Protect your website from attacks

Ensure uninterrupted availability, guard sensitive data, and preserve user trust for your business-critical web applications.

In Q1 2024, Cloudflare blocked an average of 209 billion cyber threats each day

Cloudflare powers millions of Internet properties

Financial and reputational damage from cyber attacks are a constant risk

Protect your applications and APIs from malicious traffic to keep your business online and reduce operating costs.

security week hero illustration
Scope target - Icon

30% of traffic Cloudflare sees on the Internet is bot-related.

Security shield protection - Icon

In February 2023, Cloudflare detected and mitigated the largest HTTPS DDoS attack on record, a 71 million request-per-second DDoS attack.

Traffic attack browser - Tile

There are billions of stolen credentials on the dark web to fuel credential stuffing that leads to account takeover.

See the Cloudflare Difference

Why should you sign up for a Cloudflare Pro or Business plan?

Illustration of the earth, with blue dots representing cities around the globe, connected orange lines representing Cloudflare's network
Global security for peace of mind

Cloudflare's global network has a capacity of over %{NetworkCapacityV2} and spans more than 335 cities in 125+ countries. Our network stops attacks at the source where they are launched.

integrated-cloud-network_Illustration
Precise, data-driven security

The Cloudflare network reach provides unmatched visibility into threats, informing our machine learning models to provide the most up to date protection with low false positives.

Illustration of security screens
Easy deployment

Cloudflare builds products that are simple to configure and deploy. Reduce overhead to manage your site's security and hit the ground running.

Included with the Pro or Business plan

Get instant protection with Cloudflare's web application firewall (WAF) and bot mitigation

Gain a modern application security posture with immediate protection against security threats including:

  • Zero-day vulnerability exploits
  • Brute force attacks
  • Price scraping
  • Credential stuffing attacks
  • Cross site scripting (XSS)
  • Other OWASP Top 10 application attacks
  • DoS and DDoS attacks
  • Inventory hoarding
  • Magecart-style attacks / browser supply chain attacks
  • Cryptographic failures
  • SQL injection

SOFI

Cloudflare WAF was so easy and intuitive to use. It took our engineers almost no time to get up to speed. We’ve now expanded our usage of Cloudflare’s suite of products. Integrating with any Cloudflare solution has been just so smooth and painless

- Paul Shope
Security Engineer

FEATURED SECURITY SOLUTIONS

Cloudflare Pro and Business plans include:

Security WAF Tile - Icon
Web Application Firewall

Protect your website against security threats, such as zero-day vulnerabilities, OWASP top-10 attack techniques, and use of compromised or stolen credentials with Cloudflare's Managed Rulesets.

Security shield protection checkmark - Icon
Security Center

Cloudflare Security Center offers attack surface management (ASM) that inventories IT assets, enumerates potential security issues, controls phishing and spoofing risks, and enables security teams to investigate and mitigate threats in a few clicks.

Icon Tile Page Shield
Page Shield

Cloudflare Page Shield protects your visitors from Magecart-style supply chain attacks that steal credit card information and sensitive data through malicious third-party dependencies.

Security shield protection - Icon
Unmetered DDoS Protection

Cloudflare's unmetered mitigation of DDoS protects Internet applications and APIs from volumetric attack, ensuring fast performance and high availability.

Security bots
Bot Management

Protect against bot attacks with Super Bot Fight Mode. Block or challenge automated traffic and access real-time analytics to better understand bot activity.

Traffic attack browser - Tile
Rate Limiting

Guards against denial-of-service attacks, brute-force password attempts, and other types of abusive behavior targeting the application layer.

Plans and pricing

Free

$0 / month

Add-ons billed monthly

For personal or hobby projects that aren’t business-critical.

Pro

$20 / month

When billed annually or $25 / mo billed monthly

For professional websites that aren't business-critical.

Business

$200 / month

When billed annually or $250 / mo billed monthly

For small businesses operating online.

Performance

Global CDN (330+ locations)
Fast, easy-to-use DNS
Web Analytics
Up to 100K workers requests
Automatic Platform Optimization (APO)
Lossless image optimization
Accelerated mobile page load speed
Cache Bypass On Cookie
Increased cache refresh frequency
Waiting Room
WAF & custom rules
Sophisticated bot management
Built-in compliance (PCI, SOC 2)
WAF Attack Score Lite (ML-powered)
Security Analytics
100% Uptime SLA & Credits

Security

Free automated SSL certificates
DDoS attack mitigation
Up to 65 Cloudflare Rules
Enhanced WAF & 20 custom rules
DDoS Alerts
Up to 155 Cloudflare Rules

Support

Ticket support
Chat, Ticket Support & Analytics
Security Shield Protection Icon

Security, Performance, and Reliability - all in one package