Personal or hobby projects that aren’t business critical.
Add-ons billed monthly
DDoS attack mitigation
Global Content Delivery Network
Support via email
Community forums available for tips and troubleshooting.
Protect and accelerate your professional websites or blog.
Everything in Free
Enhanced security with Web Application Firewall (WAF)
Lossless image optimization
Automatic mobile optimization
Automatic TCP optimization
Median email response time of less than 4 hours for urgent issues, and Community forums available for tips and troubleshooting.
PCI-compliant Business Plan for small businesses operating online.
Everything in Pro
24x7x365 chat support
100% uptime SLA
CNAME set-up compatibility
Easy PCI compliance
Use your own SSL certificate
Median email response time of less than 2 hours.
Advanced security, performance and reliability features.
Ask for Quote
Everything in Business
24x7x365 emergency phone support
Advanced bot management
Median email response time of less than 1 hour.
Cloudflare’s unmetered mitigation of DDoS stops illegitimate volumetric traffic at the Cloudflare edge. All Cloudflare plans include unmetered mitigation without fear of being dropped.
Our data centers located across the globe provide visitors with location-based access to your website, while removing latency and improving performance.
Lossless Image Optimization
Polish applies "lossless" or optional "lossy" image optimization to reduce your image sizes by 35% on average.
Automatic Mobile Optimization
Mirage automatically optimizes image loading through virtualized and lazyloaded images. It detects the browser type of a visitor and optimizes performance for the particular device, improving the performance of images on a mobile connection.
Cloudflare's Business and Enterprise customers receive a 100% uptime guarantee. In the event of downtime, customers receive a service credit against their monthly fee, in proportion to the respective disruption and affected customer ratio. You can view the full Business plan SLA, here: https://www.cloudflare.com/business-sla/
CNAME set-up compatability
Bring your own dedicated SSL certificate (upload to our network; supports EV certificates).
24x7x365 phone support
Enterprise customers have access to our 24/7/365 emergency phone support hotline
Dedicated solutions engineer support
For help with on-boarding, training, and optimizations, Cloudflare Enterprise customers have access to a named solutions engineer.
Role-based Access Control
Role-based access for Cloudflare accounts enables organizations to collaborate across one Cloudflare account, and use roles-based permissions to control access. Each user is assigned an individual API key and can use two-factor authentication to protect their own account.
25x reimbursement uptime SLA
In the rare event of downtime, Enterprise customers receive a 25x credit against the monthly fee, in proportion to the respective disruption and affected customer ratio.
Advanced Bot Management
Stop bad bots from Credential Stuffing, Content Scraping/Spamming, Inventory Hoarding and Credit Card Stuffing types of attacks by leveraging smart data.
Globally Load Balanced CDN
Our 194 data centers located across the globe provide visitors with location-based access to your website, while removing latency and improving performance.
Static Content Caching
Cloudflare saves you CPU resources and bandwidth by serving your static content directly from our global data centers.
Instant Full Cache Purge
Purge the entire Cloudflare cache or just a single file without waiting.
Min Cache TTL Expiry
Cloudflare respects all existing headers, unless you choose to overwrite them. The minimum edge cache expire TTL sets the refetch time for when Cloudflare checks the origin server for a new resource.
Client Max Upload Size (MB)
The amount of data visitors can upload to your website in a single request.
TCP Turbo automatically chooses the TCP settings to further accelerate your website.
Accelerate latency and throughput with custom-tuned TCP optimizations. Enabled automatically for Pro, Business, and Enterprise customers.
Cache Bypass On Cookie
Cache Purge - By Tag
Cache-Tags are assigned to cached content via a Cache-Tag response header, and are stored as metadata with cached objects so that global purges take only seconds, targeting a granular, finite set of cached objects.
Cache Purge - By Host
Purge by host offers Cloudflare customers who manage multiple subdomains the ability to purge the cache on a per-host basis. For example, if the Cloudflare domain example.com wanted to purge everything on staging.example.com, purge by host enables this with a single API call.
Custom Cache Keys
Custom Cache Keys allow caching to be extended to something more specific than just the URL, this allows you to extend caching beyond just static files.
Prioritized IP Ranges
Enterprise Internet assets are placed on Cloudflare dedicated IP ranges, providing prioritized routing and protection to ensure maximum speed and availability.
Argo Smart Routing
Argo's smart routing algorithm uses real-time network intelligence to route traffic through the fastest Cloudflare network paths, while maintaining open, secure connections to eliminate latency imposed by connection-setup.
Pricing for Free, Pro, and Business Plans: $5 per month; First 1 GB is free and $0.10 per GB thereafter.
Argo’s tiered caching technology uses regional tier 1 Cloudflare data centers to propagate content to Cloudflare’s global network, minimizing static content requests to your server and reducing costs.
Included with Argo
Usage based pricing is determined by the number of DNS requests made by visitors.
Free, Pro, and Business Plan pricing:
Enterprise customers: Includes 2 origin servers
Enterprise customers can negotiate a reduced rate through custom pricing.
Global Load Balancing (Geo-based Routing)
Global Load Balancing ensures that visitors receive dynamic content from origin servers closest to them.
Free, Pro, and Business Plan Pricing: enable for $10 per month.
Enterprise customers: Included with data center control.
Load Balancing Health Checks
Health checks continually ping origin servers to determine if it's online.
Free, Pro, and Business plan pricing:
Enterprise customers:includes health checks every 5 seconds.
Enterprise customers:includes health checks from every Cloudflare data center.
Gain access to Cloudflare's 20 data centers across China.
Cloudflare Stream is an easy-to-use, affordable, on-demand video streaming platform.
Cloudflare’s Stream Delivery offers caching and delivery of video content through its 194 data centers around the globe.
Set up forwarding, extend or exclude caching, require SSL connections, and generally exercise fine-grained control over how Cloudflare interacts with your site on a page-by-page basis.
Accelerated Mobile Links (AMP)
Cloudflare’s Accelerated Mobile Links, powered by AMP, loads AMP-enabled external links inside of a viewing window, within the same tab, at least 3 times faster than normal mobile pages.
IPv6, HTTP/2, SPDY
Support both IPv4 and IPv6 connections to your site without a single change to your existing infrastructure.
HTTP/2 is the latest update to the HTTP protocol. HTTP/2 brings advancements in efficiency, security, and speed, particularly on high-latency and mobile connections. Cloudflare provides automatic HTTP/2 and SPDY coverage for your visitors.
A WebSocket is a persistent full-duplex protocol which provides low latency client-server communication without the overhead of HTTP.
Automatically optimizes your pages to minimize the number of network connections and ensure even third party resources won't slow down page rendering.
Image Optimization with Polish
Subdomain Zones (LTZ)
Used to rewrite headers if customers don’t have a way of controlling their headers. For example, if your Amazon S3 bucket requires a specific host header set in order to fetch assets.
Resize images for a variety of device types and connections from a single-source primary image. Images can be manipulated by dimensions, compression ratios, and format (WebP conversion where supported). Included with Business and Enterprise plans (with limits).
Free, Pro plan: Not available.
Business plan: Up to 100k images served per month, included. $10 per month per additional 100k images served.
Enterprise customers: Up to 10 million images served per month, included.
Key-value Storage with Workers
Enterprise DDoS Mitigation
Cloudflare’s enterprise-grade mitigation of DDoS attacks against layers 3, 4, & 7 includes prioritized IP ranges and routing, ensuring maximum speed and availability.
True Client IP Header
Using a lightweight agent installed on origin infrastructure, including containers or virtual machines, Cloudflare creates an encrypted tunnel between its nearest data center and an application’s origin server without opening a public inbound port.
Cloudflare Access - Basic
Cloudflare Access protects internal resources by securing, authenticating and monitoring access per-user and by application. With Cloudflare Access, only authenticated users with the required permissions are able to access specific resources behind the Cloudflare edge.
Supports the following identity providers:
Free, Pro, and Business Plan: $3 per user per month
5 Users Included
Cloudflare Access - Premium
Support Cloudlfare Access Basic identify providers plus:
Free, Pro, and Business Plan: $5 per user per month
Spectrum (for TCP/UDP)
Spectrum protects TCP applications and ports from volumetric DDoS attacks and data theft by proxying non-web traffic through Cloudflare’s Anycast network.
Static IPs, Anycast Your Own IP
Deploy Intelligence to Identify New Threats
Cloudflare gets smarter about security threats as more sites join. Protection from attacks on one site is extended to the entire Cloudflare community within seconds.
Reputation-based Threat Protection
Comment Spam Protection
Stop spammers from posting to your website.
Content Scraping Protection
Protect all of your content including text, images and email addresses from web scrapers with Cloudflare's ScrapeShield™ service.
Custom Domain Protection for Cloudflare Registrar, available on the Enterprise Plan, protects your organization from domain hijacking with exclusively out-of-band verification of any changes to your Registrar account. Cloudflare is an ICANN accredited registrar providing secure domain registration for high-profile domains.
Cloudflare will send you a real-time alert when our systems automatically detect and mitigate a DDoS attack.
DDoS Protection for SSH
Cloudflare Spectrum protects your SSH server from DDoS attacks of any size and kind. Better yet, SSH sessions are faster over the Cloudflare network than over the Internet.
5GB monthly data allowance $1/GB overage fees
10GB monthly data allowance $1/GB overage fees
DDoS Protection for Minecraft
Delivering immersive and secure gaming experiences to your Minecraft players around the world is a massive challenge — network latency and DDoS attacks contribute to the ‘lag’ and downtime of your Minecraft server.
Solve this challenge with Cloudflare Spectrum – which helps power fast and reliable online gaming experiences.
Protection for RDP
Cloudflare Spectrum can help improve business productivity by helping IT teams deliver real-time, responsive, and reliable RDP experiences to their workforce.
Universal SSL Certificate
Cloudflare is compatible with your existing SSL configuration. If you do not currently use SSL, Cloudflare can provide you with SSL capabilities — no configuration required.
Dedicated SSL Certificate
Dedicated SSL Certificates allow you to secure multiple levels of your subdomains and include your fully qualified domain name in the Common Name (CN).
Free, Pro, and Business Plan Pricing:
Bring Your Own SSL Certificate
Keyless SSL lets you route encrypted traffic through Cloudflare's global network, while retaining on-premise custody of private keys. SSL private keys never leave your on-premise infrastructure, and are not shared with anyone.
SSL/TLS For SaaS
Cloudflare’s SSL for SaaS solution allows the customers’ of SaaS providers to CNAME their custom domains to the SaaS provider’s subdomain. This offers SaaS customers the benefit of a branded and encrypted vanity domain. Cloudflare automatically handles certificate management and renewals. Learn more at cloudflare.com/saas/
Firewall Rules - Regex
Regular Expressions (regex), sometimes called a pattern, is an expression used to specify a set of strings. Like wildcards, but more powerful, regex gives you the ability to pattern-match text strings occuring in supported fields to target specific traffic.
User Agent Blocking Rules
Create a rule to block or challenge a specific User Agent from accessing your domain. This works similarly to Zone Lockdown, except the block examines incoming User-Agent strings rather than IPs. User Agent blocking applies to an entire zone, and sub-domains cannot not be specified.
Zone Lockdown Rules
Zone Lockdown allows for the whitelisting of specific IP addresses and IP ranges, whereby all other IPs are effectively blacklisted. This supports specific sub-domains and URLs and is useful to protect an administrative area from non-specified IP addresses.
Cloudflare Managed Rules
OWASP Core Rulesets
Includes OWASP ModSecurity Core Rule Set automatically to protect you against the Top 10 vulnerabilities identified by the Open Web Application Security Project (OWASP).
Free, Pro, and Business Plan:
Rate Limiting Rules
The total number of individual rules per plan type, with which to instruct rate limiting how to function on your website, application, or API.
Rate Limiting Header Rules
The number of rules where the Header Response is used as a trigger. One header rule is already used by default to determine whether to count based on origin traffic or traffic served from the cache.
Bot Fight Mode
Basic bot mitigation
Super Bot Fight Mode
Bot reporting and advanced mitigation
Global Anycast DNS
Fast responsive times globally and nearinstant updates.
DNSSEC ensures that a website’s traffic is safely directed to the correct servers, so that a connection to a website is not intercepted by a man-in-the-middle.
Custom nameservers allow you to create your own, unique nameservers in place of your assigned Cloudflare nameservers.
Cloudflare supports wildcard DNS at all plan levels. For Enterprise plans, Cloudflare will full proxy wildcards providing security and performance for these subdomains.
Wildcard DNS Record Proxy
For Enterprise plans, Cloudflare will full proxy wildcards providing security and performance for these subdomains.
Cloudflare can easily be setup as a secondary DNS provider. When records are edited with the primary DNS provider, the corresponding records at Cloudflare are automatically updated.
Multi-User Administrative Access
Invite others to manage the account as an Administrator. Invited Administrators have full control over the account except for managing members and changing billing information. Visit the ‘Members’ tab, in the new Account area within the Cloudflare dashboard to get started.
Read-only User Access
The Cloudflare dashboard now supports Single Sign On (SSO) for ease of centralized identity and access management. Cloudflare Account Owners will be able to setup and define who can access their Cloudflare accounts with the same Identity Provider (IdP) they currently use.
Cloudflare API Access
Site, DNS Analytics
Deeper exploration capabilities into what Cloudflare’s caching and content delivery services are doing for your web presence.
Site Analytics (resolution)
The Cloudflare analytics dashboard provides all customers with 30 days of data and the ability to magnify your data by time range scopes of 1 hour, 15 minutes, or 1 minute, depending on your plan type.
- Free customers can magnify down to a 1 hour scope, for the last 24 hours
- Pro and Business customers can magnify down to a 15 minute scope, for the last 6 hours
- Enterprise customers can magnify down to a 1 minute scope, for the last 30 mintues
DNS Analytics (historical time)
View the history of your DNS queries by up to a certain amount of time.
Firewall Analytics (historical time)
Visualise and analyze all Firewall Events in one place to better understand your threat landscape. Identify, mitigate, and review attacks more effectively.
Load Balancing Analytics (historical time)
Survey the traffic distribution across your load balancers. Understand behavior during peak traffic and failover decisions made, with the option to filter by load balancer, pool, origin, and region.
View and download the most recent changes made within your account via UI or API.
Cloudflare Enterprise customers have access to detailed logs of HTTP requests for their domains. These logs can be helpful for debugging, identifying configuration adjustments, or creating analytics, especially when combined with other data sources, such as application server logs.
SOC 2 Type II, SOC 3
PCI DSS 3.2
Bring your business into compliance with the latest PCI DSS 3.2 standards by enabling Cloudflare's web application firewall (WAF) and Modern TLS Only mode.
Less than 4 hours for urgent issues
24x7x365 Emergency Phone Support
Median Email Response Time
Less than 24h
Less than 4h
Less than 2h
Less than 1h
Uptime Service Credits
In the rare event of downtime, customers receive a service credit against the monthly fee, in proportion to the respective disruption and affected customer ratio.
10x (Standard) ; 25x (Premium)
Customer Success Manager led Onboarding
For all questions and topics related related to your account and relationship with Cloudflare, Enterprise customers have access to a designated customer success manager.
I’m Under Attack Support Engineer For Magic Transit
If suffering from an attack that thwarts current security configurations, our enterprise support team will apply additional rules or patches to protect your mission-critical web assets and support your uptime SLA.
10x (included in Standard)/25x (Premium) reimbursement uptime SLA
Designated Customer Success Manager and Solutions Engineer (Premium)
Take your performance and security even further with Cloudflare’s paid add-ons for Free, Pro, and Business plans.
Argo is a service that uses optimized routes across the Cloudflare network to deliver responses to your users more quickly, reliably, and securely. Argo includes: Smart Routing, Tunnel, and Tiered Caching.
Starting at $5 per month
Dedicated SSL Certificates are automatically generated and propagate throughout our global content delivery network, providing robust encryption, along with lightning fast performance and compatibility.
Try for free
Cloudflare Access protects internal resources by securing, authenticating and monitoring access per-user and by application.
Starting at $3 per month
Load Balancing safeguards from service disruptions with local and global traffic load balancing, geographic routing, server health checks, and failover, ensuring the continuous availability of your critical resources.
Cloudflare Stream makes streaming high quality video at scale, easy and affordable.
Rate Limiting protects against denial-of-service attacks, brute-force password attempts, and other types of abusive behavior targeting the application layer.
$.05 per 10k good requests
Resize images for a variety of device types and connections from a single-source master image. Images can be manipulated by dimensions, compression ratios, and format (WebP conversion where supported). *Requires Business or Enterprise Plan
$10/mo for additional requests
Page Rules allow you to customize Cloudflare's functionality to match the unique needs of your domain or subdomain, helping to optimize speed, harden security, increase reliability, maximize bandwidth savings, and much more.
$5 for 5 rules
Cloudflare Apps is a simple and powerful way for millions of site owners to get access to tools previously only available to technical experts.
Free for all plans
You pay what we pay — you won’t find better value. Cloudflare Registrar securely registers and manages your domain names with transparent, no-markup pricing that eliminates surprise renewal fees and hidden add-on charges.
Starting at $7.85
How does Cloudflare work?
Cloudflare protects and accelerates any website online. Once your website is a part of the Cloudflare community, its web traffic is routed through our intelligent global network. We automatically optimize the delivery of your web pages so your visitors get the fastest page load times and best performance. We also block threats and limit abusive bots and crawlers from wasting your bandwidth and server resources.
Where can I learn more about using Cloudflare?
The easiest way to learn how to use Cloudflare is to sign-up, which takes less than 5 minutes.
When is my billing date?
The date you first select a paid plan will be the recurring billing date. For example: If you sign up for the first time on January 10, all future charges will be billed on the 10th of every month.
What happens when I upgrade?
If you currently have a paid plan (e.g. Pro) for one of your domains and upgrade to a higher priced plan (e.g. Business), the following happens:
Have more questions?
Visit our FAQs page
for personal websites and blogs
Our mission is to build a better Internet. We believe every website should have free access to foundational security and performance. Cloudflare's Free plan has no limit on the amount of bandwidth your visitors use or websites you add.
If you want to make your site even faster and more resilient, you can easily upgrade to one of our higher tier plans.
View all case studies