Cloudflare

Cloudflare protects websites and applications with a WAF, DDoS mitigation and bot management, and speeds them up with a global CDN, load balancing and image delivery, managed from one dashboard and API.

Suggest a correction

Overview

Point a domain's DNS to Cloudflare to route traffic through its reverse-proxy network, where managed and custom WAF rules block exploits such as SQL injection and XSS, DDoS mitigation absorbs volumetric attacks and rate limiting curbs floods. The same network caches static assets and anonymous API GET responses in data centers in 335+ cities, routes traffic across origins with health-checked load balancing and failover, and serves images in optimal formats. Dashboards report traffic, cache-hit rates and security events. Plans run from Free to Pro, Business and a custom Contract plan; Load Balancing, Stream and Argo Smart Routing are add-ons.
More product details

Who it is for

Industries
  • Financial services
  • Gaming
Organization Types
  • Business
  • Individual
Roles
  • Developer

Product

Solution Kind
Platform

Features

Threat Response

Automatically mitigates DDoS attacks without manual tuning

Under Attack hotline for immediate assistance

More details & conditions: Threat Response

Quarantines or rewrites dangerous uploads through WAF Content Scanning

Categories: Website Security

Web-Application Security

Inspects HTTP/S requests at the edge with managed and custom WAF rules

Blocks OWASP Top 10 attacks on web applications and APIs

More details & conditions: Web-Application Security

API Shield validates schemas and enforces mTLS for REST and GraphQL traffic

Categories: Website Security

Anomaly/Malware Detection

Bot Management scores each request with ML heuristics

WAF Content Scanning inspects file uploads for malicious content

More details & conditions: Anomaly/Malware Detection

Page Shield detects client-side tampering

Categories: Website Security

Firewalls

Managed and custom WAF rulesets enforced across the global network

Virtual patching that blocks exploits for specific CVEs

More details & conditions: Firewalls

Per-path rate limiting

Categories: Website Security

Log Management

Streams raw security logs through Logpush to R2, S3 or a SIEM

Log Explorer add-on for log retention and investigation

Categories: Website Security

SQL Injections

Blocks SQL injection and cross-site scripting aimed at web applications and APIs

Categories: Website Security

Website Analytics

Dashboards of traffic patterns, cache-hit rates and user experience across all domains

Filtering by domain or product

Categories: Website Optimization Tools

Web Traffic Reporting

Traffic and security-posture dashboards filterable by domain or product

Categories: Website Optimization Tools

Video Delivery

Delivery method: Paid add-on

Stores, encodes and plays back video through the Stream add-on

Categories: Content Delivery Network

DDoS Protection

Mitigates large DDoS attacks automatically using 500 Tbps of network capacity

Protects websites, TCP/UDP applications (Spectrum) and networks at layers 3 and 4 (Magic Transit)

Categories: Content Delivery Network

Show all details (14)

Asset Optimization

Serves images in the best format for the browser (WebP, AVIF, JPEG)

Generates resized and responsive image variants on demand

Categories: Content Delivery Network

Load Balancing

Delivery method: Paid add-on

Routes traffic across servers, data centers and clouds by server health and user-to-origin latency

Active/passive failover between data centers or cloud regions

More details & conditions: Load Balancing

Geo-steering and live A/B or canary traffic splitting

Categories: Content Delivery Network

Workflow details

Capacity
  • Network capacity

    500Tbps

    Global network, DDoS mitigation

Categories: Content Delivery Network

Cache behavior
  • Granular Cache Rules with instant purging and API-driven control
  • Tiered Caching and Cache Reserve to raise hit ratio and reduce origin egress

Categories: Content Delivery Network

Origins and failover
  • Origin health is monitored from multiple points across the network with fast failover
  • Active/passive failover between data centers or cloud regions
  • Balances traffic across AWS, GCP, Azure and on-premises origins

Categories: Content Delivery Network

Pricing

FreeFree option

Free

Free

Plan details & limits

Business Model
  • Free

Business

Billed annually

Billed monthly

Access in this plan

Uptime SLA Percent
100

Plan details & limits

Business Model
  • Subscription

Pro

Billed annually

Billed monthly

Plan details & limits

Business Model
  • Subscription

Contract

Contact vendorBilled annually

Contact vendor

Billed annually

Access in this plan

Uptime SLA Percent
100

Plan details & limits

Business Model
  • Subscription

Access & availability

API operations and access

Upload and manage images through the Images API

Manage WAF rules as code through the API and CI/CD workflows

Technical details

API

Access
Public
Protocols
  • REST

Deployment

Client Channels
  • Browser
  • API
Delivery Models
  • Cloud (SaaS)

Security

Encryption In Transit
Yes

Reviews

User experiences, moderated before publication. Review policy

Write a review

No reviews yet.

Be the first to share your experience with Cloudflare.

Add a product

Search to find a product.

Privacy choices

Choose what to allow.

You can change your choice here at any time. Refusing optional analytics does not limit the catalog.

AdvertisingAdSense is not currently enabled. Advertising choices will be available through its consent platform before ads are activated.Not active

Cookie details · Privacy rights