Cloudflare for Teams | Plans + Pricing

Core Features

Each plan starts with the same baseline security controls designed to bring the power of Cloudflare’s global edge network to secure users, devices and networks with Zero Trust browsing and application access.

Zero Trust Network Access
Private Routing to IP/Hosts
Network Firewall as-a-service
Cloud Access Security Broker
Secure Web Gateway
HTTP/S Inspection and Filters
DNS Resolution and Filters

Free Plan

Best for teams under 50 users or proof-of-concept test runs.

$0/user

maximum of 50 users

Get Started

Support response: Community forums available for tips and troubleshooting.

Standard Plan

Best for teams over 50 users that do not require enterprise support services.

$7/user

billed month-to-month

Get Started

Add Browser Isolation for an additional $10 per user

Support response: Median initial response time of 4 hours, for urgent issues.

Enterprise Plan

Best for organizations that want security transformation backed by maximum support, visibility, connectivity and interoperability.

$14/user

tier-based custom quotes available

Add Browser Isolation based on a custom quote per user

Support response: Median initial response time of 1 hour, for urgent issues.

Teams Free $0/ user

Teams Standard $7/ user

Teams Enterprise $14/ user

Support

Communication channels

Community forums

24x7x365 Chat / Email

24x7x365 Phone / 24x7x365 Chat / Email

Median initial email response time

N/A

4 hours

1 hour

Service level agreement (SLA)

100% uptime SLA

Onboarding support

Specialist onboarding service

Reduce risk

Zero Trust Network Access

Secure Web Gateway

↳ Recursive DNS Filters

↳ Layer 7 Proxy Filters

↳ Antivirus inspection

↳ CASB

↳ Firewall as-a-service

↳ Remote Browser Isolation

Add on (natively-integrated)

Increase visibility

Activity log retention

24 hours

30 days

6 months

Categorized application groups for Shadow IT visibility

Identity-based country, state, and device detail views

Push logs to cloud storage or SIEMs

Consistent policy

Custom application, private network and Internet access policies

Unlimited

Authentication via enterprise and social IdPs

Security categories (13) via machine learning and threat intelligence feeds

Content categories (100+) for acceptable use

Custom block, allow, or decryption bypass lists

Granular HTTP and URL rules

File type controls

CSV-based bulk import for lists

Device posture using third-party integrations and Cloudflare

Secure connectivity

Client-based encrypted connections to the Internet (WARP client)

Win, Mac, iOS, Android, Linux*

Clientless secure access to self-hosted and SaaS applications

Private connections for self-hosted applications, IPs and hostnames (Cloudflare Tunnel)

Network-level security for physical locations

Editable IP network locations

^*coming soon

Simple interoperability

Endpoint and mobility management integrations

Split-tunneling for local or VPN connectivity

Client self-enrollment for users on unmanaged devices

Customizable app launcher

Authentication supports multiple identity providers concurrently

Generic and custom connectors to support SAML and OIDC

Service token support for automated services

Certificate-based auth for IoT and other mTLS use cases

No performance sacrifices

Fastest, global edge network (200+ cities)

Fastest, global policy updates (<5 seconds)

Fastest, intelligent IP routing (<100ms)

Fastest, privacy-first DNS resolver (7-31ms)

Uptime SLA

100%

Fastest Zero Trust browsing service (2x speed of others)

Add on

Get Started

Add-On: Zero Trust Browser Isolation

Faster than any legacy remote browser. Natively integrated in the Cloudflare for Teams policy builder, allowing administrators to allow, block, or isolate any security or content category and application group.

See Standard or Enterprise plans for pricing

Get started

Execute all browser code in the cloud

Mitigate the impact of attacks

Seamless, lightning-fast end user experience

Use Standard Access or Standard Gateway separately

Only solving for limited use cases today? Contractors, mergers or acquisitions need access? VPN split-tunneling causing blindness in your gateway? We can help!

Get started

Trusted by approximately 25,000,000 Internet properties, in any industry, including:

Sales

Getting Started

Community

Developers

Support

Company