No more typing reviews! Try our Samantha, our new voice AI agent.

Cloudflare One vs ForgeRock comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Apr 5, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cloudflare One
Ranking in Access Management
11th
Average Rating
8.6
Reviews Sentiment
6.5
Number of Reviews
23
Ranking in other categories
Email Security (20th), Secure Web Gateways (SWG) (13th), Data Loss Prevention (DLP) (20th), Cloud Access Security Brokers (CASB) (12th), Distributed Denial-of-Service (DDoS) Protection (7th), Software Defined WAN (SD-WAN) Solutions (12th), Bot Management (3rd), ZTNA as a Service (9th), ZTNA (4th), Secure Access Service Edge (SASE) (10th), Remote Browser Isolation (RBI) (3rd)
ForgeRock
Ranking in Access Management
8th
Average Rating
8.0
Reviews Sentiment
6.5
Number of Reviews
38
Ranking in other categories
Identity Management (IM) (9th), Customer Identity and Access Management (CIAM) (4th)
 

Mindshare comparison

As of May 2026, in the Access Management category, the mindshare of Cloudflare One is 3.7%, up from 3.1% compared to the previous year. The mindshare of ForgeRock is 4.5%, down from 6.6% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Access Management Mindshare Distribution
ProductMindshare (%)
ForgeRock4.5%
Cloudflare One3.7%
Other91.8%
Access Management
 

Featured Reviews

CV
Network Architect at IP Dimension
Cloud security has improved remote access and has reduced costs for smaller client sites
I have used Cloudflare One's Identity-Aware Proxy, and it is quite straightforward from what I have seen so far. The app registration on the Azure side integrates fully into Cloudflare, and I am very satisfied with that part because it is easy to set up. The integration of Cloudflare One's Secure Web Gateway and Zero Trust Network Access works without any issues. That part is pretty automatic, and if you complete the rest of the setup, it comes together by itself with no issues from my side. What makes it nice is that we can actually start replacing on-site firewalls at this stage for the smaller clients because it does not matter if they go to a coffee shop or work from home; they are still secured by the same connection. The hops get shorter and you get better latency. We have done testing to see if it is better. One thing that we did notice with our proof of concept with our current client is that they have people connecting from the UK. When they used their previous VPN solution, uploading CAD drawings and other files to the server took a long time. They mentioned that it is much quicker on Cloudflare One's solution. I definitely believe that is part of the improved performance, and I am satisfied with that as well. What is nice about Cloudflare One is that it makes the setup easier and also easier to train technicians to maintain it. Compared to legacy systems, we do not need to get fancy firewalls in place that are costly. That is definitely also a cost-saver with Cloudflare One.
SR
Software Engineer at a financial services firm with 10,001+ employees
Centralized access control has improved secure onboarding and supports strict compliance
I wish we had used ForgeRock's adaptive risk-based authentication, which allows dynamic adjustment of authentication requirements based on user behavior. This could have helped us further strengthen our security. Another hidden gem is the built-in support for custom authentication modules and scripting, which gives a great deal of flexibility to tailor authentication flows. The self-service capabilities for password resets and account recovery have been very helpful in reducing support overhead and improving user experience. Discovering and utilizing these features would have definitely made our integration even smoother and would have provided additional value for both our users and our security team. One area of improvement would be the user interface for policy and workflow configuration, which can become complex and sometimes unintuitive, especially for new administrators. A more streamlined and user-friendly UI would help reduce the learning curve. Enhanced out-of-the-box analytics and reporting would also be valuable, as our current options often require custom development or integration with external tools. While extensibility is a strength, documentation for advanced customizations and integrations could be more comprehensive and easier to follow. Improved support for seamless upgrades and backward compatibility would also help minimize downtime. In terms of performance, optimizing the platform for high concurrency environments would be beneficial, especially for organizations with large user bases or peak usage periods. Enhanced scalability features such as more granular or horizontal scaling options would provide better support for distributed deployments. For integrations, having more pre-built connectors and easy integration with modern cloud-native services would accelerate adoption. Improved monitoring and real-time health dashboards would help proactively identify and resolve performance bottlenecks.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Using Cloudflare One makes my work quite easy because for DDoS protection, all I need to do is understand the OSI model and click; it makes it easier than trying to write a command line or use a Linux command."
"Cloudflare DDoS mitigates DDoS attacks."
"Cloudflare Zero Trust Platform removes the risk of exposing the applications to the public."
"The simplicity of the solution is its valuable features as almost no effort was needed to learn the configurations. It is also one of the cheapest firewalls available in this category."
"Cloudflare is simple to use."
"It's the endpoint exposition. We don't need to expose our VPN server to the internet and need a zero-test solution. I can apply some conditional access to the endpoint that's connecting to our network to check their security policies or the security condition of their workstation. Once the workstation is trying to connect to my internal network, then I would like to check the discrete condition of these endpoints that are trying to access my internal network. We created some conditional access. We have CrowdStrike, to check if the CrowdStrike is installed, to check if it's updated, and to check for Windows updates. We created some conditional policies to check it."
"We mostly use Cloudflare WAF, and gets basic Cloudflaire DDoS, caching as extra bonus . We like the factor these features are all integrated into 1 console, simple to manage."
"I'm very satisfied with the environment and the dashboard."
"We create and define the permissions and configurations for the users."
"Almost all the notes which are required for these journeys are out of the box, and if you want to enable biometrics, you can get these notes from ForgeRock marketplace, so most technologies are out of the box or require a minimum configuration."
"The product is easy to set up."
"The solution's most valuable feature is the authentication for the consumers. The integration with other third-party applications is excellent."
"ForgeRock has had a very positive impact on my organization, especially in terms of standardization, security posture, and operational efficiency."
"ForgeRock provides a complete solution for authentication and authorization, which is excellent."
"We were previously using a different solution, and switched as this product provided much better, and more efficient security for our customers."
"I like the intelligent authentication feature."
 

Cons

"For the topic of improvement, providing some training material is one of my suggestions."
"Cloudflare One is not very powerful, but for what we require, it is basic and sufficient."
"The free plan has limitations. For example, I can only set up three rules, and the application firewall is unavailable."
"Feedback could be enhanced."
"I would like them to include a VPN feature to provide a secure connection to the data center."
"The onboarding process can be improved a little bit."
"The initial onboarding was causing us some confusion."
"Cloudflare DDoS has poor technical support."
"I think the upgrade process is sometimes a little complicated and there are failures that occur."
"The solution requires more simplified customization. However, part of the problem is my clients determining their own preferences. Technology can help and do many things, but you have to define your own policies to ensure that the solution or service works within those parameters. Helping customers understand their business and different processes is another issue not relating to the functionality of this solution."
"I think the upgrade process is sometimes a little complicated and there are failures that occur."
"Lacks simplified documentation within the tool that requires use of a separate portal."
"The only problem with ForgeRock is that it is derived from an open-source product, so sometimes it's a bit unstable."
"The identity management model needs a bit of improvement."
"In an upcoming release, the solution could improve by limiting the need to do customizations."
"The solution's deployment should be made easier."
 

Pricing and Cost Advice

"Cloudflare Zero Trust Platform's pricing is good."
"The price tag is no longer $200,000, but rather $300,000 to $400,000. It's twice."
"My company has to make yearly payments towards the licensing costs attached to the solution. There are no hidden charges apart from the licensing costs of the solution."
"The solution is not that expensive."
"The pricing is somewhere in the middle. I would rate the pricing a seven out of ten."
"The prices are slightly expensive."
"The solution's pricing lacks transparency."
"The pricing of the solution is cheap. The licensing cost is also very low. I rate the cost and pricing a three out of ten."
"We have multiple clients we are looking at right now. We are at a very small number, however, the idea and the goal is to grow. We are looking at about $100,000 and $50,000 a minimum a month cost. That'd be minimum maybe in a couple of years."
"ForgeRock's pricing is more competitive than other products."
"It's a bit pricey and could be more competitive."
"Its licensing is on a yearly basis, but it also depends on the contract that you have with the vendor. They have multiple types of contracts. There are additional costs to the standard licensing fees. If you need some of the features, you have to pay more."
"The license is purchased annually per user. However, you can negotiate if you are signing for a longer period of time. When comparing this solution to others on the market it is priced fair, it is not at the top of the price range or at the bottom end."
"The pricing of the solution is fair but I do not have the full details."
"Its price is comparable to other products in the market."
"ForgeRock is an expensive solution."
report
Use our free recommendation engine to learn which Access Management solutions are best for your needs.
893,311 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Construction Company
20%
Comms Service Provider
11%
Financial Services Firm
8%
Manufacturing Company
6%
Financial Services Firm
20%
Computer Software Company
6%
Manufacturing Company
6%
Insurance Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business10
Midsize Enterprise1
Large Enterprise12
By reviewers
Company SizeCount
Small Business15
Midsize Enterprise5
Large Enterprise18
 

Questions from the Community

What needs improvement with Cloudflare Access?
Cloudflare Access has strong integration with Microsoft, among other platforms. However, when it comes to Kaspersky, we have clients who typically encounter challenges. The usual setup involves con...
What is your primary use case for Cloudflare Access?
Cloudflare Access provides secure access to internal applications for employees, external members of the organization, or third-party providers. It acts similarly to a VPN but uses a different kind...
What advice do you have for others considering Cloudflare Access?
Cloudflare Access is one of the best integrations available. While about two hundred vendors offer similar services, Cloudflare's approach as a SASE solution stands out. Clients prefer a single pla...
What is your experience regarding pricing and costs for ForgeRock?
The pricing, setup cost, and licensing are very straightforward, which is a good success. I appreciate that it is very straightforward and helpful.
What needs improvement with ForgeRock?
There are some areas I want ForgeRock to improve. These areas include policy configuration, documentation clarity, UI complexity, and debugging token flow. I want ForgeRock to improve in documentat...
What is your primary use case for ForgeRock?
I am using ForgeRock for standard support, policy configurations, and documentation clarity. The pricing, setup cost, and licensing are very straightforward, which is a good success. I appreciate t...
 

Also Known As

Cloudflare Area 1 Email Security, Cloudflare Bot Management, Cloudflare Gateway, Cloudflare Zero Trust Platform, Cloudflare DDoS, Cloudflare SASE & SSE Platform
ForgeRock Identity Platform, ForgeRock OpenIDM
 

Overview

 

Sample Customers

23andMe
Geico, Thomson Reuters, Salesforce, McKesson, Trinet, SKY, BNP Paribas, Deloitte, Capgemini, North Western University
Find out what your peers are saying about Cloudflare One vs. ForgeRock and other solutions. Updated: April 2026.
893,311 professionals have used our research since 2012.