Cloudflare — research brief

# Cloudflare — research brief

**Slug:** `cloudflare`  
**Industry:** Edge / Security / AI  
**Last updated:** 2026-09-21 (America/Chicago)  
**Teaching arc:** Free CDN/security → Workers developer PLG → Zero Trust / SASE enterprise → Workers AI + Agentic Internet

Label key: **FACT** = primary (Cloudflare site, docs, company PR, investor materials). **SECONDARY** = reputable press. **INFERENCE** = model reading from facts (not a cited metric).

## Company snapshot

Cloudflare, Inc. (NYSE: **NET**) sells a “connectivity cloud”: reverse-proxy CDN and security (DNS, DDoS, WAF, SSL) on a large global edge, plus Zero Trust / SASE for people and devices, plus a developer platform (Workers, R2, D1, Durable Objects, Workers AI, Vectorize) that runs code and AI inference at the edge. Founded 2009; HQ San Francisco. Homepage / PR positioning: powers ~**20%+ of websites** and sits in front of large API / agent traffic (**FACT** — Q2 2026 PR CEO quote / company marketing).

## Products (FACT — cloudflare.com / developers.cloudflare.com)

| Product family | What it is | Primary buyers |
|----------------|------------|----------------|
| Application services (Free → Enterprise) | CDN, DNS, Universal SSL, unmetered DDoS, WAF tiers | Sites, apps, SMBs → enterprise |
| Zero Trust / SASE | Access, Gateway, CASB, etc. — Free (<50 users), PAYG, Contract | IT / security teams |
| Workers platform | Serverless edge compute; Pages Functions billed as Workers | Developers |
| R2 | Object storage **without egress fees** | Data-heavy apps leaving S3-style egress |
| Workers AI | 50+ models at the edge; neuron-based billing | Devs / AI apps |
| Vectorize, D1, KV, Durable Objects, Queues, Containers | Data & stateful primitives on the same network | Full-stack edge builders |
| Radar / network intel | Public Internet insights | Brand / community |

## Pricing (prefer official)

### Application plans (FACT — https://www.cloudflare.com/plans/)

- **Free** — $0/mo; personal/hobby; CDN, DNS, Universal SSL, unmetered DDoS, free managed ruleset.
- **Pro** — **$20**/mo; professional websites.
- **Business** — **$200**/mo billed annually, or **$250**/mo billed monthly; small businesses; 100% uptime SLA.
- **Contract / Enterprise** — custom, billed annually; mission-critical; network prioritization, richer SLAs/credits, SSO, etc.

### Workers (FACT — https://developers.cloudflare.com/workers/platform/pricing/)

- **Workers Free:** 100,000 requests/day; 10 ms CPU/invocation; limited KV/Hyperdrive.
- **Workers Paid:** **$5 USD/month** minimum; **10 million** requests included/mo then **$0.30**/million; **30 million** CPU-ms included then **$0.02**/million CPU-ms; **no egress/bandwidth** charge on Workers. Static asset requests free/unlimited.

### Workers AI (FACT — https://developers.cloudflare.com/workers-ai/platform/pricing/)

- **10,000 Neurons/day** free allocation (Free and Paid).
- Above free allocation on Workers Paid: **$0.011 / 1,000 Neurons**.
- Some frontier models require Workers Paid or prepaid AI Gateway credits.

### R2 (FACT — plans / R2 docs)

- Free tier includes storage/ops allotments; Standard storage **$0.015 / GB-month**; **egress to Internet free** (headline differentiator vs typical cloud object storage).

### Zero Trust (FACT — plans page)

- **Free:** teams under 50 users / PoC.
- **Pay-as-you-go:** teams over 50, narrow SSE without enterprise support.
- **Contract:** full-featured SASE / workspace security.

## Financial & scale metrics (public company)

### Q2 FY2026 (quarter ended Jun 30, 2026) — FACT company PR Aug 6, 2026

- **Revenue $696.1M**, **+36% YoY**.
- GAAP gross margin **71.8%**; non-GAAP operating income **$96.1M** (14% of revenue).
- Cash & securities **$4.16B** as of Jun 30, 2026.
- Source: https://www.cloudflare.com/press/press-releases/2026/cloudflare-announces-second-quarter-2026-financial-results/

### Customer metrics — FACT earnings call / investor materials Q2 2026

- **4,698** customers with **>$100k** annualized revenue (**+27% YoY**); large customers ~**73%** of revenue (investor presentation).
- Added **>80,000** paying customers in the quarter; paying-customer growth **74% YoY** (CEO on earnings call).
- Dollar-based net retention **120%** (Form 10-Q / MD&A commentary for Q2 2026).
- Network: **335+ cities** in **125+ countries**; **~13,000** networks directly connected (Q2 2026 investor presentation).
- **45%+** of Fortune 500 are paying customers (as of Jun 30, 2026 — investor presentation).

## What we do **not** invent

- No unofficial ARR breakdowns by product (Workers vs SASE vs app services) — Cloudflare does not publish a clean public split.
- No inventing exact total free-user or website counts beyond company claims (~20% of websites).
- Prefer Q2 **2026** PR/10-Q over older 2025 figures when citing current scale.

## Teaching arc (INFERENCE from product + pricing ladder)

1. **Land:** Free CDN/security + Free Workers → adopt at internet scale with near-zero CAC for the free tier.  
2. **Expand compute:** Workers Paid ($5) + R2 (no egress) + related storage/DB primitives.  
3. **Expand security:** Pro/Business site plans and Zero Trust PAYG → Contract SASE.  
4. **AI / agents:** Workers AI neurons + Vectorize + agentic workloads on the same edge.  
5. **Enterprise:** multi-product Contract deals; large-customer share of revenue rises with NRR expansion.

## Primary sources

- https://www.cloudflare.com/plans/
- https://developers.cloudflare.com/workers/platform/pricing/
- https://developers.cloudflare.com/workers-ai/platform/pricing/
- https://www.cloudflare.com/press/press-releases/2026/cloudflare-announces-second-quarter-2026-financial-results/
- https://cloudflare.net/files/doc_financials/2026/q2/Q2-2026-Cloudflare-Investor-Presentation.pdf
- https://www.cloudflare.com/ (connectivity cloud / marketing claims)