Core Features

Each plan starts with the same baseline security controls designed to bring the power of Cloudflare’s global edge network to secure users, devices and networks with Zero Trust browsing and application access.

  • Zero Trust Network Access

  • Private Routing to IP/Hosts

  • Network Firewall as-a-service

  • Cloud Access Security Broker

  • Secure Web Gateway

  • HTTP/S Inspection and Filters

  • DNS Resolution and Filters

Teams Free $0/ user
Teams Standard $7/ user
Teams Enterprise $14/ user

Support

Communication channels
Community forums
24x7x365 Chat / Email
24x7x365 Phone / 24x7x365 Chat / Email
Median initial email response time
N/A
4 hours
1 hour
Service level agreement (SLA)
100% uptime SLA
100% uptime SLA
Onboarding support
Specialist onboarding service

Reduce risk

Zero Trust Network Access
Secure Web Gateway
Recursive DNS Filters
Layer 7 Proxy Filters
Antivirus inspection
CASB
Firewall as-a-service
Remote Browser Isolation Teams Enterprise: For the first 2,000 users until 31 December 2021. Normal add-on pricing applies for additional users or in 2022.
Add on (natively-integrated)

Increase visibility

Activity log retention
24 hours
30 days
6 months
Categorized application groups for Shadow IT visibility
Identity-based country, state, and device detail views
Push logs to cloud storage or SIEMs

Consistent policy

Custom application, private network and Internet access policies
Unlimited
Unlimited
Unlimited
Authentication via enterprise and social IdPs
Security categories (13) via machine learning and threat intelligence feeds
Content categories (100+) for acceptable use
Custom block, allow, or decryption bypass lists
Granular HTTP and URL rules
File type controls
CSV-based bulk import for lists
Device posture using third-party integrations and Cloudflare

Secure connectivity

Client-based encrypted connections to the Internet (WARP client)
Win, Mac, iOS, Android, Linux*
Win, Mac, iOS, Android, Linux*
Win, Mac, iOS, Android, Linux*
Clientless secure access to self-hosted and SaaS applications
Private connections for self-hosted applications, IPs and hostnames (Cloudflare Tunnel)
Network-level security for physical locations
3
20
50
Editable IP network locations
*coming soon

Simple interoperability

Endpoint and mobility management integrations
Split-tunneling for local or VPN connectivity
Client self-enrollment for users on unmanaged devices
Customizable app launcher
Authentication supports multiple identity providers concurrently
Generic and custom connectors to support SAML and OIDC
Service token support for automated services
Certificate-based auth for IoT and other mTLS use cases

No performance sacrifices

Fastest, global edge network (200+ cities)
Fastest, global policy updates (<5 seconds)
Fastest, intelligent IP routing (<100ms)
Fastest, privacy-first DNS resolver (7-31ms)
Uptime SLA
100%
100%
Fastest Zero Trust browsing service (2x speed of others)
Add on
Add on
Get Started
Get Started
Contact Us

Add-On: Zero Trust Browser Isolation

Faster than any legacy remote browser. Natively integrated in the Cloudflare for Teams policy builder, allowing administrators to allow, block, or isolate any security or content category and application group.

See Standard or Enterprise plans for pricing

Get started
Execute all browser code in the cloud
Mitigate the impact of attacks
Seamless, lightning-fast end user experience

Use Standard Access or Standard Gateway separately

Only solving for limited use cases today? Contractors, mergers or acquisitions need access? VPN split-tunneling causing blindness in your gateway? We can help!

Get started

Trusted by thousands of businesses including:

Sales

Getting Started

Community

Developers

Support

Company

© 2021 Cloudflare, Inc.Privacy PolicyTerms of UseDisclosureCookie PreferencesTrademark