We use the product to access applications that are restricted to employees only.
Information Security and Compliance Manager at a tech vendor with 11-50 employees
Helps to secure applications from public but needs improvement in documentation
Pros and Cons
- "Cloudflare Zero Trust Platform removes the risk of exposing the applications to the public."
- "Cloudflare Zero Trust Platform needs to improve its documentation. It took time to do the implementation."
What is our primary use case?
How has it helped my organization?
Cloudflare Zero Trust Platform removes the risk of exposing the applications to the public.
What needs improvement?
Cloudflare Zero Trust Platform needs to improve its documentation. It took time to do the implementation.
For how long have I used the solution?
I have been using the product since January.
Buyer's Guide
Cloudflare One
June 2025

Learn what your peers think about Cloudflare One. Get advice and tips from experienced pros sharing their opinions. Updated: June 2025.
856,873 professionals have used our research since 2012.
What do I think about the stability of the solution?
I rate the solution's stability a ten out of ten.
What do I think about the scalability of the solution?
I rate the product's scalability a ten out of ten.
How was the initial setup?
Cloudflare Zero Trust Platform's deployment can be complex if the documentation doesn't cover the use cases.
What's my experience with pricing, setup cost, and licensing?
Cloudflare Zero Trust Platform's pricing is good.
What other advice do I have?
I rate the product a nine out of ten.
Disclosure: My company does not have a business relationship with this vendor other than being a customer.

Technical Solutions Specialist at Google
The most effective solution with excellent signatures and a helpful support team
Pros and Cons
- "Cloudflare is by far the most effective solution that I have come across."
- "Operating and tuning the product is difficult."
What is our primary use case?
I use the solution for scrubbing internet-based traffic that comes toward a particular company’s data center. The traffic is directed to Cloudflare first. Cloudflare does the traffic scrubbing and sends the clean traffic toward the company's data center.
What is most valuable?
I have worked with many DDoS solutions. Cloudflare is by far the most effective solution that I have come across. It is really good. The product’s signatures are good. The people in the accounting and technical management teams are nice. Support is also good.
What needs improvement?
Operating and tuning the product is difficult.
For how long have I used the solution?
I have been using the solution for almost one and a half years.
What do I think about the stability of the solution?
The tool is pretty much stable. I rate the stability a ten out of ten.
What do I think about the scalability of the solution?
I rate the scalability a nine out of ten. The solution has a huge customer base. In our organization, 10,000 people are using the solution.
How are customer service and support?
When we often face issues with the service, we contact the support team. The team is really good. However, support could be improved.
How was the initial setup?
The onboarding process was pretty simple.
What about the implementation team?
We deployed the product two years ago. We took a couple of months to deploy it.
What other advice do I have?
If someone wants to set up a DDoS solution for the first time, they should choose Cloudflare. Overall, I rate the product a nine out of ten.
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Buyer's Guide
Cloudflare One
June 2025

Learn what your peers think about Cloudflare One. Get advice and tips from experienced pros sharing their opinions. Updated: June 2025.
856,873 professionals have used our research since 2012.
Senior Cyber Security Consultant at ATOS
User-friendly solution with an easy initial setup process
Pros and Cons
- "It is a stable solution."
- "Our subscription plan for the solution has a limitation of bot signatures."
What is our primary use case?
We use the solution to protect some of the services. It helps us protect our applications and infrastructure.
What is most valuable?
The solution is user-friendly in terms of graphical interface and is easy to deploy.
What needs improvement?
Our subscription plan for the solution has a limitation of bot signatures.
What do I think about the stability of the solution?
It is a stable solution.
How was the initial setup?
It is an in-built tool in our Cloudflare infrastructure, and we use it as a DNS service. Thus, we don't necessarily have to configure it. We add it as a service, and it works great for us.
What other advice do I have?
The solution is excellent. It helped us a lot with DDoS issues. I rate it a ten out of ten.
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
IT Associate at GNRC Hospitals
Provides protection to websites by allowing its user to add a two-factor authentication
Pros and Cons
- "For Cloudflare Access, I am using the free plan...The most valuable feature is their protection."
- "They don't have a person to provide support for customers using the solution under their free plan."
What is our primary use case?
I mostly use Cloudflare Access for protecting some specific areas of my website, specifically public access. So I can do it using two-factor authentication. So it only allows some registered emails to access that part of my website.
What is most valuable?
For Cloudflare Access, I am using the free plan. So they are allowing 50 users to use it together. So we can say it is not only for personal use but also beneficial for a small team of fifty people. We can use it in a small company or startup also.
The most valuable feature is their protection. Also, its custom rule set is something we can use to specify whether we want to allow a user to access a specific application-specific software.
What needs improvement?
I'm just a beginner in Cloudcare Access. So I have used their basic functionality. So, I didn't find any issue with their basic functionalities.
They don't have a person to provide support for customers using the solution under their free plan. So, the aforementioned area can be considered for improvement.
For how long have I used the solution?
I have been using Cloudflare Access for three to four months. I'm using Cloudera Access for my personal use.
How are customer service and support?
I haven't contacted technical support.
How was the initial setup?
The solution is deployed on the cloud. So, it is mainly deployed on Cloudflare infrastructure. We can use that to protect our application or step on our own server or any software as a service application.
They have Web2py, which we can use for setup. But before that, we have to add the domain we want to protect with Cloudflare Access to Cloudflare DNS. So I want to say that before using Cloudflare Access for a specific domain, we have to add them to Cloudflare DNS. Only then can we use Cloudflare Access.
What other advice do I have?
Whether to use the solution or not will depend on your requirements. For basic security, we all have already implemented a password and a username on our website. But nowadays, it is possible to crack passwords because of modern computation. So, if we want to secure our services, it is really good to add a two-factor authentication using Cloud Access to improve security.
Without adding any manual code or any more software to our servers, I can easily implement zero trust Cloudflare Access, which is because of their simple UI, by just adding my domain and specifying a role. So it's easy.
I rate the overall solution a ten out of ten.
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Provides remote access, is feature-rich and user-friendly
Pros and Cons
- "Enables me to work from two locations."
What is our primary use case?
Access provides remote access to RDP, FSH, and security camera websites.
What is most valuable?
I work from two locations and Access enables me to work from both. It's feature-rich and user-friendly.
What needs improvement?
It's a little difficult to implement although that has nothing to do with the product.
For how long have I used the solution?
I've been using this solution for two years.
What do I think about the stability of the solution?
Access has always been stable.
What do I think about the scalability of the solution?
I haven't tried scaling this solution.
How was the initial setup?
You need to know a lot about networking to implement the solution but that has nothing to do with the product itself.
What's my experience with pricing, setup cost, and licensing?
This is a very affordable solution.
What other advice do I have?
I recommend this product, it's probably the best thing out there, especially if you're already a software customer. I rate Access nine out of 10.
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Senior Specialist at Tieto Estonia
Provides good DDoS protection, and has excellent support
Pros and Cons
- "Cloudflare, in my opinion, was easy to implement."
- "The pricing is an area that can be improved. Pricing, as far as I recall, was the source of our problems."
What is our primary use case?
I am not a reseller, but an implementer. We help our customers utilize this solution.
Cloudflare Access is primarily used in government homage for DDoS protection.
What is most valuable?
We decided to use Cloudflare Access to solve a problem with DDoS protection.
It covered the things that we needed at the time.
What needs improvement?
The pricing is an area that can be improved. Pricing, as far as I recall, was the source of our problems.
For how long have I used the solution?
I have been working with Cloudflare Access for the last 12 months. I am working with a company that has many customers in different areas, and we have absolutely used Cloudflare for some of them.
I became familiar with Cloudflare Access four years ago.
What do I think about the stability of the solution?
Cloudflare Access is a stable solution.
What do I think about the scalability of the solution?
Cloudflare Access is scalable.
How are customer service and support?
I especially remember that we got great support.
I would absolutely rate the support a five out of five, they helped us a lot.
How would you rate customer service and support?
Positive
How was the initial setup?
It's been a while, but I don't recall any problems with setting it up.
At the time, it was me and two other technicians to manage this solution.
What's my experience with pricing, setup cost, and licensing?
The prices are slightly expensive.
Which other solutions did I evaluate?
I evaluate many things to educate myself in the work that I am doing.
What other advice do I have?
We have used others as well, but I think that they are pretty comparable to other solutions that are available. Cloudflare, in my opinion, was easy to implement.
It was very good, I would rate Cloudflare Access an eight out of ten.
Disclosure: My company has a business relationship with this vendor other than being a customer: Partner
Partenaire, CEO at a tech services company with 1-10 employees
Simple to use, but the price could be improved
Pros and Cons
- "Cloudflare is simple to use."
- "Our customers no longer use Cloudflare because its service is subpar."
What is most valuable?
Cloudflare is simple to use.
What needs improvement?
Cloudflare is similar to a toolbox. It's simple to handle the box, but it's a different story when it comes to handling the tools. The same is true for Amazon. That is true for all companies. The majority of them have it. They will sell you a toolbox, but you must know how to use it.
Cloudflare isn't all bad. We have customers who are getting rid of Imperva because they can't find anyone who knows anything about it. Our customers no longer use Cloudflare because its service is subpar.
There's another company, Sucuri, that has excellent customer support, but you don't buy it because you don't want to talk to customer support. Customer support is not something you want to purchase. You're supposed to buy something without requiring customer support, which is the main point.
The same goes for Fortinet. While I am not familiar with the machine, it can cost a lot of money sometimes, $300,000 for a medium-sized business. Furthermore, you will require a full-time employee in your office who is knowledgeable. Dependent on the skill level today's resources can range from 80 to 150.
What's my experience with pricing, setup cost, and licensing?
You don't want to pay. The price tag is no longer $200,000, but rather $300,000 to $400,000. It's twice.
What other advice do I have?
The industry is changing right now. There is artificial intelligence. You have blockchain, and Quantum is on the way. It's there and on its way. So there is a significant shift in that area, of cyber security.
And, on top of that, there is a global shortage of 3.5 million security experts or professionals.
You are not an expert in your first year. People believe they are experts because they have a certification or something similar. Experts do not behave in this manner. Expert in dealing with a crisis. To become an expert, you must go through many crises. However, people are now claiming to be experts simply because they can scan something.
I would rate Cloudflare DDoS a seven out of ten.
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Security implmentation engineer at a security firm with 51-200 employees
A powerful and easy-to-deploy solution that provides multiple features to mitigate risks
Pros and Cons
- "The solution has different options that can be used to differentiate DDoS attacks."
- "The onboarding process can be improved a little bit."
What is our primary use case?
We use the product to mitigate the security risk of dynamic DDoS attacks. In these attacks, millions of requests come from millions of different IPs to get our server down. If we do not have a security solution to mitigate this risk, the service for other users will be down. The server will be down due to the huge consumption of resources.
What is most valuable?
The solution has different options that can be used to differentiate DDoS attacks. Cloudflare has a user agent, which can be used to define rules. If I do not want MacBook users to access the system, I can use the user agent to drop the traffic for MacBook users. It is very valuable. It helps me mitigate risks.
The product gives us many tools to mitigate risks. It is one of the most powerful solutions on the cloud. The documentation is good.
What needs improvement?
The onboarding process can be improved a little bit.
For how long have I used the solution?
I have been using the solution for nine months.
What do I think about the stability of the solution?
I did not face any stability issues in the past nine months.
How are customer service and support?
I recently contacted support to get more information about certain attacks. I wanted to get a full report about an incident, and they sent me all the details I needed.
How would you rate customer service and support?
Positive
How was the initial setup?
The initial setup is not complex at all. It is too simple.
What about the implementation team?
We just have to integrate the node IP address of AWS and change the public IP as a DNS record. Then, Cloudflare will send all the data after mitigating any risk to AWS. The deployment takes five to seven business days. We need one or two engineers for the security part of the deployment. For testing and services, we need a team.
What other advice do I have?
It is a cloud solution. We have integrated it with Amazon AWS. Sometimes we can't mitigate the DDoS attacks using AWS WAF. It doesn’t detect the attacks. AWS WAF does not have some options to differentiate the type of attacks.
I use the tool only as a DDoS solution. I just use the DDoS service to protect myself. There's no scalability for this option. Documents already exist for all the cloud solutions. I wouldn’t prefer an automated solution for integration because apps are built based on customers’ requirements. The requirements differ, so the default profile for automation can't fit all the customers. Overall, I rate the product a nine and a half or ten out of ten.
Which deployment model are you using for this solution?
Public Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Amazon Web Services (AWS)
Disclosure: My company has a business relationship with this vendor other than being a customer: Integrator

Buyer's Guide
Download our free Cloudflare One Report and get advice and tips from experienced pros
sharing their opinions.
Updated: June 2025
Product Categories
Secure Access Service Edge (SASE) Email Security Secure Web Gateways (SWG) Data Loss Prevention (DLP) Cloud Access Security Brokers (CASB) Distributed Denial-of-Service (DDoS) Protection Access Management Bot Management ZTNA as a Service ZTNA Remote Browser Isolation (RBI)Popular Comparisons
Microsoft Defender for Office 365
Microsoft Entra ID
Cisco Umbrella
Darktrace
Prisma Access by Palo Alto Networks
Zscaler Internet Access
Zscaler Zero Trust Exchange Platform
Lookout
Proofpoint Email Protection
Netskope
Microsoft Exchange Online Protection (EOP)
Microsoft Purview Data Loss Prevention
Cato SASE Cloud Platform
Cisco Secure Email
Buyer's Guide
Download our free Cloudflare One Report and get advice and tips from experienced pros
sharing their opinions.
Quick Links
Learn More: Questions:
- What security features does Cloudflare Bot Management provide to protect against malicious bot traffic?
- What are fullz and how can Cloudflare Bot Management help our company mitigate their misuse?
- Why is Cloudflare deprecating Railgun if it's their own product?
- What is the difference between point solutions (SD-WAN, NGFW, SWG, VPN) and SASE?
- What questions do you need to ask when choosing a Secure Access Service Edge (SASE) solution?
- When evaluating Secure Access Service Edge (SASE), what aspect do you think is the most important to look for?
- Has anyone ever heard of secureaccess.com?
- What is the difference between SASE and SD-WAN?
- What is the difference between SASE and CASB?
- What SASE solution does your company use?