Our 330 data centers located across the globe provide visitors with location-based access to your website, while removing latency and improving performance.

Cloudflare saves you CPU resources and bandwidth by serving your static content directly from our global data centers.

Purge the entire Cloudflare cache or just a single file without waiting.

Cloudflare respects all existing headers, unless you choose to overwrite them. The minimum edge cache expire TTL sets the refetch time for when Cloudflare checks the origin server for a new resource.

The amount of data visitors can upload to your website in a single request.

TCP Turbo automatically chooses the TCP settings to further accelerate your website. Accelerate latency and throughput with custom-tuned TCP optimizations. Enabled automatically for Pro, Business, and Enterprise customers.

Cache-Tags are assigned to cached content via a Cache-Tag response header, and are stored as metadata with cached objects so that global purges take only seconds, targeting a granular, finite set of cached objects.

Purge by host offers Cloudflare customers who manage multiple subdomains the ability to purge the cache on a per-host basis. For example, if the Cloudflare domain example.com wanted to purge everything on staging.example.com, purge by host enables this with a single API call.

Custom Cache Keys allow caching to be extended to something more specific than just the URL, this allows you to extend caching beyond just static files.

Enterprise Internet assets are placed on Cloudflare dedicated IP ranges, providing prioritized routing and protection to ensure maximum speed and availability.

Argo's smart routing algorithm uses real-time network intelligence to route traffic through the fastest Cloudflare network paths, while maintaining open, secure connections to eliminate latency imposed by connection-setup.

• Pricing for Business Plan: $5 per month; First 1 GB is free and $0.10 per GB thereafter.
• Pricing for Enterprise Plan: Custom pricing

Argo’s tiered caching technology uses regional tier 1 Cloudflare data centers to propagate content to Cloudflare’s global network, minimizing static content requests to your server and reducing costs.

Price includes a base fee plus usage fees. Usage fee is determined by the number of DNS requests made by visitors.

Base Fee
Free, Pro, and Business Plan pricing:

• Up to 2 origin servers: $5 per month
• Additional origins, up to 20: $5 per month per origin

Enterprise customers:

• Custom Pricing

Usage-based Fees
Free, Pro, and Business Plan pricing:

• First 500k DNS requests are free
• $0.50 per every 500k DNS requests after

Enterprise customers:
Can negotiate a reduced rate through custom pricing.

Global Load Balancing ensures that visitors receive dynamic content from origin servers closest to them.

Pricing

Free, Pro, and Business Plan pricing:

• Enable for $10 per month

Enterprise customers:

• Included with data center control

Load Balancing Health Monitors

Load Balancing Health Monitors

Health checks continually ping origin servers to determine if it's online.

Pricing

1. Frequency of Health Monitor

Free, Pro, and Business Plan pricing:

• Every 60 seconds: included
• Every 30 seconds: additional $10 per month
• Every 15 seconds: additional $15 per month

Enterprise customers:

• Includes health checks every 5 seconds.

2. Number of Health Check Locations

Free, Pro, and Business Plan pricing:

• 1 location included
• Up to 3 locations: additional $10 per month
• Up to 5 locations: additional $15 per month

Enterprise customers:

• Includes health checks from every Cloudflare data center.

Gain access to Cloudflare's 20 data centers across China.

Cloudflare Stream is an easy-to-use, affordable, on-demand video streaming platform.

Cloudflare’s Stream Delivery offers caching and delivery of video content through its 194 data centers around the globe.

Cloudflare Rules allows you to make adjustments to requests and responses, configure Cloudflare settings, and trigger specific actions for matching requests. Examples of rule use cases include setting cache expirations, modifying security levels for sections of your site, and forwarding URLs.

Cloudflare’s Accelerated Mobile Links, powered by AMP, loads AMP-enabled external links inside of a viewing window, within the same tab, at least 3 times faster than normal mobile pages.

Support both IPv4 and IPv6 connections to your site without a single change to your existing infrastructure. HTTP/2 is the latest update to the HTTP protocol. HTTP/2 brings advancements in efficiency, security, and speed, particularly on high-latency and mobile connections. Cloudflare provides automatic HTTP/2 and SPDY coverage for your visitors.

A WebSocket is a persistent full-duplex protocol which provides low latency client-server communication without the overhead of HTTP.

Automatically optimizes your pages to minimize the number of network connections and ensure even third party resources won't slow down page rendering.

Polish applies "lossless" or optional "lossy" image optimization to reduce your image sizes by 35% on average.

Mirage automatically optimizes image loading through virtualized and lazyloaded images. It detects the browser type of a visitor and optimizes performance for the particular device, improving the performance of images on a mobile connection.

Used to rewrite headers if customers don’t have a way of controlling their headers. For example, if your Amazon S3 bucket requires a specific host header set in order to fetch assets.

Resize images for a variety of device types and connections from a single-source primary image. Images can be manipulated by dimensions, compression ratios, and format (WebP conversion where supported). Available as a paid add-on with Cloudflare Images.

Workers Unlimited includes:

• Key-value storage space: 1GB
• Key-value reads: 10 million per month
• Key-value writes: 1 million per month
• Key-value deletes: 1 million per month
• Key-value lists: 1 million per month

Usage Based Charges:

• Key-value storage space: $0.50 per 1GB per month
• Key-value reads: $0.50 per 1 million reads per month
• Key-value writes: $5 per 1 million writes per month
• Key-value deletes: $5 per 1 million deletes per month
• Key-value lists: $5 per 1 million lists per month

Cloudflare’s unmetered mitigation of DDoS stops illegitimate volumetric traffic at the Cloudflare edge. All Cloudflare plans include unmetered mitigation without fear of being dropped.

Cloudflare’s enterprise-grade mitigation of DDoS attacks against layers 3, 4, & 7 includes prioritized IP ranges and routing, ensuring maximum speed and availability.

Spectrum protects TCP applications and ports from volumetric DDoS attacks and data theft by proxying non-web traffic through Cloudflare’s Anycast network.

Pricing

Enterprise Plan:

• Custom pricing

Cloudflare gets smarter about security threats as more sites join. Protection from attacks on one site is extended to the entire Cloudflare community within seconds.

Cloudflare gets smarter about security threats as more sites join. Protection from attacks on one site is extended to the entire Cloudflare community within seconds.

Stop spammers from posting to your website.

Protect all of your content including text, images and email addresses from web scrapers with Cloudflare's ScrapeShield™ service.

Custom Domain Protection for Cloudflare Registrar, available on the Enterprise Plan, protects your organization from domain hijacking with exclusively out-of-band verification of any changes to your Registrar account. Cloudflare is an ICANN accredited registrar providing secure domain registration for high-profile domains.

Cloudflare will send you a real-time alert when our systems automatically detect and mitigate a DDoS attack.

Cloudflare Spectrum protects your SSH server from DDoS attacks of any size and kind. Better yet, SSH sessions are faster over the Cloudflare network than over the Internet.

Delivering immersive and secure gaming experiences to your Minecraft players around the world is a massive challenge — network latency and DDoS attacks contribute to the ‘lag’ and downtime of your Minecraft server. Solve this challenge with Cloudflare Spectrum – which helps power fast and reliable online gaming experiences.

Cloudflare Spectrum can help improve business productivity by helping IT teams deliver real-time, responsive, and reliable RDP experiences to their workforce.

Page Shield protects your website visitors from client-side attacks that target vulnerable JavaScript dependencies.

For an individual website. Challenge easy-to-detect bad bots from popular cloud providers.

Block and challenge easy-to-detect bad bots from any source. Plus, bypass bot settings using WAF Custom Rules.

Manage AI crawlers and bot traffic to web and mobile apps without CAPTCHAs. Stop account abuse, malicious botnets, credential and card stuffing, content scraping, and inventory hoarding.

Privacy-preserving CAPTCHA alternative to confirm web visitors are real and block unwanted bots without slowing down web experiences for real users.

Cloudflare’s DNS Firewall is an advanced firewall for DNS infrastructure— keeping your DNS infrastructure online no matter what attacks are fired at your servers. DNS Firewall also improves your global DNS performance by giving you access to Cloudflare’s robust DNS cache in over 300 cities on 6 continents around the world

Use schema validation to check if your incoming traffic complies with a previously supplied API schema.

API Shield discovers public facing APIs, uncovers API configurations, and protects APIs from abuse and malformed traffic.

Cloudflare is compatible with your existing SSL configuration. If you do not currently use SSL, Cloudflare can provide you with SSL capabilities — no configuration required.

Bring your own dedicated SSL certificate (upload to our network; supports EV certificates).

Keyless SSL lets you route encrypted traffic through Cloudflare's global network, while retaining on-premise custody of private keys. SSL private keys never leave your on-premise infrastructure, and are not shared with anyone.

Cloudflare for SaaS allows the customers of SaaS providers to CNAME their custom domains to the SaaS provider’s subdomain. This offers SaaS customers the benefit of a branded and encrypted vanity domain. Cloudflare automatically handles certificate management and renewals. Learn more at cloudflare.com/saas/

PRICING

• Free, Pro, and Business Plan: Free for the first 100 hostnames and $0.10 a month for each additional custom hostname.
• ENT: Custom Pricing

Advanced Certificate Manager is a flexible and customizable way to issue and manage certificates in Cloudflare.

Use Advanced Certificate Manager when you want something more customizable than Universal SSL but still want the convenience of SSL certificate issuance and renewal. For example, use Advanced Certificate Manager to cover more than one level of subdomain, remove Cloudflare branding from the Universal certificate, or adjust the shortest certificate lifespan.

Customize how the Cloudflare WAF protects your specific application or website from cyber attacks. Based on the criteria you define, perform actions like blocking or challenging incoming requests. Enterprise contract customers can create regular expressions and create rules to log traffic.

A single reporting dashboard to view and analyze all your HTTP traffic so that you can identify new attacks, security gaps, and fine tune WAF settings to stop threats.

Free Cloudflare-managed ruleset automatically deployed and protecting against severe vulnerabilities

Cloudflare-managed rulesets protecting against vulnerability exploits and common attack attack types, written by Cloudflare researchers and tested on vast amounts of traffic to ensure the fewest false positives.

Includes OWASP ModSecurity Core Rule Set automatically to protect you against the top vulnerabilities identified by the Open Web Application Security Project (OWASP).

Stop bypass attempts with machine learning models that complement WAF rulesets. The WAF Attack Score machine learning model provides four distinct attack scores, including an overall WAF attack score, XSS attack score, SQLi attack score, and RCE attack score.

Detect brute force attacks with stolen credentials before end user accounts are taken over.

Detect responses containing sensitive data such as personally identifiable information, financial Information, credit card numbers or secrets like API keys.

Detect and scan content uploaded to your web application in transit to prevent malicious uploads from reaching your web server.

Create custom lists of IP addresses, hostnames, and ASNs to use and reference in your custom WAF rules. For example, create a custom IP address range to block.

Managed IP lists leverage Cloudflare threat intelligence and contain lists of known malicious IPs. You can use and reference Cloudflare managed IP lists in your own custom WAF rules.

With IP-based rate limiting, you can limit the number of requests a certain IP address can make, and prevent abuse from "repeat offender" IP addresses.

Enterprise customers can negotiate a reduced rate through custom pricing.

The total number of individual rules per plan type, with which to instruct rate limiting how to function on your website, application, or API.

With advanced rate limiting, you can write rate limiting rules using all the fields of the HTTP request to protect against denial-of-service attacks, brute-force login attempts, API traffic surges and other types of abuse targeting APIs and applications.

Manage WAF with a single account-level WAF configuration for all of your domains.

Fast responsive times globally and nearinstant updates.

DNSSEC ensures that a website’s traffic is safely directed to the correct servers, so that a connection to a website is not intercepted by a man-in-the-middle.

Custom nameservers allow you to create your own, unique nameservers in place of your assigned Cloudflare nameservers.

Cloudflare supports wildcard DNS records at all plan levels. A wildcard DNS record allows you to create DNS records for non-existing subdomains.

Cloudflare supports proxied wildcard DNS records at all plan levels. A proxied wildcard DNS record allows you to proxy non-existing subdomains providing security and performance for all subdomains covered by the proxied wildcard DNS record.

Cloudflare can easily be setup as a secondary DNS provider. When records are edited with the primary DNS provider, the corresponding records at Cloudflare are automatically updated.

Cloudflare Waiting Room allows organizations to route excess users to a custom-branded waiting room, helping preserve customer experience and protect origin servers from being overwhelmed with requests.

Invite others to manage the account as an Administrator. Invited Administrators have full control over the account except for managing members and changing billing information. Visit the ‘Members’ tab, in the new Account area within the Cloudflare dashboard to get started.

Role-based access for Cloudflare accounts enables organizations to collaborate across one Cloudflare account, and use roles-based permissions to control access. Each user is assigned an individual API key and can use two-factor authentication to protect their own account.

The Cloudflare dashboard supports Single Sign On (SSO) for ease of centralized identity and access management. Cloudflare Account Owners will be able to setup and define who can access their Cloudflare accounts with the same Identity Provider (IdP) they currently use.

Deeper exploration capabilities into what Cloudflare’s caching and content delivery services are doing for your web presence.

The Cloudflare analytics dashboard provides all customers with 30 days of data and the ability to magnify your data by time range scopes of 1 hour, 15 minutes, or 1 minute, depending on your plan type. - Free customers can magnify down to a 1 hour scope, for the last 24 hours - Pro and Business customers can magnify down to a 15 minute scope, for the last 6 hours - Enterprise customers can magnify down to a 1 minute scope, for the last 30 minutes.

• Free customers can magnify down to a 1 hour scope, for the last 24 hours
• Pro and Business customers can magnify down to a 15 minute scope, for the last 6 hours
• Enterprise customers can magnify down to a 1 minute scope, for the last 30 minutes

View the history of your DNS queries by up to a certain amount of time.

Visualise and analyze all Firewall Events in one place to better understand your threat landscape. Identify, mitigate, and review attacks more effectively.

Survey the traffic distribution across your load balancers. Understand behavior during peak traffic and failover decisions made, with the option to filter by load balancer, pool, origin, and region.

View and download the most recent changes made within your account via UI or API.

Cloudflare Enterprise customers have access to detailed logs of HTTP requests for their domains. These logs can be helpful for debugging, identifying configuration adjustments, or creating analytics, especially when combined with other data sources, such as application server logs.

Free, pro, and biz plan: Free for the first 10 GB, $1 per GB per month after
Enterprise: Custom pricing

Waiting Room Analytics gives you historical insights into the traffic going through your waiting room compared to your waiting room settings. Data is stored for the past 30 days.
Using Waiting Room Analytics, you can:

• Evaluate peak traffic flow through your waiting room and onto your site.
• Determine how long users spent in the waiting room.
• Use analytics to help calibrate your waiting room settings.

Bring your business into compliance with the latest PCI DSS 4.0 standards by enabling Cloudflare's web application firewall (WAF) and Modern TLS Only mode.

Times are reflective of when the initial response from support will be received, as per the plan level. Read more about our support response times.

In the rare event of downtime, customers receive a service credit against the monthly fee, in proportion to the respective disruption and affected customer ratio.

For all questions and topics related related to your account and relationship with Cloudflare, Enterprise customers have access to a designated customer success manager.

Enterprise premium customers also get a guided onboarding experience along with an expert tuning workshop and guidance on security and performance configurations.

If suffering from an attack that thwarts current security configurations, our enterprise support team will apply additional rules or patches to protect your mission-critical web assets and support your uptime SLA.

The Standard Success Offering helps you get started quickly with guided customer success-led onboarding, customer success guidance, and continued online support and training.

The Premium Success Offering includes everything in the Standard Success Offering plus a designated success team assigned to your account that provides highly customized tuning and strategic assistance at every step along the way.

Learn More