Preview Mode
Documentation

Security, Performance, and Reliability - all in one package

Simplify and secure access for any user to any application, on any device, in any location.


Free Plan
Best for teams under 50 users or enterprise proof-of-concept tests.

$0 forever
Get started
Pay-as-you-go
Best for teams over 50 users solving narrow SSE use cases and do not require enterprise support services.

$7/user/month
Get started
Contract Plan
Best for organizations building toward a full-featured SSE or SASE deployment that also desire maximum support.

Annual custom price per user
Talk to an expert

Core Capabilities

Usage
50 user limit
No user limit
No user limit

Uptime
Uptime
Dependable service level agreements (SLA) for paid plans with 100% uptime and reliable service you can trust.
100% uptime guarantee (SLA)
100% uptime guarantee (SLA)

Support and services
Support and services
Support options vary by plan type. Various professional advisory and hands-on implementation services available as add-on to Contract plans.
Community forums and Discord server
Chat and ticket support
Phone, chat, and ticket support; professional services available (add-on)

Log retention
Log retention
Zero Trust logs are stored for a varying period of time based on the plan type and service used. Contract users can export logs via Logpush.
up to 24 hours
up to 30 days
Up to 6 months; Logpush to SIEM/cloud storage

Application connector software
Application connector software
Securely connects resources to Cloudflare without a publicly routable IP address. Does not require VM infrastructure and has no throughput limitations.

Device client (agent) software
Device client (agent) software
Securely and privately sends traffic from end user devices to Cloudflare’s global network. Enables capabilities like building device posture rules or enforcing filtering policies anywhere. Self-enroll or deploy via MDM.

Zero Trust Network Access (ZTNA)
Zero Trust Network Access (ZTNA)
ZTNA provides granular identity- and context-based access to all your internal self-hosted, SaaS, and non-web (e.g., SSH) resources.

Secure Web Gateway (SWG)
Secure Web Gateway (SWG)
SWG protects against ransomware, phishing, and other threats using L4-7 network, DNS, and HTTP filtering policies for faster, safer Internet browsing.

Digital Experience Monitoring (DEX)
Digital Experience Monitoring (DEX)
Provides user-centric visibility into device, network, and application performance across your Zero Trust organization.

Network flow monitoring
Network flow monitoring
Provides network traffic visibility and real-time alerts for unified insights into network activity. Available for free to everyone.

Cloud Access Security Broker (CASB)
Cloud Access Security Broker (CASB)
CASB continuously monitors SaaS apps at rest to detect potential data exposure due to misconfigurations or weak posture findings.
Up to 2 read-only API integrations
Up to 2 read-only API integrations
Unlimited out-of-band integrations (add-on)

Data Loss Prevention (DLP)
Data Loss Prevention (DLP)
DLP detects sensitive data in transit and at rest across web, SaaS and private apps with controls or remediation guides to stop leakage or exposure.
Limited predefined profiles
Limited predefined profiles
Full-featured (add-on)

Remote Browser Isolation (RBI)
Remote Browser Isolation (RBI)
RBI layers additional threat defense and data protection controls across browsing activities by running all browser code on Cloudflare's global network.
Add-on
Add-on

Email security
Email security
Email security helps block and isolate multichannel phishing threats, including malware and business email compromise.
Add-on

Network services for SASE
Network services for SASE
Cloudflare One is our single-vendor SASE platform that converges Zero Trust security services from the plans above with Network services — including Magic WAN and Firewall.
Add-on (See next pricing tab)

Looking for Cloudflare One plans?

Cloudflare One is our single-vendor SASE platform that converges the Zero Trust security services above with Network services — including Magic WAN and Firewall — described on the next pricing tab.

Contact us to learn more about SASE contract options.

Talk to an expert

Embrace Zero Trust Security