Free
Pro
Business
Enterprise
$0 / mo
Cloudflare for Individuals is built on our global network. This package is ideal for people with personal or hobby projects that aren’t business-critical.
Support response: Community forums available for tips and troubleshooting.
* Additional terms and conditions may apply.
Fast, easy-to-use DNS
Free automated SSL certificates
Global content delivery network (CDN)
DDoS attack mitigation
Up to 100k Workers requests and 30 scripts
3 Page Rules
Enhanced security with Web Application Firewall (WAF)
Default WAF rule sets (e.g. WordPress Rules)
DDoS Alerts
Lossless image optimization
Accelerated mobile page load speed
Privacy-first analytics
24x7x365 chat support
100% uptime SLA
CNAME set-up compatibility
PCI DSS 3.2 compliance
Want to learn more? View Free Plan
$20 / mo
Cloudflare for Professionals is ideal for people that want to protect and accelerate their professional websites or blog.
Support response: Median email response time of less than 4 hours for urgent issues, and Community forums available for tips and troubleshooting.
20 Page Rules
Want to learn more? View Pro Plan
$200 / mo
Cloudflare’s PCI-compliant Business plan is ideal for small businesses operating online. This package includes a 100% uptime SLA, advanced security features, and gives you prioritized customer support.
Support response: Median email response time of less than 2 hours.
Everything Included in Pro, plus..
Unmetered mitigation of DDoS attacks with up to 51 tbps capacity
Web application firewall (WAF) with 25 custom rulesets
SSL / TLS 1.2 & 1.3 with Shared or Single Custom Upload
50 Page Rules
Minimum edge cache expire TTL at 30 minutes
Analytics time-range at 15 minute scope
Prioritized Customer Support: 24x7x365 by chat and email
Audit logs
Customer support via phone
Role-based account control
Single-Sign-On support
Network prioritization
Advanced Bot Management
Layer-3 Network DDoS protection with Magic Transit*
China Network Access
Want to learn more? View Business Plan
Ask for Quote
Cloudflare's Enterprise plan is for mission-critical applications that are core to your business. Whether you are small or large, Cloudflare's Enterprise plan provides you with advanced security, performance and reliability features.
Support response: Median email response time of less than 1 hour.
Everything Included in Business, plus...
Web application firewall (WAF) with unlimited custom rulesets
SSL / TLS 1.2 & 1.3 with Shared or Multiple Custom Upload
125 Page Rules
Minimum edge cache expire TTL at 30 seconds or less
Audit logs and Enterprise Raw Logs with destination integrations
Analytics time-range at 1 minute scope
Prioritized Customer Support: 24x7x365 by phone, chat, and email support
100% uptime SLA up to 25x reimbursement
Network Prioritization
Advanced Bot Management*
Spectrum (for TCP/UDP)*
SSL/TLS for SaaS*
China Network Access*
Want to learn more? View Enterprise Plan
Filter
Globally Load Balanced CDN
Our 194 data centers located across the globe provide visitors with location-based access to your website, while removing latency and improving performance.
Static Content Caching
Cloudflare saves you CPU resources and bandwidth by serving your static content directly from our global data centers.
Instant Full Cache Purge
Purge the entire Cloudflare cache or just a single file without waiting.
Min Cache TTL Expiry
Cloudflare respects all existing headers, unless you choose to overwrite them. The minimum edge cache expire TTL sets the refetch time for when Cloudflare checks the origin server for a new resource.
2h
1h
30m
1s
Client Max Upload Size (MB)
The amount of data visitors can upload to your website in a single request.
100
200
500+
TCP Turbo
TCP Turbo automatically chooses the TCP settings to further accelerate your website. Accelerate latency and throughput with custom-tuned TCP optimizations. Enabled automatically for Pro, Business, and Enterprise customers.
Cache Bypass On Cookie
Cache Purge - By Tag
Cache-Tags are assigned to cached content via a Cache-Tag response header, and are stored as metadata with cached objects so that global purges take only seconds, targeting a granular, finite set of cached objects.
Cache Purge - By Host
Purge by host offers Cloudflare customers who manage multiple subdomains the ability to purge the cache on a per-host basis. For example, if the Cloudflare domain example.com wanted to purge everything on staging.example.com, purge by host enables this with a single API call.
Custom Cache Keys
Custom Cache Keys allow caching to be extended to something more specific than just the URL, this allows you to extend caching beyond just static files.
Prioritized IP Ranges
Enterprise Internet assets are placed on Cloudflare dedicated IP ranges, providing prioritized routing and protection to ensure maximum speed and availability.
Prefetching URLs
Argo Smart Routing
Argo's smart routing algorithm uses real-time network intelligence to route traffic through the fastest Cloudflare network paths, while maintaining open, secure connections to eliminate latency imposed by connection-setup.
Pricing for Free, Pro, and Business Plans: $5 per month; First 1 GB is free and $0.10 per GB thereafter.
Paid Add-on
Custom Pricing
Tiered Caching
Argo’s tiered caching technology uses regional tier 1 Cloudflare data centers to propagate content to Cloudflare’s global network, minimizing static content requests to your server and reducing costs.
Included with Argo
Load Balancing
Usage based pricing is determined by the number of DNS requests made by visitors.
Free, Pro, and Business Plan pricing:
Enterprise customers: Includes 2 origin servers
Enterprise customers can negotiate a reduced rate through custom pricing.
Global Load Balancing (Geo-based Routing)
Global Load Balancing ensures that visitors receive dynamic content from origin servers closest to them.
Free, Pro, and Business Plan Pricing: enable for $10 per month.
Enterprise customers: Included with data center control.
Load Balancing Health Checks
Health checks continually ping origin servers to determine if it's online.
Free, Pro, and Business plan pricing:
Enterprise customers:includes health checks every 5 seconds.
Enterprise customers:includes health checks from every Cloudflare data center.
China Network
Gain access to Cloudflare's 20 data centers across China.
Stream
Cloudflare Stream is an easy-to-use, affordable, on-demand video streaming platform.
Stream Delivery
Cloudflare’s Stream Delivery offers caching and delivery of video content through its 194 data centers around the globe.
Page Rules
Set up forwarding, extend or exclude caching, require SSL connections, and generally exercise fine-grained control over how Cloudflare interacts with your site on a page-by-page basis.
3
20
50
125
Accelerated Mobile Links (AMP)
Cloudflare’s Accelerated Mobile Links, powered by AMP, loads AMP-enabled external links inside of a viewing window, within the same tab, at least 3 times faster than normal mobile pages.
IPv6, HTTP/2, SPDY
Support both IPv4 and IPv6 connections to your site without a single change to your existing infrastructure. HTTP/2 is the latest update to the HTTP protocol. HTTP/2 brings advancements in efficiency, security, and speed, particularly on high-latency and mobile connections. Cloudflare provides automatic HTTP/2 and SPDY coverage for your visitors.
WebSockets
A WebSocket is a persistent full-duplex protocol which provides low latency client-server communication without the overhead of HTTP.
Async JavaScript Loading with Rocket Loader
Automatically optimizes your pages to minimize the number of network connections and ensure even third party resources won't slow down page rendering.
Image Optimization with Polish
Polish applies "lossless" or optional "lossy" image optimization to reduce your image sizes by 35% on average.
Mobile Optimization
Mirage automatically optimizes image loading through virtualized and lazyloaded images. It detects the browser type of a visitor and optimizes performance for the particular device, improving the performance of images on a mobile connection.
CNAME Setup
Subdomain Zones (LTZ)
Header Rewrites
Used to rewrite headers if customers don’t have a way of controlling their headers. For example, if your Amazon S3 bucket requires a specific host header set in order to fetch assets.
Image Resizing
Resize images for a variety of device types and connections from a single-source primary image. Images can be manipulated by dimensions, compression ratios, and format (WebP conversion where supported). Included with Business and Enterprise plans (with limits).
Free, Pro plan: Not available.
Business plan: Up to 100k images served per month, included. $10 per month per additional 100k images served.
Enterprise customers: Up to 10 million images served per month, included.
Key-value Storage with Workers
DDoS Mitigation
Cloudflare’s unmetered mitigation of DDoS stops illegitimate volumetric traffic at the Cloudflare edge. All Cloudflare plans include unmetered mitigation without fear of being dropped.
Enterprise DDoS Mitigation
Cloudflare’s enterprise-grade mitigation of DDoS attacks against layers 3, 4, & 7 includes prioritized IP ranges and routing, ensuring maximum speed and availability.
True Client IP Header
Argo Tunnel
Using a lightweight agent installed on origin infrastructure, including containers or virtual machines, Cloudflare creates an encrypted tunnel between its nearest data center and an application’s origin server without opening a public inbound port.
Cloudflare Access - Basic
Cloudflare Access protects internal resources by securing, authenticating and monitoring access per-user and by application. With Cloudflare Access, only authenticated users with the required permissions are able to access specific resources behind the Cloudflare edge.
Supports the following identity providers:
Free, Pro, and Business Plan: $3 per user per month
5 Users Included
Cloudflare Access - Premium
Support Cloudlfare Access Basic identify providers plus:
Free, Pro, and Business Plan: $5 per user per month
Mutual TLS
Spectrum (for TCP/UDP)
Spectrum protects TCP applications and ports from volumetric DDoS attacks and data theft by proxying non-web traffic through Cloudflare’s Anycast network.
Static IPs, Anycast Your Own IP
Deploy Intelligence to Identify New Threats
Cloudflare gets smarter about security threats as more sites join. Protection from attacks on one site is extended to the entire Cloudflare community within seconds.
Reputation-based Threat Protection
Comment Spam Protection
Stop spammers from posting to your website.
Content Scraping Protection
Protect all of your content including text, images and email addresses from web scrapers with Cloudflare's ScrapeShield™ service.
Domain Protection
Custom Domain Protection for Cloudflare Registrar, available on the Enterprise Plan, protects your organization from domain hijacking with exclusively out-of-band verification of any changes to your Registrar account. Cloudflare is an ICANN accredited registrar providing secure domain registration for high-profile domains.
Cloudflare will send you a real-time alert when our systems automatically detect and mitigate a DDoS attack.
Universal SSL Certificate
Cloudflare is compatible with your existing SSL configuration. If you do not currently use SSL, Cloudflare can provide you with SSL capabilities — no configuration required.
Dedicated SSL Certificate
Dedicated SSL Certificates allow you to secure multiple levels of your subdomains and include your fully qualified domain name in the Common Name (CN).
Free, Pro, and Business Plan Pricing:
Bring Your Own SSL Certificate
Bring your own dedicated SSL certificate (upload to our network; supports EV certificates).
1
Keyless SSL
Keyless SSL lets you route encrypted traffic through Cloudflare's global network, while retaining on-premise custody of private keys. SSL private keys never leave your on-premise infrastructure, and are not shared with anyone.
SSL/TLS For SaaS
Cloudflare’s SSL for SaaS solution allows the customers’ of SaaS providers to CNAME their custom domains to the SaaS provider’s subdomain. This offers SaaS customers the benefit of a branded and encrypted vanity domain. Cloudflare automatically handles certificate management and renewals. Learn more at cloudflare.com/saas/
Firewall Rules
5
1000
Firewall Rules - Regex
Regular Expressions (regex), sometimes called a pattern, is an expression used to specify a set of strings. Like wildcards, but more powerful, regex gives you the ability to pattern-match text strings occuring in supported fields to target specific traffic.
User Agent Blocking Rules
Create a rule to block or challenge a specific User Agent from accessing your domain. This works similarly to Zone Lockdown, except the block examines incoming User-Agent strings rather than IPs. User Agent blocking applies to an entire zone, and sub-domains cannot not be specified.
10
250
Zone Lockdown Rules
Zone Lockdown allows for the whitelisting of specific IP addresses and IP ranges, whereby all other IPs are effectively blacklisted. This supports specific sub-domains and URLs and is useful to protect an administrative area from non-specified IP addresses.
Cloudflare Managed Rules
OWASP Core Rulesets
Includes OWASP ModSecurity Core Rule Set automatically to protect you against the Top 10 vulnerabilities identified by the Open Web Application Security Project (OWASP).
Rate Limiting
Free, Pro, and Business Plan:
Rate Limiting Rules
The total number of individual rules per plan type, with which to instruct rate limiting how to function on your website, application, or API.
15
Rate Limiting Header Rules
The number of rules where the Header Response is used as a trigger. One header rule is already used by default to determine whether to count based on origin traffic or traffic served from the cache.
Stop bad bots from Credential Stuffing, Content Scraping/Spamming, Inventory Hoarding and Credit Card Stuffing types of attacks by leveraging smart data.
Captcha/JS Challenge
hCaptcha served to visitors matching the triggered rules, and JS Challenge will run a JavaScript challenge that validates whether the visitor is using a legitimate browser.
Global Anycast DNS
Fast responsive times globally and nearinstant updates.
DNSSEC
DNSSEC ensures that a website’s traffic is safely directed to the correct servers, so that a connection to a website is not intercepted by a man-in-the-middle.
Custom Nameservers
Custom nameservers allow you to create your own, unique nameservers in place of your assigned Cloudflare nameservers.
Wildcard DNS
Cloudflare supports wildcard DNS at all plan levels. For Enterprise plans, Cloudflare will full proxy wildcards providing security and performance for these subdomains.
Wildcard DNS Record Proxy
For Enterprise plans, Cloudflare will full proxy wildcards providing security and performance for these subdomains.
Secondary DNS
Cloudflare can easily be setup as a secondary DNS provider. When records are edited with the primary DNS provider, the corresponding records at Cloudflare are automatically updated.
Multi-User Administrative Access
Invite others to manage the account as an Administrator. Invited Administrators have full control over the account except for managing members and changing billing information. Visit the ‘Members’ tab, in the new Account area within the Cloudflare dashboard to get started.
Role-based Access Control
Role-based access for Cloudflare accounts enables organizations to collaborate across one Cloudflare account, and use roles-based permissions to control access. Each user is assigned an individual API key and can use two-factor authentication to protect their own account.
Read-only User Access
Multi-Org Setup
SSO Support
The Cloudflare dashboard now supports Single Sign On (SSO) for ease of centralized identity and access management. Cloudflare Account Owners will be able to setup and define who can access their Cloudflare accounts with the same Identity Provider (IdP) they currently use.
Cloudflare API Access
Terraform Integration
Site, DNS Analytics
Cache Analytics
Deeper exploration capabilities into what Cloudflare’s caching and content delivery services are doing for your web presence.
Site Analytics (resolution)
The Cloudflare analytics dashboard provides all customers with 30 days of data and the ability to magnify your data by time range scopes of 1 hour, 15 minutes, or 1 minute, depending on your plan type. - Free customers can magnify down to a 1 hour scope, for the last 24 hours - Pro and Business customers can magnify down to a 15 minute scope, for the last 6 hours - Enterprise customers can magnify down to a 1 minute scope, for the last 30 mintues
15m
1m
DNS Analytics (historical time)
View the history of your DNS queries by up to a certain amount of time.
6h
24h
7d
30d
Firewall Analytics (historical time)
Visualise and analyze all Firewall Events in one place to better understand your threat landscape. Identify, mitigate, and review attacks more effectively.
3d
Load Balancing Analytics (historical time)
Survey the traffic distribution across your load balancers. Understand behavior during peak traffic and failover decisions made, with the option to filter by load balancer, pool, origin, and region.
Audit Logs
View and download the most recent changes made within your account via UI or API.
Request Logs
Cloudflare Enterprise customers have access to detailed logs of HTTP requests for their domains. These logs can be helpful for debugging, identifying configuration adjustments, or creating analytics, especially when combined with other data sources, such as application server logs.
ISO 27001
SOC 2 Type II, SOC 3
PCI DSS 3.2
Bring your business into compliance with the latest PCI DSS 3.2 standards by enabling Cloudflare's web application firewall (WAF) and Modern TLS Only mode.
Email Support
Less than 4 hours for urgent issues
Chat Support
24x7x365 Emergency Phone Support
Median Email Response Time
Less than 24h
Less than 4h
Less than 2h
Less than 1h
Uptime SLA
100%
Uptime Service Credits
In the rare event of downtime, customers receive a service credit against the monthly fee, in proportion to the respective disruption and affected customer ratio.
1x
10x (Standard) ; 25x (Premium)
Customer Success Manager led Onboarding
For all questions and topics related related to your account and relationship with Cloudflare, Enterprise customers have access to a designated customer success manager.
I’m Under Attack Support Engineer
If suffering from an attack that thwarts current security configurations, our enterprise support team will apply additional rules or patches to protect your mission-critical web assets and support your uptime SLA.
10x (included in Standard)/25x (Premium) reimbursement uptime SLA
Designated Customer Success Manager and Solutions Engineer (Premium)
Take your performance and security even further with Cloudflare’s paid add-ons for Free, Pro, and Business plans.
Argo is a service that uses optimized routes across the Cloudflare network to deliver responses to your users more quickly, reliably, and securely. Argo includes: Smart Routing, Tunnel, and Tiered Caching.
Starting at $5 per month
Dedicated SSL Certificates are automatically generated and propagate throughout our global content delivery network, providing robust encryption, along with lightning fast performance and compatibility.
Cloudflare Workers lets developers deploy serverless code written in JavaScript, Rust, C, and C++ to Cloudflare's edge, closer to the end user.
Try for free
Cloudflare Access protects internal resources by securing, authenticating and monitoring access per-user and by application.
Starting at $3 per month
Load Balancing safeguards from service disruptions with local and global traffic load balancing, geographic routing, server health checks, and failover, ensuring the continuous availability of your critical resources.
Cloudflare Stream makes streaming high quality video at scale, easy and affordable.
Rate Limiting protects against denial-of-service attacks, brute-force password attempts, and other types of abusive behavior targeting the application layer.
$.05 per 10k good requests
Resize images for a variety of device types and connections from a single-source master image. Images can be manipulated by dimensions, compression ratios, and format (WebP conversion where supported). *Requires Business or Enterprise Plan
$10/mo for additional requests
Page Rules allow you to customize Cloudflare's functionality to match the unique needs of your domain or subdomain, helping to optimize speed, harden security, increase reliability, maximize bandwidth savings, and much more.
$5 for 5 rules
Cloudflare Apps is a simple and powerful way for millions of site owners to get access to tools previously only available to technical experts.
Free for all plans
You pay what we pay — you won’t find better value. Cloudflare Registrar securely registers and manages your domain names with transparent, no-markup pricing that eliminates surprise renewal fees and hidden add-on charges.
Starting at $7.85
How does Cloudflare work?
Cloudflare protects and accelerates any website online. Once your website is a part of the Cloudflare community, its web traffic is routed through our intelligent global network. We automatically optimize the delivery of your web pages so your visitors get the fastest page load times and best performance. We also block threats and limit abusive bots and crawlers from wasting your bandwidth and server resources.
Where can I learn more about using Cloudflare?
The easiest way to learn how to use Cloudflare is to sign-up, which takes less than 5 minutes.
When is my billing date?
The date you first select a paid plan will be the recurring billing date. For example: If you sign up for the first time on January 10, all future charges will be billed on the 10th of every month.
What happens when I upgrade?
If you currently have a paid plan (e.g. Pro) for one of your domains and upgrade to a higher priced plan (e.g. Business), the following happens:
Have more questions? Visit our FAQs page
for personal websites and blogs
Our mission is to build a better Internet. We believe every website should have free access to foundational security and performance. Cloudflare's Free plan has no limit on the amount of bandwidth your visitors use or websites you add.
If you want to make your site even faster and more resilient, you can easily upgrade to one of our higher tier plans.
View all case studies
To provide you with the best possible experience on our website, we may use cookies, as described here.By clicking accept, closing this banner, or continuing to browse our websites, you consent to the use of such cookies.