key-value data—all with a generous free tier that includes 100k daily requests, 10ms CPU per request, and 10GB R2 storage. For security and connectivity, Cloudflare's Zero Trust SASE covers ZTNA, SWG, and DEX, with the first 50 employees free. Recent releases like Cloudflare Internal DNS (GA) bring authoritative and recursive DNS for private networks onto the same control plane, while Cache Response Rules let you override origin cache headers to cut revalidation. Precursor, a new behavioral validation engine, strengthens bot management by detecting agentic behavior through continuous client-side signals. The Monetization Gateway, via the x402 protocol, opens a path for AI agents to charge for services. Cloudflare is leaning hard into the agent economy. In August 2026, it announced WebMCP, which lets any website become usable by browser AI agents with one switch, and Kitesurf, an agent-first browser built on Workers. AI Search brings agentic search over your own data. The Bot Preference Sync feature (announced August 2026) aligns robots.txt with AI bot policies, and the new OAuth optional scopes support task-based consent flows. Cloudflare also added GLM-5.3 to Workers AI, with a 1M token context window, and AI Search supports the GLM-5.3 Flash model.
Behind the Verdict
Cloudflare is a massive platform, and that scale is both its strength and its weakness. For startups, the free tier is genuinely generous—100k Workers requests per day, 10ms CPU per request, 10GB R2 storage, and Zero Trust for up to 50 users. You can run a real production app on the free tier, which is rare among major cloud providers. The pay-per-use model on Workers Paid ($0.30 per million requests, $0.02 per million CPU ms) means you only pay for actual compute, not idle time waiting on API calls or LLM responses. This is a huge win for agent workloads that often spend most of their time blocked on external calls. For enterprises, the Zero Trust offering is compelling. The first 50 employees are free, then it's $7 per user per month. This is much cheaper than rolling your own VPN + CASB + DLP stack. The unified dashboard and single bill simplify operations. Cloudflare's network is massive—335+ cities, 50ms of 95% of the world's population—so performance is top-notch. Security is baked in. DDoS protection, WAF, bot management, and Zero Trust controls run on every request. The new Bot Preference Sync (August 2026) aligns robots.txt with AI bot policies, which is a nice touch for content publishers. Access for Workers (August 2026) lets you attach an Access policy directly to a Worker, which is perfect for internal vibe-coded apps. Weaknesses: Cloudflare's platform is vast, and it can be overwhelming to navigate. Some features are paywalled or have limits that aren't obvious upfront. For example, AI Gateway has limits on the free tier. The CPU time limit (10ms per request on Free, $0.02 per million CPU ms on Paid) can be restrictive for CPU-bound work. Containers usage-based pricing can surprise you if you have persistent memory-heavy workloads. Privacy-conscious teams should know Turnstile uses WebGL fingerprinting. Also, there's no on-prem deployment option—it's cloud-only.
Researching Cloudflare? Get your full AI stack in 60 seconds.
Free, no signup — tell us your goal and get tools matched to your budget & existing stack.
Real-world workflow fit
Concrete scenarios for the personas Cloudflare actually fits — and what changes day-one when you adopt it.
Deploy a full-stack web app using Workers, D1, and R2 on the free tier.
Outcome: Get a globally distributed app with automatic CDN, SSL, and DDoS protection, with zero server management and no cost.
Build an AI agent that calls multiple LLMs using AI Gateway to set spend limits.
Outcome: Control costs in real time and route requests to different providers, with metrics and caching, all on Workers.
Replace legacy VPN with Cloudflare Zero Trust for 200 employees.
Outcome: Secure access to internal apps and gate Internet traffic with SWG, scaling from 50 free users to $7/user/month.
Use Cases
- Startup deploys a full-stack web app with Workers, D1, and R2 — no server management, global CDN included.
- AI developer builds an agent that calls multiple LLM providers, using AI Gateway spend limits to cap costs.
- Enterprise IT replaces legacy VPN with Cloudflare Zero Trust SASE, securing 50+ employees on free tier.
- Media site purges malicious traffic via WAF with real-time threat intel from Cloudforce One.
- Developer builds a global API with Workers and Durable Objects, handling real-time coordination without managing servers.
- Security team attaches an Access policy to a Worker to secure internal vibe-coded apps in one click.
- Content publisher uses Bot Preference Sync to manage AI bot access and align with robots.txt policies.
Models Under the Hood
as of 2026-08-31
Limitations
- Cloudflare's platform is vast, with usage-based pricing for many services; some features like Workers AI require a Workers Paid plan.
- The free tier is for hobby projects, with limits on users (50 for Zero Trust) and daily requests.
- Certain AI models may require paid plans.
- Workers CPU time is capped at 10ms per request on free, and paid is $0.02 per million CPU ms — CPU-bound workloads can get expensive or hit limits.
- Containers are billed per GiB-second and vCPU-second, which can add up for persistent services.
- The free tier of Durable Objects is limited to 100,000 requests per day and 13,000 GB-s of duration.
- AI Gateway free tier has limited usage.
- There is no on-prem deployment; everything runs on Cloudflare's network.
- Some recent features (WebMCP, Kitesurf) are still evolving and may not be production-ready for all use cases.
as of 2026-08-29
Verification history
We have re-verified Cloudflare 18 times since . Each pass re-reads the vendor's own pages and re-checks every listed field against that evidence; passes where nothing had changed are marked as such.
- — re-verified summary, description, our verdict, our analysis, pricing model, pricing tiers, features, integrations, who it suits, who should skip it
- — re-verified summary, description, our verdict, our analysis, pricing model, pricing tiers, features, integrations, who it suits, who should skip it
- — re-verified summary, description, our verdict, our analysis, pricing model, pricing tiers, features, integrations, who it suits, who should skip it
- — re-verified summary, description, our verdict, our analysis, pricing model, pricing tiers, features, integrations, who it suits, who should skip it
- — re-verified summary, description, our verdict, our analysis, pricing model, pricing tiers, features, integrations, who it suits, who should skip it
- — re-verified summary, description, our verdict, our analysis, pricing model, pricing tiers, features, integrations, who it suits, who should skip it
Showing the 6 most recent of 18 verification passes.
Free to cite with attribution — this page re-verifies continuously.
12-month cost
Project the real annual outlay, including the implied monthly cost when only an annual tier is published.
Vendor list price only. Add-on usage, seat overages, and contract minimums are surfaced under Hidden costs & gotchas.
Plans compared
For each published Cloudflare tier: who it actually fits, and what it adds vs. the previous tier. Cross-reference the cost calculator above for projected annual outlay.
Free
$0/mo
Ideal for
Hobby projects, personal sites, or proof-of-concepts that don't require business uptime or support.
What this tier adds
Starting tier with unmetered DDoS, global CDN, Universal SSL, and 100k Workers requests/day.
Zero Trust Free
$0 forever
Zero Trust Pay-as-you-go
$7/user/month
Pro
$20/mo billed annually ($25/mo monthly)
Ideal for
Professional websites and small businesses that need image optimization and basic bot protection.
What this tier adds
Adds image optimization, bot protection, and ticket support over Free.
Workers Paid
From $5/mo
Business
$200/mo billed annually ($250/mo monthly)
Ideal for
Small businesses that need PCI DSS 4.0 compliance, uptime SLA, and chat support.
What this tier adds
Adds PCI DSS 4.0 compliance, 100% uptime SLA, and chat support over Pro.
Contract (Zero Trust)
Custom (annual price per user)
Contract
Custom (billed annually)
Ideal for
Mission-critical applications that require network priority, custom contracts, and 24/7 support.
What this tier adds
Adds network priority, 24/7 support, and custom contracts; billed annually.
Where the pricing makes sense
The company stage and team size where Cloudflare's pricing actually pencils out — and where peers do it cheaper.
Cloudflare's free tier is more generous than AWS and Azure's limited free tiers, and the $5/mo Workers Paid entry is cheaper for low-volume usage. Zero Trust at $7/user/month beats Microsoft 365 E5's per-user cost. For enterprises, the custom contract pricing is competitive with traditional WAF/CDN vendors like Akamai or Imperva.
Setup time & first value
How long it actually takes to get something useful out of Cloudflare — broken out by persona, not the marketing-page minute.
For basic CDN/security setup: ~10 minutes (DNS change). For Workers: ~15 minutes with npm create cloudflare@latest. For Zero Trust: ~30 minutes for initial setup, plus per-app configuration. AI Gateway: ~20 minutes to connect your first model.
Switching to or from Cloudflare
How to bring data in from common predecessors and how to get it back out — written for the switcher, not the buyer.
- →From AWS CloudFront: Update your DNS to point to Cloudflare, then import your origin and configure caching rules.
- →From Fastly: Move your CDN config by replicating cache rules and WAF policies in Cloudflare's dashboard.
- →From Azure Front Door: Recreate your routing rules and SSL certificates in Cloudflare; use the API for automation.
- ↗To AWS Lambda: Rewrite Worker functions to Lambda handlers and configure API Gateway; migrate data from KV/R2 to DynamoDB/S3.
- ↗To Vercel: For frontend apps, move to Vercel's serverless functions and edge network; adjust environment variables.
Integrations
Resources & Guides
- Guidedevelopers.cloudflare.com
Guide · Cloudflare
In-depth how-to from developers.cloudflare.com
- Resourcedevelopers.cloudflare.com
Learning Paths · Cloudflare
Helpful link from developers.cloudflare.com
- Resourcedevelopers.cloudflare.com
Get Started · Cloudflare
Helpful link from developers.cloudflare.com
- Resourcedevelopers.cloudflare.com
Support · Cloudflare
Helpful link from developers.cloudflare.com
- Resourcedevelopers.cloudflare.com
Changelog · Cloudflare
Helpful link from developers.cloudflare.com
Tutorials & Learning
Tools that pair well with Cloudflare
Common stack mates teams adopt alongside Cloudflare, with the specific reason each pairing earns its keep.
Fimo
Autonomous website platform that runs on your own Git repo, with agents that keep it self-updating.
Predibase
Predibase by Rubrik: Fine-tune and serve open-source LLMs on managed infrastructure.
Unsloth
Run and fine-tune LLMs locally on your own hardware with Unsloth — fast, memory-efficient, no cloud needed.
Featured Head-to-Head Comparisons
Cloudflare vs Spider Cloud
For AI agents needing real-time web data, Spider Cloud is purpose-built with a Rust engine, AI extraction, and direct RAG integrations — cheaper per page than Cloudflare's general-purpose Workers. Cloudflare is the better platform if you need CDN, security, and serverless compute alongside AI inference, but it lacks native scraping APIs. Choose Spider Cloud for data acquisition; choose Cloudflare for full-stack app deployment and edge AI.
Cloudflare vs Screenplayiq
Choose ScreenplayIQ if you're a screenwriter or producer needing data-driven financial predictions from your script. Choose Cloudflare if you're a developer or startup needing a unified edge platform for CDN, serverless compute, security, and AI inference — with generous free tiers and recent addition of VoidZero tooling.
Cloudflare vs Push Security
Push Security and Cloudflare serve different primary needs. Push is laser-focused on browser-based threats (AiTM, ClickFix, AI DLP) and identity hardening, ideal for security teams that need visibility into user browsing and AI tool usage without switching browsers. Cloudflare is a broader platform for developers and security teams needing CDN, serverless compute, Zero Trust networking, and edge AI — but lacks deep browser threat detection. Choose Push if browser security is your priority; choose Cloudflare if you need a unified edge platform with some security overlays.
Cloudflare vs Reka
If you need a unified platform to build, secure, and scale web apps or AI agents with serverless compute, DDoS protection, and Zero Trust networking, choose Cloudflare — it offers a generous free tier and transparent pricing. If your priority is real-time multimodal video analysis at the edge for security, broadcasting, or robotics, Reka specializes in that with enterprise-grade models like Reka Edge 2, but expect direct sales and no public pricing.
Alternatives to Cloudflare
View allFrequently Asked Questions
Categories
Best-of guides
Used Cloudflare? Help shape our editorial sentiment research.