No more typing reviews! Try our Samantha, our new voice AI agent.

Cloudflare vs Zscaler Zero Trust Exchange Platform comparison

Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Feb 8, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
7.6
Cloudflare WAF offers quick ROI, crucial protection for e-commerce, saves bandwidth, and balances cost with valuable free features.
Sentiment score
6.2
Cloudflare's services enhanced security and efficiency, resulting in significant ROI, cost savings, and improved WordPress performance for businesses.
Sentiment score
7.3
Zscaler Zero Trust Exchange enhances ROI through cost savings, improved security, productivity, and reduced operational expenses and support issues.
My experience with the pricing or licensing of Cloudflare Web Application Firewall is that many features can be accessed for free, so the pricing is definitely reasonable.
Owner at Hga consulting
For the small project I was working on, using the basic tier provided a huge improvement at zero cost.
Security Specialist at a tech services company with 1,001-5,000 employees
In terms of return on investment with Cloudflare, it costs my time to set them up, but basically once they're set up, it's done.
Owner at Hga consulting
The return on investment for me is significant as time is the critical aspect.
Senior Network and Security Expert at a financial services firm with 201-500 employees
When I see that I am trying to cut costs, for example, even when replacing Prisma, we have managed to save about over half a million dollars a year.
Cybersecurity Senior Program Manager at Dayforce
In terms of time savings, since users no longer manually connect to the VPN, access became seamless, improving user productivity, especially for remote users.
Technical Team Lead - Content Security at Valuepoint Systems
We don't have to purchase many components such as load balancers and proxy servers that were necessary in traditional setups.
Lead Engineer at FIS Global
 

Customer Service

Sentiment score
6.3
Cloudflare WAF support is mixed; responsive for some, but Indian customers face call availability and administrative issues.
Sentiment score
6.9
Cloudflare's support is responsive and knowledgeable, with varying experiences depending on the plan and need for faster escalation.
Sentiment score
4.9
Zscaler's support is praised for knowledge and responsiveness but varies in resolution time and regional quality.
I would rate the technical support with Cloudflare as excellent every time I've had to contact them.
Owner at Hga consulting
The technical support of Cloudflare Web Application Firewall rates between five and seven at maximum.
IT Manager at Amla Commerce
Cloudflare does not offer hands-on technical support to fix customer problems but rather a self-service model.
Senior Consultant CDN at a comms service provider with 10,001+ employees
I would rate the technical support with Cloudflare as excellent every time I've had to call them.
Owner at Hga consulting
We use other solutions where support is available through Slack channels and is more interactive, with someone responding within a couple of minutes or seconds.
General Manager at bKash Limited
The support engineers are technically knowledgeable, particularly for Zscaler Private Access related issues, providing clear guidance and documentation for troubleshooting.
Technical Team Lead - Content Security at Valuepoint Systems
Sometimes, support takes time since the solution has some bugs that need fixing.
architect at Tata Consultancy
They have provided the numbers and contact supports, and it is almost immediate.
Cybersecurity Senior Program Manager at Dayforce
 

Scalability Issues

Sentiment score
7.7
Cloudflare Web Application Firewall offers impressive scalability and automated management, but additional features may incur costs for smaller organizations.
Sentiment score
7.9
Cloudflare excels in scalability, supporting seamless transitions and performance during high-traffic periods, highly rated by users.
Sentiment score
7.6
Zscaler Zero Trust Exchange is scalable and cloud-native, facilitating easy, hardware-free user expansion with high performance and adaptability.
The scalability of Cloudflare Web Application Firewall rates between 8 to 9, as it depends upon the use cases and what exactly the client needs.
IT Manager at Amla Commerce
It is a SaaS tool, but the fact that they have workloads deployed across the world proves that it is a highly scalable tool.
Principal Cyber Prevent and Defense Engineer at a comms service provider with 1,001-5,000 employees
The tool offers very good performance, even during high-traffic periods.
Engineer at SITMEXICO
Cloudflare's scalability is quite good; it is very easy to scale whenever we want to include multiple domains.
Senior Network and Security Expert at a financial services firm with 201-500 employees
The only limitation I was mentioning is that it was unable to identify the sources of vulnerability, which they are going to embed by the mid of this year.
Cybersecurity Senior Program Manager at Dayforce
Zscaler Zero Trust Exchange Platform is highly scalable, primarily because it is built on a cloud-native, globally distributed architecture.
Technical Team Lead - Content Security at Valuepoint Systems
 

Stability Issues

Sentiment score
8.2
Cloudflare Web Application Firewall is praised for stability, high performance, effective protection, daily use, and minimal downtime.
Sentiment score
7.5
Cloudflare is reliable with high stability ratings, minimal issues, improved network connectivity, and praised fast DNS services.
Sentiment score
7.8
Zscaler’s platform is highly reliable and stable, with minor connectivity issues and occasional slight latency during data transfers.
The stability of Cloudflare Web Application Firewall deserves a perfect 10 out of 10.
IT Manager at Amla Commerce
The service is very stable with no impacts during high-traffic periods.
Engineer at SITMEXICO
Cloudflare's reliability and uptime has met my expectations; it has been quite good in general.
Senior Network and Security Expert at a financial services firm with 201-500 employees
Zscaler Zero Trust Exchange Platform is very stable, especially in enterprise environments.
Technical Team Lead - Content Security at Valuepoint Systems
Zscaler Zero Trust Exchange Platform is very stable.
Cybersecurity Senior Program Manager at Dayforce
 

Room For Improvement

Cloudflare WAF needs feature enhancements, better usability, improved support, advanced DDoS protection, and solutions for latency and alerts.
Users suggest improvements in Cloudflare's features, pricing, support, analytics, documentation, and partner relations for better service experience.
Zscaler's platform needs latency and usability improvements, better multi-tenancy and support, clearer pricing, and enhanced SIEM integration.
The product can improve by having more multitenancy capability, which is currently not available.
Network Architect at a computer software company with 11-50 employees
I think they're doing a good job with DNS and as support for any domains that I create or that my clients create, it's mandatory for me to ensure they have Cloudflare as their DNS provider.
Owner at Hga consulting
And maybe something similar to Pushpin that Fastly has, which is an option where you can push messages that then can be scaled globally over the network.
CTO at PlayNirvana
Customers do not have options to modify any configuration parameters in Cloudflare, whereas other competitor solutions, such as F5 Distributed Cloud, allow customers to tune configurations according to their requirements.
General Manager at bKash Limited
What Cloudflare is doing internally is that it is stepping ahead in areas like detection and protection.
Principal Cyber Prevent and Defense Engineer at a comms service provider with 1,001-5,000 employees
Cloudflare could be improved by introducing a mid-tier pricing option.
Security Specialist at a tech services company with 1,001-5,000 employees
It would be beneficial to have more granular centralized visibility, allowing for quick end-to-end tracing of a user request from authentication to application access without switching between multiple views.
Technical Team Lead - Content Security at Valuepoint Systems
Zscaler Zero Trust Exchange Platform probably needs to be more efficient because scanning takes a lot of time.
Cybersecurity Senior Program Manager at Dayforce
They might be able to identify if something is missing with Zscaler.
architect at Tata Consultancy
 

Setup Cost

Cloudflare Web Application Firewall offers affordable, flexible pricing with no upfront costs, noted for competitiveness and included support services.
Cloudflare provides cost-effective, feature-rich plans for varying traffic needs, offering significant value compared to competitors like Akamai.
Zscaler Zero Trust Exchange Platform has high subscription costs but offers ROI by reducing infrastructure needs and enhancing security.
I find it to be cheap.
Engineer at SITMEXICO
The tool is a premium product, so it is very expensive.
Principal Cyber Prevent and Defense Engineer at a comms service provider with 1,001-5,000 employees
However, the enterprise price for small projects is a bit high.
Security Specialist at a tech services company with 1,001-5,000 employees
There is minimal setup cost since it is a cloud-delivered platform, eliminating the need to invest in additional hardware such as VPN gateways or maintain infrastructure.
Technical Team Lead - Content Security at Valuepoint Systems
Zscaler Zero Trust Exchange Platform is much, much cheaper when comparing price.
Cybersecurity Senior Program Manager at Dayforce
 

Valuable Features

Cloudflare Web Application Firewall provides comprehensive security features, easy setup, scalability, and competitive pricing with praised performance and stability.
Cloudflare offers superior caching, DNS management, and security, enhancing performance, global reach, and domain management with innovative features.
Zscaler Zero Trust Exchange offers scalable security with zero trust access, app segmentation, and flexible identity-based control for organizations.
The custom rules and the geo-redundant geographical rule feature, which allows me to implement geographical rules for customers, add significant value.
Network Architect at a computer software company with 11-50 employees
The best features of Cloudflare Web Application Firewall are multiple, including the WAF, rate limiter, and bot attack protection.
IT Manager at Amla Commerce
Cloudflare Web Application Firewall's advanced reporting and analytics tools add a layer that we're able to visualize and see before it actually hits the local firewall.
Owner at Hga consulting
The solution has been able to compare it to the market, and I think the product has taken great strides in automating quite a bit of things, and they use a lot of AI.
Principal Cyber Prevent and Defense Engineer at a comms service provider with 1,001-5,000 employees
Most of our DNS records that are presented to the internet are proxied whenever possible, providing another layer of defense from our perspective.
Senior Security Engineer at ManpowerGroup
Cloudflare has positively impacted our organization by giving us flexibility to manage the DNS part, being quite fast, and allowing us to manage everything from a single dashboard.
Senior Network and Security Expert at a financial services firm with 201-500 employees
The solution is cloud-based with the latest inspection engines, which I find to be amazing.
architect at Tata Consultancy
We have excellent account management, smooth marketplace engagement, and processing in how my team or organization uses Zscaler Zero Trust Exchange Platform.
Manager, Software Development at a outsourcing company with 201-500 employees
Since we started using Zscaler Zero Trust Exchange Platform, it has auto-configuration, and wherever we have deployed the auto-configuration, we have not encountered any problem.
Cybersecurity Senior Program Manager at Dayforce
 

Categories and Ranking

Cloudflare Web Application ...
Sponsored
Average Rating
8.6
Reviews Sentiment
7.4
Number of Reviews
26
Ranking in other categories
Web Application Firewall (WAF) (7th)
Cloudflare
Average Rating
8.6
Reviews Sentiment
7.0
Number of Reviews
79
Ranking in other categories
CDN (1st), WAN Optimization (4th), Web Application Firewall (WAF) (10th), Distributed Denial-of-Service (DDoS) Protection (2nd), Managed DNS (1st), Domain Name System (DNS) Security (5th), Cloud Security Posture Management (CSPM) (15th)
Zscaler Zero Trust Exchange...
Average Rating
8.4
Reviews Sentiment
6.9
Number of Reviews
67
Ranking in other categories
Data Loss Prevention (DLP) (6th), Cloud Access Security Brokers (CASB) (9th), Application Control (4th), ZTNA as a Service (1st), Secure Access Service Edge (SASE) (2nd), Remote Browser Isolation (RBI) (1st)
 

Mindshare comparison

Web Application Firewall (WAF) Mindshare Distribution
ProductMindshare (%)
Cloudflare5.2%
Imperva Application Security Platform7.7%
Fortinet FortiWeb4.8%
Other82.3%
Web Application Firewall (WAF)
Secure Access Service Edge (SASE) Mindshare Distribution
ProductMindshare (%)
Zscaler Zero Trust Exchange Platform8.8%
Prisma Access by Palo Alto Networks10.2%
Cato SASE Cloud Platform7.6%
Other73.4%
Secure Access Service Edge (SASE)
 

Featured Reviews

DB
CTO at PlayNirvana
Advanced security reporting has protected high-traffic betting platforms from constant attacks
I don't see room for improvement to Cloudflare Web Application Firewall. One thing I don't know much about because we have a dedicated IT team for that, and I'm not involved with Cloudflare much anymore. But if I were to compare them to F5, I would like to see more features that F5 offers. F5 has an option to bring the whole infrastructure, the whole WAF and all their packages, Bot Management, and everything else on your infrastructure. You need to install certain services from their side, and then you can choose if you would like requests to hit your servers immediately or if requests need to be proxied through F5 backbone. That would be a nice addition because we have 90% of the traffic as legit traffic coming from whitelisted servers. If it comes from whitelisted servers, I don't need to go every request through the backbone; I could easily just IP whitelist everything. Then I could maybe have Bot Management on my infrastructure that drastically reduces the price of Cloudflare. I would like to see Push CDN more improved in the next release of Cloudflare Web Application Firewall. And maybe something similar to Pushpin that Fastly has, which is an option where you can push messages that then can be scaled globally over the network. From our perspective, if we have a listener that listens for stock updates, I would just need to have one processor that pushes those updates to the Cloudflare API, and then Cloudflare would broadcast that message to all listeners. Cloudflare will check the order of the message, and if you, as a customer, are not connected or have some kind of network issue, when you reconnect, you will receive the latest state and missing updates.
M.A. Faisal - PeerSpot reviewer
General Manager at bKash Limited
Advanced protection has secured critical web workloads and provides clear traffic visibility
From a security perspective, there remains a security loophole, as some browsers in the market can bypass the Turnstile solution, which requires approximately 40 seconds to do so. From a performance perspective, this is acceptable. We also tried Google reCAPTCHA, and that can also be bypassed. From a security perspective, I would say neither solution is completely secured. Regarding uptime, we have faced a couple of incidents due to Cloudflare in recent years, so I cannot say we receive 100% uptime for our region. We sometimes face challenges, including downtime and other issues. As a result, we are not receiving 100% uptime from Cloudflare's solution. Since most of our customers are in this region, we need alternatives. We need something more competitive than Cloudflare. Unfortunately, in Bangladesh, Cloudflare has three points of presence already, and we cannot find any other solution provider in Bangladesh as an alternative, which presents another challenge. Competitor solutions have more attack signatures, which ensure better security compared to Cloudflare's predefined configurations. Customers do not have options to modify any configuration parameters in Cloudflare, whereas other competitor solutions, such as F5 Distributed Cloud, allow customers to tune configurations according to their requirements. Cloudflare could improve in this area. Additionally, regarding visibility, Cloudflare has static visibility, but they could adopt dynamic graph features for their customers.
Vibin Thomas - PeerSpot reviewer
Technical Team Lead - Content Security at Valuepoint Systems
Zero trust access has transformed remote connectivity and now simplifies secure app usage
Zscaler Zero Trust Exchange Platform, especially Zscaler Private Access, is very strong, though there are a few areas where improvements can be made. One challenge observed is around initial troubleshooting and visibility. While Zscaler Private Access provides logs, it can sometimes take time to pinpoint the exact cause of access issues, especially in complex environments with multiple policies and identity integration. Another area is the dependency on identity and connector health. Since Zscaler Private Access is heavily reliant on app connectors and identity providers, any issues with these components can impact user access, making proper monitoring critical. During the initial setup, policy configuration and application onboarding require careful planning, especially for larger environments with many applications. These challenges are manageable with proper design and monitoring. Overall, the platform delivers strong security and user experience. I would recommend a few improvements, especially around user interface, reporting, and troubleshooting experience. From a user interface perspective, while the platform is powerful, the policy configuration and navigation can feel complex, especially for new users. A more simplified and intuitive layout for policy mapping and application access would help reduce the learning curve. In terms of reporting, Zscaler Private Access provides logs, but having more built-in customizable dashboards and analytics would be very helpful. Better visibility into user access patterns, application performance, and real-time troubleshooting insights would improve operational efficiency. From a support and troubleshooting standpoint, it would be beneficial to have more granular centralized visibility, allowing for quick end-to-end tracing of a user request from authentication to application access without switching between multiple views. These improvements would make the platform even more efficient, especially for large-scale enterprise environments.
report
Use our free recommendation engine to learn which Web Application Firewall (WAF) solutions are best for your needs.
903,147 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Construction Company
17%
Financial Services Firm
9%
Comms Service Provider
9%
Manufacturing Company
7%
Financial Services Firm
10%
Comms Service Provider
10%
Manufacturing Company
8%
Computer Software Company
8%
Financial Services Firm
12%
Manufacturing Company
10%
Computer Software Company
8%
Outsourcing Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business16
Midsize Enterprise6
Large Enterprise6
By reviewers
Company SizeCount
Small Business46
Midsize Enterprise11
Large Enterprise26
By reviewers
Company SizeCount
Small Business16
Midsize Enterprise12
Large Enterprise46
 

Questions from the Community

What needs improvement with Cloudflare Web Application Firewall?
I don't see room for improvement to Cloudflare Web Application Firewall. One thing I don't know much about because we...
What is your primary use case for Cloudflare Web Application Firewall?
We are using Cloudflare Web Application Firewall's advanced reporting and analytics tools with their Zero Trust, so e...
Which is the best DDoS protection solution for a big ISP for monitoring and mitigating?
Cloudflare. We are moving from Akamai prolexic to Cloudflare. Cloudflare anycast network outperforms Akamai static GR...
Which would you choose - Cloudflare DNS or Quad9?
Cloudflare DNS is a very fast, very reliable public DNS resolver. It is an enterprise-grade authoritative DNS service...
What is your experience regarding pricing and costs for Cloudflare DNS?
The pricing, setup cost, and licensing for Cloudflare are a bit on the higher side overall.
What is the better solution - Prisma Access or Zscaler Private Access?
We looked into Prisma Access before choosing Zscaler Private Access (ZPA). Palo Alto’s Prisma Access is a secure ac...
How to minimize false positives for PII and PCI around different data systems across the globe?
Personal information always should be under high protection from manipulations which is why it is the responsibility ...
What is your experience regarding pricing and costs for Zscaler Cloud Protection?
This is an area where I have candid feedback from our organization regarding pricing, setup cost, and licensing for Z...
 

Also Known As

Cloudflare WAF
Cloudflare DNS
Zscaler SASE, Zscaler DLP, Zscaler CASB, Zscaler CSPM, Zscaler Browser Isolation, Zscaler Posture Control
 

Overview

 

Sample Customers

crunchbase, udacity, marketo, okcupid, zendesk
Trusted by over 9,000,000 Internet Applications and APIs, including Nasdaq, Zendesk, Crunchbase, Steve Madden, OkCupid, Cisco, Quizlet, Discord and more.
Siemens, AutoNation, GE, NOV
Find out what your peers are saying about Imperva, Fortinet, F5 and others in Web Application Firewall (WAF). Updated: June 2026.
903,147 professionals have used our research since 2012.