Cloudflare One vs ForgeRock comparison

Why PeerSpot?

Cloudflare and Ping Identity are both solutions in the Access Management category. Cloudflare is ranked #11 with an average rating of 8.5, while Ping Identity is ranked #8 with an average rating of 7.9. Cloudflare holds a 3.7% mindshare in AM, compared to Ping Identity’s 3.4% mindshare. Additionally, 100% of Cloudflare users are willing to recommend the solution, compared to 93% of Ping Identity users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Apr 5, 2026

ForgeRock and Cloudflare One are contenders in the identity and network security categories. While ForgeRock offers a comprehensive identity management suite, Cloudflare One leads in network performance and security aspects.

Features: ForgeRock supports identity repositories, SAML2.0 SSO & Federation, and out-of-the-box connectors. It also features customizable authentication modules and security frameworks. Cloudflare One excels in DDoS protection, ease of deployment, and superior CDN performance.

Room for Improvement: ForgeRock users highlight concerns with complex customization, documentation clarity, and UI design. Meanwhile, Cloudflare One users mention issues with documentation, onboarding, and hybrid environment interoperability. Enhancing user experience and support is needed for both products.

Ease of Deployment and Customer Service: ForgeRock offers various deployment options but requires improved deployment simplicity and consistent customer service. Cloudflare One provides straightforward cloud deployment but could enhance support services to meet growing demands. While both offer strong technical support, ForgeRock’s complexity may necessitate intensive support.

Pricing and ROI: ForgeRock has a premium pricing structure due to its diverse features, offering value in IAM capabilities but can be costly for smaller enterprises. Cloudflare One’s pricing is affordable and competitive in network security, with stakeholders viewing its ROI favorably due to cost efficiencies.

To learn more, read our detailed Cloudflare One vs. ForgeRock Report (Updated: September 2026).

Buyer's Guide

Cloudflare One vs. ForgeRock

September 2026

Download the complete report

Helped 921,028 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Cisco Duo

Mindshare comparison

As of November 2026, in the Access Management category, the mindshare of Cisco Duo is 3.1%, down from 3.3% compared to the previous year. The mindshare of Cloudflare One is 3.7%, up from 3.3% compared to the previous year. The mindshare of ForgeRock is 3.4%, down from 6.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Access Management Mindshare Distribution
Product	Mindshare (%)
Cisco Duo	3.1%
ForgeRock	3.4%
Cloudflare One	3.7%
Other	89.8%

Access Management

Featured Reviews

Charles Slaustas

Information Technology Contractor at Insight global

Supports seamless authentication for users across multiple organizations and personal portals

The features I use in Cisco Duo include Duo Pushes to confirm my identity to the device, and eventually as MFA security was increased, I actually had to use exchange passcodes. Sometimes, I have to go into the site and get into Cisco Duo to retrieve the passcode, and many of them have been two-factor, where the sites send a passcode that I have to enter into Cisco Duo. It has been more of the latter. I have not seen issues with lagging or crashing on Cisco Duo's end; it was usually on the client end, often because someone set up a bad upgrade or there were connection issues with the Cisco Duo cloud through the administrative site.

Read full review

Cobe Van Coller

Network Architect at IP Dimension

Cloud security has improved remote access and has reduced costs for smaller client sites

I have used Cloudflare One's Identity-Aware Proxy, and it is quite straightforward from what I have seen so far. The app registration on the Azure side integrates fully into Cloudflare, and I am very satisfied with that part because it is easy to set up. The integration of Cloudflare One's Secure Web Gateway and Zero Trust Network Access works without any issues. That part is pretty automatic, and if you complete the rest of the setup, it comes together by itself with no issues from my side. What makes it nice is that we can actually start replacing on-site firewalls at this stage for the smaller clients because it does not matter if they go to a coffee shop or work from home; they are still secured by the same connection. The hops get shorter and you get better latency. We have done testing to see if it is better. One thing that we did notice with our proof of concept with our current client is that they have people connecting from the UK. When they used their previous VPN solution, uploading CAD drawings and other files to the server took a long time. They mentioned that it is much quicker on Cloudflare One's solution. I definitely believe that is part of the improved performance, and I am satisfied with that as well. What is nice about Cloudflare One is that it makes the setup easier and also easier to train technicians to maintain it. Compared to legacy systems, we do not need to get fancy firewalls in place that are costly. That is definitely also a cost-saver with Cloudflare One.

Read full review

Shreya Reddy

Software Engineer at a financial services firm with 10,001+ employees

Centralized access control has improved secure onboarding and supports strict compliance

I wish we had used ForgeRock's adaptive risk-based authentication, which allows dynamic adjustment of authentication requirements based on user behavior. This could have helped us further strengthen our security. Another hidden gem is the built-in support for custom authentication modules and scripting, which gives a great deal of flexibility to tailor authentication flows. The self-service capabilities for password resets and account recovery have been very helpful in reducing support overhead and improving user experience. Discovering and utilizing these features would have definitely made our integration even smoother and would have provided additional value for both our users and our security team. One area of improvement would be the user interface for policy and workflow configuration, which can become complex and sometimes unintuitive, especially for new administrators. A more streamlined and user-friendly UI would help reduce the learning curve. Enhanced out-of-the-box analytics and reporting would also be valuable, as our current options often require custom development or integration with external tools. While extensibility is a strength, documentation for advanced customizations and integrations could be more comprehensive and easier to follow. Improved support for seamless upgrades and backward compatibility would also help minimize downtime. In terms of performance, optimizing the platform for high concurrency environments would be beneficial, especially for organizations with large user bases or peak usage periods. Enhanced scalability features such as more granular or horizontal scaling options would provide better support for distributed deployments. For integrations, having more pre-built connectors and easy integration with modern cloud-native services would accelerate adoption. Improved monitoring and real-time health dashboards would help proactively identify and resolve performance bottlenecks.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Duo Security improved my organization by helping us secure all access points within the company infrastructure."

"Cisco Duo is quick to deploy and easy to start."

"Cisco Duo is an excellent solution to protect our network."

"The benefit of the features of Cisco Duo is that it secures our environment; nobody can access or join the network without it, and Cisco Duo will recognize and ensure that only people who are allowed in our environment can access our devices."

"Duo Security gives us an additional layer of security that would give us added confidence that our network will be less likely to get hacked, compromised, or otherwise."

"The multi-factor authentication process and the geo-locking features are great."

"Cisco Duo has improved our operational efficiency and reduced costs in areas including authentication, IT support, and security operations."

"The solution is easy to use."

More Cisco Duo pros

"It is a stable solution."

"Cloudflare is by far the most effective solution that I have come across."

"Cloudflare, in my opinion, was easy to implement."

"Using Cloudflare One makes my work quite easy because for DDoS protection, all I need to do is understand the OSI model and click; it makes it easier than trying to write a command line or use a Linux command."

"Enables me to work from two locations."

"Clover is the best product globally."

"It's the endpoint exposition. We don't need to expose our VPN server to the internet and need a zero-test solution. I can apply some conditional access to the endpoint that's connecting to our network to check their security policies or the security condition of their workstation. Once the workstation is trying to connect to my internal network, then I would like to check the discrete condition of these endpoints that are trying to access my internal network. We created some conditional access. We have CrowdStrike, to check if the CrowdStrike is installed, to check if it's updated, and to check for Windows updates. We created some conditional policies to check it."

"The blocking feature is very good."

More Cloudflare One pros

"The solution integrates well and it is important for them to keep up with the current trends in the market quickly enough, and they have been doing a good job at it."

"ForgeRock products are customizable, and the out-of-the-box features are solid, too."

"The most valuable features are that it is easy to manage and it's stable."

"Easy to navigate, handle and manage the applications."

"For our client, which we are deploying for, the solution seems to be offering them really great value."

"I like the ease of navigating, handling and managing the applications and end-user profiles."

"ForgeRock products are customizable, and the out-of-the-box features are solid, too. I primarily use the OIDC compliance features. It's just a configuration. it's easy to set up and customize trees. We can add our own features if necessary. Banks and corporations have different standards and specific validations."

"The support is good and prompt."

More ForgeRock pros

Cons

"Cisco Duo could be improved by building the agent with the many agents we already use, such as Cisco AMP and Cisco Secure Client, which would simplify our environment by eliminating the need for a third agent for secure applications."

"For the back-end, there could be a few more security features applied."

"We had a lot of trouble configuring the password reset function, and as a result we now have a second channel that bypasses Duo to allow users to reset their password."

"I rate it a nine because there is still a specific feature regarding Cisco Duo Desktop that must be enabled and optimized better than the current situation."

"I think Cisco Duo could improve the dashboard to make logging in and credential management more visible."

"Microsoft is somehow making it harder for Cisco Duo to do its job seamlessly with some of the hooks that Microsoft has in the OAuth connection."

"An enhancement they might make is if they can log it to Splunk since they're big into Splunk. Instead of me having to go into that portal to look at things when someone is trying to log in and they forgot their password, I can look in and tell them they forgot their password or didn't respond to the prompt. That would be an improvement."

"I would appreciate it if Duo Security could improve its integrations with Windows Hello."

More Cisco Duo cons

"The onboarding process can be improved a little bit."

"They don't have a person to provide support for customers using the solution under their free plan."

"Cloudflare DDoS has poor technical support."

"Feedback could be enhanced. While I work efficiently with Clover as a partner in Mexico City, sometimes the information and requests are easier to manage with more concrete solutions."

"The initial onboarding was causing us some confusion."

"From a logging perspective, it is still a bit difficult to see exactly what users are being blocked with the current views."

"For the topic of improvement, providing some training material is one of my suggestions."

"There are premium tier live service and lower tier live service, so we opted for the lower tier. But there is no medium tier where we pay a little extra and get a bit more service. So if that can be improved."

More Cloudflare One cons

"A point for improvement would be to bring more of these errors to the UI for administrators to help them understand what happened and how to fix it."

"The solution could improve by adding more advertising and marketing."

"ForgeRock can be a complex product that requires a lot of time to learn and understand its real value."

"We would like this solution to be developed for use with mobile applications."

"I think the upgrade process is sometimes a little complicated and there are failures that occur."

"It should be a little bit easier to implement. It is user-friendly, but there is always scope for improvement."

"ForgeRock is extremely flexible, but the learning curve can be steep."

"The product's support services in the French language are not free."

More ForgeRock cons

Pricing and Cost Advice

"The cost was reasonable. Licensing was pretty straightforward for a change."

"My experience with pricing, setup costs, and licensing has been good, with no issues. I am pleased that the prices remained stable after Cisco acquired the solution."

"The pricing is pretty competitive. It's pretty cheap. Anybody can adopt it."

"It has a fair pricing model. I know they have different tiers, but it would be nice to have different types of licenses for certain groups of users in our organization. That way, we wouldn't have to lump everybody into one group. That would be also one complaint."

"Cisco has the most expensive products because market leaders tend to charge a lot."

"It is affordable for what's coming to the table with it, but in this day and age, the cost is looked at under a microscope, and companies need to very finely define what is needed versus what is critical. In some cases, it might not be cost-effective for a company to have it. In a lot of other cases, it is the cost of doing business."

"Duo Security is free."

"From a reseller perspective, it's still challenging to explain the whole license strategy to a client, so we really have to be ahead of that for all the true forward conversations."

More Cisco Duo pricing and cost advice

"Cloudflare Zero Trust Platform's pricing is good."

"The pricing is somewhere in the middle. I would rate the pricing a seven out of ten."

"The pricing of the solution is cheap. The licensing cost is also very low. I rate the cost and pricing a three out of ten."

"The price tag is no longer $200,000, but rather $300,000 to $400,000. It's twice."

"The prices are slightly expensive."

"The solution's pricing lacks transparency."

"My company has to make yearly payments towards the licensing costs attached to the solution. There are no hidden charges apart from the licensing costs of the solution."

"The solution is not that expensive."

"Its licensing is on a yearly basis, but it also depends on the contract that you have with the vendor. They have multiple types of contracts. There are additional costs to the standard licensing fees. If you need some of the features, you have to pay more."

"The pricing of the solution is fair but I do not have the full details."

"ForgeRock's pricing is more competitive than other products."

"We have multiple clients we are looking at right now. We are at a very small number, however, the idea and the goal is to grow. We are looking at about $100,000 and $50,000 a minimum a month cost. That'd be minimum maybe in a couple of years."

"Its price is comparable to other products in the market."

"It's a bit pricey and could be more competitive."

"ForgeRock is an expensive solution."

"The license is purchased annually per user. However, you can negotiate if you are signing for a longer period of time. When comparing this solution to others on the market it is priced fair, it is not at the top of the price range or at the bottom end."

See which vendors are best for you

Use our free recommendation engine to learn which Access Management solutions are best for your needs.

See recommendations

921,028 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Outsourcing Company

12%

Financial Services Firm

11%

Comms Service Provider

Manufacturing Company

Construction Company

18%

Comms Service Provider

10%

Outsourcing Company

Financial Services Firm

17%

Outsourcing Company

14%

Manufacturing Company

Construction Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	65
Midsize Enterprise	28
Large Enterprise	82

By reviewers
Company Size	Count
Small Business	10
Large Enterprise	13

By reviewers
Company Size	Count
Small Business	15
Midsize Enterprise	5
Large Enterprise	18

Questions from the Community

How does Duo Security compare with Microsoft Authenticator?

We switched to Duo Security for identity verification. We’d been using a competitor but got the chance to evaluate Du...

See all answers

What is your experience regarding pricing and costs for Duo Security?

Regarding the pricing, what actually happened was that we got the product purchased through our HQ, so the costing as...

See all answers

What needs improvement with Duo Security?

I do not have a straight answer for how Cisco Duo can be improved at this time. With the implementation that we are g...

See all answers

What is your experience regarding pricing and costs for Cloudflare Zero Trust Platform?

Pricing is competitive. Akamai is more expensive, in my view.

See all answers

What needs improvement with Cloudflare Zero Trust Platform?

In my opinion, Cloudflare One can be improved mainly through compatibility, as the integration should be much simpler...

See all answers

What is your primary use case for Cloudflare Zero Trust Platform?

Cloudflare One's primary use case for my organization is to protect servers and to provide remote access with the VPN...

See all answers

What is your experience regarding pricing and costs for ForgeRock?

The pricing, setup cost, and licensing are very straightforward, which is a good success. I appreciate that it is ver...

See all answers

What needs improvement with ForgeRock?

There are some areas I want ForgeRock to improve. These areas include policy configuration, documentation clarity, UI...

See all answers

What is your primary use case for ForgeRock?

I am using ForgeRock for standard support, policy configurations, and documentation clarity. The pricing, setup cost,...

See all answers

Comparisons

Microsoft Entra ID vs Cisco Duo

Compared 7% of the time

Fortinet FortiAuthenticator vs Cisco Duo

Compared 6% of the time

Okta Platform vs Cisco Duo

Compared 4% of the time

Cisco Identity Services Engine (ISE) vs Cisco Duo

Compared 3% of the time

Auth0 Platform vs Cisco Duo

Compared 3% of the time

More Cisco Duo Competitors

Cato SASE Cloud Platform vs Cloudflare One

Compared 3% of the time

Zscaler Zero Trust Exchange Platform vs Cloudflare One

Compared 3% of the time

Prisma Access by Palo Alto Networks vs Cloudflare One

Compared 3% of the time

Twingate vs Cloudflare One

Compared 2% of the time

Fortinet FortiGate vs Cloudflare One

Compared 2% of the time

More Cloudflare One Competitors

SecureAuth Identity Platform vs ForgeRock

Compared 6% of the time

Symantec Identity Governance and Administration vs ForgeRock

Compared 6% of the time

SailPoint Identity Security Cloud vs ForgeRock

Compared 4% of the time

Auth0 Platform vs ForgeRock

Compared 4% of the time

Ping Identity Platform vs ForgeRock

Compared 4% of the time

More ForgeRock Competitors

Product Reports

Buyer's Guide

Cisco Duo

November 2026

Download Cisco Duo product report

Buyer's Guide

Cloudflare One

November 2026

Download Cloudflare One product report

Buyer's Guide

ForgeRock

November 2026

Download ForgeRock product report

Also Known As

Duo Security

Cloudflare Area 1 Email Security, Cloudflare Bot Management, Cloudflare Gateway, Cloudflare Zero Trust Platform, Cloudflare DDoS, Cloudflare SASE & SSE Platform

ForgeRock Identity Platform, ForgeRock OpenIDM

Overview

Cisco Duo is a cloud-based identity security platform safeguarding critical resources for any user and device worldwide. Known for its ease of use, Duo offers seamless protection across multi-cloud, hybrid, and on-premises environments.

Cisco Duo is designed to secure access with identity-first protection and provides extensive visibility throughout an organization's identity ecosystem. Offering multi-factor authentication, Duo facilitates easy integration and management, allowing teams to protect data effectively on VPNs, applications, and networks. Its single-pane management improves security processes while enhancing trust, making it suitable for diverse IT infrastructures.

What are the key features of Cisco Duo?

Multi-factor Authentication: Strengthens user verification with multiple methods.
Push Notifications: Simplifies authentication with quick approvals.
Single Sign-On: Enhances convenience by allowing one set of credentials.
VPN Access: Secures remote connections with reliable authentication.
User Activity Visibility: Offers comprehensive insights into access patterns.

Which benefits and ROI should users consider?

Quick Deployment: Facilitates rapid integration within existing systems.
Effective Management: Streamlines IT operations with centralized control.
Regulatory Compliance: Aids in meeting industry standards for data protection.
Enhanced Trust: Strengthens security posture across networks.
User-friendly Approach: Simplifies authentication for non-technical users.

In industries like education and finance, Cisco Duo is widely employed to secure multi-factor authentication across platforms such as email, databases, and servers. Its integration capabilities with Microsoft 365, Active Directory, and VPNs like AnyConnect are instrumental in verifying user identities using mobile apps or OTPs, catering effectively to both remote and on-premise environments.

Cisco

Cloudflare One is a comprehensive platform for security, performance, and connectivity. It provides features like rate limiting, DDoS protection, and application access, tailored to enhance user experience while securing internet access and accelerating communications.

Designed to integrate security measures with ease of use and scalability, Cloudflare One offers a secure web gateway and zero trust network access. These features ensure seamless setup and operation, making connectivity reliable and protected. Users appreciate its integrated console, intuitive interface, and the ability to manage risk effectively. It offers straightforward deployment, improves latency, and boasts cost-effectiveness. While its onboarding process and documentation need enhancement, its value in content delivery and application shielding is notable. Despite challenges in integrating Cloudflare Access with existing VPNs and the need for better automation and support, it remains vital for DNS and infrastructure protection.

What features make Cloudflare One stand out?

Rate Limiting: Controls the traffic rate to prevent abuse.
DDoS Protection: Shields applications from distributed denial-of-service attacks.
Secure Web Gateway: Provides secure internet access with seamless operation.
Zero Trust Network Access: Ensures secure, application-based connectivity without relying on traditional VPNs.
Access for Connectivity: Facilitates access to internal applications securely.

What benefits should users look for in reviews?

Security: Robust measures for DNS and browsing protection.
Performance: Enhanced site accessibility and communication speed.
Cost-Effectiveness: Offers competitive pricing for its features.
Ease of Deployment: Straightforward and efficient setup process.

In industries like finance, retail, and technology, Cloudflare One is crucial for enabling secure remote access and protecting web applications against dynamic threats. It supports compliance access policies and enhances content delivery, playing a key role in safeguarding digital infrastructure.

Cloudflare

ForgeRock offers robust integration, customization, and identity management with support for SAML, OAuth 2.0, and DevOps readiness, ensuring enhanced security and scalability.

ForgeRock stands out in identity and access management featuring flexible authentication flows, risk-based authentication, centralized policy management, and comprehensive data protection. Its open-source foundation and cloud capabilities allow versatility and ease of use. While it provides excellent user path orchestration through the Journey feature, challenges exist in integration support and user-friendly customization. Improved documentation and streamlined interfaces are necessary to overcome deployment complexities. Additionally, the cost and support model may be burdensome for smaller organizations.

What are the key features?

Flexible Authentication Flows: Personalizes user login experiences.
Risk-Based Authentication: Adjusts security measures based on user behavior.
Identity Management: Manages digital identities efficiently.
Policy Configuration: Automates access control policies.
DevOps Readiness: Integrates seamlessly with DevOps workflows.

What benefits should users expect?

Enhanced Security: Protects data and user identities.
Scalability: Supports growing business needs.
Developer-Friendly: Simplifies deployment and management processes.
Centralized Management: Streamlines access control and policy enforcement.
Versatile Cloud Offerings: Facilitates deployment across cloud environments.

ForgeRock is widely utilized in industries like telecommunications, insurance, and open banking for secure user authentication and access management. It supports microservice authentications, customer identity management, single sign-on, and multi-factor authentication, integrating effectively with existing infrastructures to enhance security and user experience.

Ping Identity

Sample Customers

Information Not Available

23andMe

Geico, Thomson Reuters, Salesforce, McKesson, Trinet, SKY, BNP Paribas, Deloitte, Capgemini, North Western University

Buyer's Guide

Cloudflare One vs. ForgeRock

September 2026

Free Report: Cloudflare One vs. ForgeRock

Find out what your peers are saying about Cloudflare One vs. ForgeRock and other solutions. Updated: September 2026.

DOWNLOAD NOW

921,028 professionals have used our research since 2012.

See our Cloudflare One vs. ForgeRock report.

See our list of best Access Management vendors.

We monitor all Access Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.