Cloudflare Publishes Second Annual Impact Report

San Francisco, CA, December 16, 2022 – Cloudflare, Inc. (NYSE: NET), the security, performance, and reliability company helping to build a better Internet, today published its second annual Impact Report showcasing its commitment to helping build an Internet that is principled, accessible for everyone, and sustainable. Cloudflare began publicly reporting information about its environmental, social, and governance (ESG) impacts in 2021. This year, the company focused on expanding the value and scope of Cloudflare’s Impact programs; supporting humanitarian and human rights causes, most notably helping protect Ukrainians’ access to the Internet by protecting against DDoS and other cyber attacks; and examining how the company calculates and validates emissions data.

“Cloudflare has built a team of employees dedicated to providing real, positive impact for the millions of users of our services and the billions of Internet users our decisions affect,” said Matthew Prince, co-founder and CEO of Cloudflare. “In 2022, the company has jumped into action to help protect people in Ukraine, secure a fair and trusted midterm election so that cyber security was not a headline, and contribute to the development of privacy-enhancing protocols that will ripple far beyond our customers. Whatever next year brings, we’ll be ready to continue ensuring the Internet is accessible, safe, and reliable for all.”

Highlights of the 2022 Cloudflare Impact Report include:

• Assistance to Ukraine: Cloudflare moved quickly to offer free services and support to Ukrainian government and infrastructure providers. In addition to protecting the .ua top-level domain, Cloudflare currently protects approximately 130 Ukrainian government and infrastructure domains, as well as providing free assistance to 79 Ukrainian nonprofit groups that are helping refugees, documenting war crimes, sharing information, and providing local services.
• Giving back to the Internet: Rate Limiting, a tool that helps defend against bots and a variety of attacks, is available to all customers, including on the Free plan. The open beta of Turnstile provides a more seamless and accessible method for any website owner to confirm visitors are real people without relying on CAPTCHA. In October 2022, we announced that, as a beta service, all websites and APIs served through Cloudflare would support post-quantum hybrid key agreement.
• Democratizing access to Zero Trust: The shift to remote work has further complicated all organizations’ abilities to defend against attacks, protect data, and maintain visibility and security controls over how users move and store data across cloud environments. To further support vulnerable nonprofits, independent journalists, and election administrators, Project Galileo and Athenian Project participants now receive free access to Cloudflare’s suite of Zero Trust protections. A new Impact Initiative, Project Safekeeping, provides free Zero Trust security to small and medium critical infrastructure around the world.
• Engineering privacy into the Internet: This year, Cloudflare pioneered implementation of numerous technologies designed to ensure Internet service providers (ISPs) and other network observers cannot track websites their subscribers visit. Privacy Gateway builds on those efforts by relaying encrypted data packets through our servers to obscure user IP addresses. In 2022, we partnered with a period tracker app to enable Privacy Gateway to prevent the ISP and app from being able to associate individual IP addresses with the tracker.
• Protecting 2,150 vulnerable organizations from an average of 57.9 million cyber threats per day: Founded in 2014, Cloudflare’s Project Galileo provides free cyber security protection to qualified public interest groups like artists, advocates, humanitarian organizations, and the voices of political dissent that face cyber threats in disproportionate numbers.
• Securing small businesses: Small businesses don’t always have the budget for security services; as of December 2022, we identified millions of free accounts responsible for roughly 70 trillion requests over the Cloudflare network in 2022. This is a value of $7 million of content delivery network services that they received at no cost.
• Cloudflare services yield significant emissions savings: Preliminary findings from an upcoming study by Analysys Mason estimate that Cloudflare’s Web Application Firewall (WAF) “generates up to around 90% less carbon than on-premises appliances at low-medium traffic demand.”

To learn more, please visit the full report and read more from Cloudflare’s Impact Week:

• Impact Report 2022
• Blog: Closing out 2022 with our latest Impact Report
• Cloudflare Impact

About Cloudflare Cloudflare, Inc. (www.cloudflare.com / @cloudflare) is on a mission to help build a better Internet. Cloudflare’s suite of products protect and accelerate any Internet application online without adding hardware, installing software, or changing a line of code. Internet properties powered by Cloudflare have all web traffic routed through its intelligent global network, which gets smarter with every request. As a result, they see significant improvement in performance and a decrease in spam and other attacks. Cloudflare was named to Entrepreneur Magazine’s Top Company Cultures 2018 list and ranked among the World’s Most Innovative Companies by Fast Company in 2019.

Forward-Looking Statements This press release contains forward-looking statements within the meaning of Section 27A of the Securities Act of 1933, as amended, and Section 21E of the Securities Exchange Act of 1934, as amended, which statements involve substantial risks and uncertainties. In some cases, you can identify forward-looking statements because they contain words such as “may,” “will,” “should,” “expect,” “explore,” “plan,” “anticipate,” “could,” “intend,” “target,” “project,” “contemplate,” “believe,” “estimate,” “predict,” “potential,” or “continue,” or the negative of these words, or other similar terms or expressions that concern Cloudflare’s expectations, strategy, plans, or intentions. However, not all forward-looking statements contain these identifying words. Forward-looking statements expressed or implied in this press release include, but are not limited to, statements regarding the potential benefits from Cloudflare’s Impact programs and its other products and technology, the capabilities and effectiveness of Cloudflare’s Impact programs and other products and technology, the expected functionality and performance of Cloudflare’s Impact programs and other products and technology, the timing of when any new features for Cloudflare’s Impact programs and other products and technology will be generally available to current and potential Cloudflare customers, Cloudflare’s technological development, future operations, growth, initiatives, or strategies, and comments made by Cloudflare’s CEO and others. Cloudflare’s actual results could differ materially from those stated or implied in forward-looking statements due to a number of factors, including but not limited to, risks detailed in its filings with the Securities and Exchange Commission (SEC), including Cloudflare’s Quarterly Report on Form 10-Q filed on November 3, 2022, as well as other filings that we may make from time to time with the SEC.

The forward-looking statements made in this press release relate only to events as of the date on which the statements are made. We undertake no obligation to update any forward-looking statements made in this press release to reflect events or circumstances after the date of this press release or to reflect new information or the occurrence of unanticipated events, except as required by law. We may not actually achieve the plans, intentions, or expectations disclosed in Cloudflare’s forward-looking statements, and you should not place undue reliance on Cloudflare’s forward-looking statements.

© 2022 Cloudflare, Inc. All rights reserved. Cloudflare, the Cloudflare logo, and other Cloudflare marks are trademarks and/or registered trademarks of Cloudflare, Inc. in the U.S. and other jurisdictions. All other marks and names referenced herein may be trademarks of their respective owners.