We use this solution for our web application firewall. We are partners of Cloudflare and I am a system architect and specialist.
Senior Security Consultant at Reliance Industries Ltd
Perfect from my perspective; simple, user-friendly and easy to configure
Pros and Cons
- "This solution is easy to understand and easy to configure."
- "It's a perfect solution from my perspective; it's easy to understand and easy to configure."
- "Lacks a VPN feature to provide a secure connection to the data center."
- "I would like them to include a VPN feature to provide a secure connection to the data center."
What is our primary use case?
What is most valuable?
This is a simple, user-friendly solution. You turn it on and that's it. It's a perfect solution from my perspective; it's easy to understand and easy to configure.
What needs improvement?
I would like them to include a VPN feature to provide a secure connection to the data center.
For how long have I used the solution?
I've been using this solution for two years.
Buyer's Guide
Cloudflare One
May 2026
Learn what your peers think about Cloudflare One. Get advice and tips from experienced pros sharing their opinions. Updated: May 2026.
893,311 professionals have used our research since 2012.
What do I think about the stability of the solution?
The solution is stable.
What do I think about the scalability of the solution?
The solution is scalable, we have around 70 users in the company.
How are customer service and support?
We used the local technical support team in Singapore and they were very helpful.
How was the initial setup?
The initial setup is straightforward, deployment took about an hour.
What's my experience with pricing, setup cost, and licensing?
Licensing costs are reasonable, I believe we pay around $4,000 per month.
Which other solutions did I evaluate?
We evaluated several options, including Radware and F5, and carried out a POC. Cloudflare came out on top.
What other advice do I have?
I recommend this solution and rate it 10 out of 10.
Disclosure: My company has a business relationship with this vendor other than being a customer. partner
Information Security and Compliance Manager at a tech vendor with 11-50 employees
Helps to secure applications from public but needs improvement in documentation
Pros and Cons
- "Cloudflare Zero Trust Platform removes the risk of exposing the applications to the public."
- "Cloudflare Zero Trust Platform needs to improve its documentation. It took time to do the implementation."
What is our primary use case?
We use the product to access applications that are restricted to employees only.
How has it helped my organization?
Cloudflare Zero Trust Platform removes the risk of exposing the applications to the public.
What needs improvement?
Cloudflare Zero Trust Platform needs to improve its documentation. It took time to do the implementation.
For how long have I used the solution?
I have been using the product since January.
What do I think about the stability of the solution?
I rate the solution's stability a ten out of ten.
What do I think about the scalability of the solution?
I rate the product's scalability a ten out of ten.
How was the initial setup?
Cloudflare Zero Trust Platform's deployment can be complex if the documentation doesn't cover the use cases.
What's my experience with pricing, setup cost, and licensing?
Cloudflare Zero Trust Platform's pricing is good.
What other advice do I have?
I rate the product a nine out of ten.
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Buyer's Guide
Cloudflare One
May 2026
Learn what your peers think about Cloudflare One. Get advice and tips from experienced pros sharing their opinions. Updated: May 2026.
893,311 professionals have used our research since 2012.
Senior Associate at a transportation company with 5,001-10,000 employees
Provides robust capabilities to protect our domain and website from potential threats and compromises and simplified configuration
Pros and Cons
- "The capabilities of the software are strong enough for me to do what it's supposed to do. For me, we don't need to do a lot of configuration on our site. We just enable it and monitor it."
- "The software has automated alerts, but the automated alerts are not available in the mobile app."
What is our primary use case?
We have to make sure that we are protected in our domain, our website from the public Internet because we don't want any compromise to our site.
With DDoS, we have to ensure that we are not hijacked. So that's why we want to eliminate the attacks on our infracturer.
What is most valuable?
The capabilities of the software are strong enough for me to do what it's supposed to do. For me, we don't need to do a lot of configuration on our site. We just enable it and monitor it.
Cloudflare is good at consolidating the solution embedded into one single console, which makes it interesting for us to explore more on Cloudflare. Besides that, the CDN performance has also helped us improve the accessibility of the site to the public.
What needs improvement?
There is little room for improvement dashboard-wise.
In future releases, I would like to see alerts. The software has automated alerts, but the automated alerts are not available in the mobile app.
Now, we have to be fast to get ready, not just from the end-user site, but we have to know first if possible.
For how long have I used the solution?
I have been using Cloudflare DDoS for almost three years.
What do I think about the stability of the solution?
So far, we haven't received any complaints or issues from our application site. So far, we don't see any issues that are concerning. Because I am the one managing the infrastructure, the others are managed by my application team.
So, it has been a stable product for us.
There are more than five end users in our company. So, we added a key percentage that manages the product and the system.
Which solution did I use previously and why did I switch?
When I stepped into the current company, the system was already onboarded.
We use Cloudflare WAF CDN and DDoS protection for our domain.
How was the initial setup?
The initial setup is easy and straightforward. For me, it's easy because we only need to point our DNS to Cloudflare, so we receive traffic from Cloudflare.
What other advice do I have?
I'm suggesting using Cloudflare based on our experience. This is in terms of compliance. So, it complies with the top tech standards. And configuration is easy for us. We don't need to stress it for customization or configure rules. We enable it, and it's done. We only monitor the logs and any issues. So I'm suggesting you use Cloudflare if you want to.
Overall, I would rate the solution an eight out of ten.
Which deployment model are you using for this solution?
Public Cloud
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Senior Information Security Analyst at Everbridge
An easy-to-deploy defense tool that provides a lot of good features and documentation
Pros and Cons
- "The blocking feature is very good."
- "The response time for support must be reduced."
What is our primary use case?
We use the solution as a web application firewall.
What is most valuable?
The blocking feature is very good. The traffic feature is also very good. The product has a lot of good features that we can use on-premises or on the cloud. I like the product very much. It is a very good defense tool.
What needs improvement?
The solution must improve support. The response time for support must be reduced.
For how long have I used the solution?
I have been using the solution for one and a half years.
What do I think about the stability of the solution?
The tool is pretty stable. I rate the stability a nine out of ten.
What do I think about the scalability of the solution?
I rate the tool’s scalability an eight out of ten. More than 40 people in my organization are using the tool.
How are customer service and support?
We get people to support us when we contact them. However, it takes them too long to respond. The first response is quick, but the follow-ups are slower.
How would you rate customer service and support?
Positive
How was the initial setup?
The initial setup was easy. The time taken for deployment depends on the devices we deploy, the logs we want, and the kind of product we are deploying.
What about the implementation team?
The deployment was done in-house.
What's my experience with pricing, setup cost, and licensing?
The solution is not that expensive. It is moderately priced.
What other advice do I have?
The documentation is easy to follow. The documentation is really helpful for first-time users. Overall, I rate the product a nine out of ten.
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Security implmentation engineer at a security firm with 51-200 employees
A powerful and easy-to-deploy solution that provides multiple features to mitigate risks
Pros and Cons
- "The solution has different options that can be used to differentiate DDoS attacks."
- "The onboarding process can be improved a little bit."
What is our primary use case?
We use the product to mitigate the security risk of dynamic DDoS attacks. In these attacks, millions of requests come from millions of different IPs to get our server down. If we do not have a security solution to mitigate this risk, the service for other users will be down. The server will be down due to the huge consumption of resources.
What is most valuable?
The solution has different options that can be used to differentiate DDoS attacks. Cloudflare has a user agent, which can be used to define rules. If I do not want MacBook users to access the system, I can use the user agent to drop the traffic for MacBook users. It is very valuable. It helps me mitigate risks.
The product gives us many tools to mitigate risks. It is one of the most powerful solutions on the cloud. The documentation is good.
What needs improvement?
The onboarding process can be improved a little bit.
For how long have I used the solution?
I have been using the solution for nine months.
What do I think about the stability of the solution?
I did not face any stability issues in the past nine months.
How are customer service and support?
I recently contacted support to get more information about certain attacks. I wanted to get a full report about an incident, and they sent me all the details I needed.
How would you rate customer service and support?
Positive
How was the initial setup?
The initial setup is not complex at all. It is too simple.
What about the implementation team?
We just have to integrate the node IP address of AWS and change the public IP as a DNS record. Then, Cloudflare will send all the data after mitigating any risk to AWS. The deployment takes five to seven business days. We need one or two engineers for the security part of the deployment. For testing and services, we need a team.
What other advice do I have?
It is a cloud solution. We have integrated it with Amazon AWS. Sometimes we can't mitigate the DDoS attacks using AWS WAF. It doesn’t detect the attacks. AWS WAF does not have some options to differentiate the type of attacks.
I use the tool only as a DDoS solution. I just use the DDoS service to protect myself. There's no scalability for this option. Documents already exist for all the cloud solutions. I wouldn’t prefer an automated solution for integration because apps are built based on customers’ requirements. The requirements differ, so the default profile for automation can't fit all the customers. Overall, I rate the product a nine and a half or ten out of ten.
Which deployment model are you using for this solution?
Public Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Amazon Web Services (AWS)
Disclosure: My company has a business relationship with this vendor other than being a customer. Integrator
IT Associate at GNRC Hospitals
Provides protection to websites by allowing its user to add a two-factor authentication
Pros and Cons
- "For Cloudflare Access, I am using the free plan...The most valuable feature is their protection."
- "They don't have a person to provide support for customers using the solution under their free plan."
What is our primary use case?
I mostly use Cloudflare Access for protecting some specific areas of my website, specifically public access. So I can do it using two-factor authentication. So it only allows some registered emails to access that part of my website.
What is most valuable?
For Cloudflare Access, I am using the free plan. So they are allowing 50 users to use it together. So we can say it is not only for personal use but also beneficial for a small team of fifty people. We can use it in a small company or startup also.
The most valuable feature is their protection. Also, its custom rule set is something we can use to specify whether we want to allow a user to access a specific application-specific software.
What needs improvement?
I'm just a beginner in Cloudcare Access. So I have used their basic functionality. So, I didn't find any issue with their basic functionalities.
They don't have a person to provide support for customers using the solution under their free plan. So, the aforementioned area can be considered for improvement.
For how long have I used the solution?
I have been using Cloudflare Access for three to four months. I'm using Cloudera Access for my personal use.
How are customer service and support?
I haven't contacted technical support.
How was the initial setup?
The solution is deployed on the cloud. So, it is mainly deployed on Cloudflare infrastructure. We can use that to protect our application or step on our own server or any software as a service application.
They have Web2py, which we can use for setup. But before that, we have to add the domain we want to protect with Cloudflare Access to Cloudflare DNS. So I want to say that before using Cloudflare Access for a specific domain, we have to add them to Cloudflare DNS. Only then can we use Cloudflare Access.
What other advice do I have?
Whether to use the solution or not will depend on your requirements. For basic security, we all have already implemented a password and a username on our website. But nowadays, it is possible to crack passwords because of modern computation. So, if we want to secure our services, it is really good to add a two-factor authentication using Cloud Access to improve security.
Without adding any manual code or any more software to our servers, I can easily implement zero trust Cloudflare Access, which is because of their simple UI, by just adding my domain and specifying a role. So it's easy.
I rate the overall solution a ten out of ten.
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Technical Solutions Specialist at Google
The most effective solution with excellent signatures and a helpful support team
Pros and Cons
- "Cloudflare is by far the most effective solution that I have come across."
- "Operating and tuning the product is difficult."
What is our primary use case?
I use the solution for scrubbing internet-based traffic that comes toward a particular company’s data center. The traffic is directed to Cloudflare first. Cloudflare does the traffic scrubbing and sends the clean traffic toward the company's data center.
What is most valuable?
I have worked with many DDoS solutions. Cloudflare is by far the most effective solution that I have come across. It is really good. The product’s signatures are good. The people in the accounting and technical management teams are nice. Support is also good.
What needs improvement?
Operating and tuning the product is difficult.
For how long have I used the solution?
I have been using the solution for almost one and a half years.
What do I think about the stability of the solution?
The tool is pretty much stable. I rate the stability a ten out of ten.
What do I think about the scalability of the solution?
I rate the scalability a nine out of ten. The solution has a huge customer base. In our organization, 10,000 people are using the solution.
How are customer service and support?
When we often face issues with the service, we contact the support team. The team is really good. However, support could be improved.
How was the initial setup?
The onboarding process was pretty simple.
What about the implementation team?
We deployed the product two years ago. We took a couple of months to deploy it.
What other advice do I have?
If someone wants to set up a DDoS solution for the first time, they should choose Cloudflare. Overall, I rate the product a nine out of ten.
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Senior Cyber Security Consultant at ATOS
User-friendly solution with an easy initial setup process
Pros and Cons
- "It is a stable solution."
- "Our subscription plan for the solution has a limitation of bot signatures."
What is our primary use case?
We use the solution to protect some of the services. It helps us protect our applications and infrastructure.
What is most valuable?
The solution is user-friendly in terms of graphical interface and is easy to deploy.
What needs improvement?
Our subscription plan for the solution has a limitation of bot signatures.
What do I think about the stability of the solution?
It is a stable solution.
How was the initial setup?
It is an in-built tool in our Cloudflare infrastructure, and we use it as a DNS service. Thus, we don't necessarily have to configure it. We add it as a service, and it works great for us.
What other advice do I have?
The solution is excellent. It helped us a lot with DDoS issues. I rate it a ten out of ten.
Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Buyer's Guide
Download our free Cloudflare One Report and get advice and tips from experienced pros
sharing their opinions.
Updated: May 2026
Product Categories
Secure Access Service Edge (SASE) Email Security Secure Web Gateways (SWG) Data Loss Prevention (DLP) Cloud Access Security Brokers (CASB) Distributed Denial-of-Service (DDoS) Protection Software Defined WAN (SD-WAN) Solutions Access Management Bot Management ZTNA as a Service ZTNA Remote Browser Isolation (RBI)Popular Comparisons
Fortinet FortiGate
Cloudflare
Microsoft Entra ID
Darktrace
Cisco Umbrella
Microsoft Defender for Office 365
Prisma Access by Palo Alto Networks
Okta Platform
Zscaler Zero Trust Exchange Platform
Varonis Platform
Zscaler Internet Access
Imperva Application Security Platform
Proofpoint Email Protection
Cato SASE Cloud Platform
Buyer's Guide
Download our free Cloudflare One Report and get advice and tips from experienced pros
sharing their opinions.
Quick Links
Learn More: Questions:
- What security features does Cloudflare Bot Management provide to protect against malicious bot traffic?
- What are fullz and how can Cloudflare Bot Management help our company mitigate their misuse?
- Why is Cloudflare deprecating Railgun if it's their own product?
- What is the difference between point solutions (SD-WAN, NGFW, SWG, VPN) and SASE?
- What questions do you need to ask when choosing a Secure Access Service Edge (SASE) solution?
- When evaluating Secure Access Service Edge (SASE), what aspect do you think is the most important to look for?
- Has anyone ever heard of secureaccess.com?
- What is the difference between SASE and SD-WAN?
- What is the difference between SASE and CASB?
- What SASE solution does your company use?




















