Cloudflare Earns FedRAMP® Moderate Authorization to Further Help Government Agencies Modernize and Secure U.S. Infrastructure

San Francisco, CA, December 14, 2022 — Cloudflare, Inc. (NYSE: NET), the security, performance, and reliability company helping to build a better Internet, today announced that it has achieved the U.S. Federal Risk and Authorization Management Program's (FedRAMP®) Moderate Status. Achieving FedRAMP authorization reinforces Cloudflare’s commitment to the Public Sector and the U.S. federal agencies, U.S. state and local governments and the Defense Industrial Base (DIB). Cloudflare supports these critical organizations as they aim to provide a faster and safer online experience for constituents, secure remote workforces, and protect network and critical infrastructure, whether using on-premises or hybrid cloud deployments.

The Biden administration continues to emphasize the urgent need to strengthen the cybersecurity and resiliency of the country’s critical infrastructure and technologies. As the threat landscape intensifies, cybersecurity best-practices have shifted from the walled-garden approach with VPNs to the more secure, Zero Trust framework – in which organizations do not automatically trust any requests to data or resources. Federal, state and local government agencies can now leverage the Cloudflare platform to address cyber requirements called out in EO 14028, M-22-09 and NIST 800-207. The same platform can be used to improve delivery of citizen services, in alignment with EO 14058.

“Cloudflare has long served the most technical, security-aware agencies like the FBI and U.S Department of State,” said Matthew Prince, co-founder & CEO of Cloudflare. “With this FedRAMP milestone, Cloudflare can serve more agencies, as well as the companies that sell to them.” Cloudflare provides security, performance, and reliability services through its global network to over 40 United States Federal Government agencies. In 2021, the Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency (CISA) began utilizing Cloudflare to deliver a protective DNS resolver solution for all Federal Civilian Executive Branch (FCEB) agencies. Cloudflare is committed to supporting critical government functions, including the nation's election infrastructure. Through its Athenian Project, Cloudflare provides services for free to state, county, and local officials administering elections. Officials in more than half of U.S. states in the 2020 election took advantage of Cloudflare's services which secured access to information on their websites.

Cloudflare is available on the FedRAMP marketplace [here]. To learn more about Cloudflare, its Web, Application & Zero Trust solutions, and how it supports the public sector check out the resources below:

• Cloudflare One (SASE & Zero Trust)
• Cloudflare Application Services
• Cloudflare for Public Sector
• Roadmap to Zero Trust Architecture

About Cloudflare Cloudflare, Inc. (www.cloudflare.com / @cloudflare) is on a mission to help build a better Internet. Cloudflare’s suite of products protect and accelerate any Internet application online without adding hardware, installing software, or changing a line of code. Internet properties powered by Cloudflare have all web traffic routed through its intelligent global network, which gets smarter with every request. As a result, they see significant improvement in performance and a decrease in spam and other attacks. Cloudflare was named to Entrepreneur Magazine’s Top Company Cultures 2018 list and ranked among the World’s Most Innovative Companies by Fast Company in 2019.

Forward-Looking Statements This press release contains forward-looking statements within the meaning of Section 27A of the Securities Act of 1933, as amended, and Section 21E of the Securities Exchange Act of 1934, as amended, which statements involve substantial risks and uncertainties. In some cases, you can identify forward-looking statements because they contain words such as “may,” “will,” “should,” “expect,” “explore,” “plan,” “anticipate,” “could,” “intend,” “target,” “project,” “contemplate,” “believe,” “estimate,” “predict,” “potential,” or “continue,” or the negative of these words, or other similar terms or expressions that concern Cloudflare’s expectations, strategy, plans, or intentions. However, not all forward-looking statements contain these identifying words. Forward-looking statements expressed or implied in this press release include, but are not limited to, statements regarding the capabilities and effectiveness of the Cloudflare One suite of Zero Trust solutions, the benefits to Cloudflare’s customers from using the Cloudflare One suite of Zero Trust solutions and Cloudflare’s other products and technology, the expected functionality and performance of the Cloudflare One suite of Zero Trust solutions and Cloudflare’s other products and technology, the timing of when any new Cloudflare One features will be generally available to all current and potential Cloudflare customers, Cloudflare’s technological development, future operations, growth, initiatives, or strategies, and comments made by Cloudflare’s CEO and others. Cloudflare’s actual results could differ materially from those stated or implied in forward-looking statements due to a number of factors, including but not limited to, risks detailed in its filings with the Securities and Exchange Commission (SEC), including Cloudflare’s Quarterly Report on Form 10-Q filed on March 5, 2022, as well as other filings that we may make from time to time with the SEC.

The forward-looking statements made in this press release relate only to events as of the date on which the statements are made. We undertake no obligation to update any forward-looking statements made in this press release to reflect events or circumstances after the date of this press release or to reflect new information or the occurrence of unanticipated events, except as required by law. We may not actually achieve the plans, intentions, or expectations disclosed in Cloudflare’s forward-looking statements, and you should not place undue reliance on Cloudflare’s forward-looking statements.

© 2022 Cloudflare, Inc. All rights reserved. Cloudflare, the Cloudflare logo, and other Cloudflare marks are trademarks and/or registered trademarks of Cloudflare, Inc. in the U.S. and other jurisdictions. All other marks and names referenced herein may be trademarks of their respective owners.