Cloudflare One vs ForgeRock comparison

Why PeerSpot?

Cloudflare and Ping Identity are both solutions in the Access Management category. Cloudflare is ranked #11 with an average rating of 8.5, while Ping Identity is ranked #8 with an average rating of 7.9. Cloudflare holds a 3.7% mindshare in AM, compared to Ping Identity’s 3.4% mindshare. Additionally, 100% of Cloudflare users are willing to recommend the solution, compared to 93% of Ping Identity users who would recommend it.

Cloudflare One

Read 23 Cloudflare One reviews

25,480 Views
2,803 Comparison Views

100% willing to recommend

ForgeRock

Read 37 ForgeRock reviews

8,111 Views
3,812 Comparison Views

93% willing to recommend

Cloudflare One

ForgeRock

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Apr 5, 2026

ForgeRock and Cloudflare One are contenders in the identity and network security categories. While ForgeRock offers a comprehensive identity management suite, Cloudflare One leads in network performance and security aspects.

Features: ForgeRock supports identity repositories, SAML2.0 SSO & Federation, and out-of-the-box connectors. It also features customizable authentication modules and security frameworks. Cloudflare One excels in DDoS protection, ease of deployment, and superior CDN performance.

Room for Improvement: ForgeRock users highlight concerns with complex customization, documentation clarity, and UI design. Meanwhile, Cloudflare One users mention issues with documentation, onboarding, and hybrid environment interoperability. Enhancing user experience and support is needed for both products.

Ease of Deployment and Customer Service: ForgeRock offers various deployment options but requires improved deployment simplicity and consistent customer service. Cloudflare One provides straightforward cloud deployment but could enhance support services to meet growing demands. While both offer strong technical support, ForgeRock’s complexity may necessitate intensive support.

Pricing and ROI: ForgeRock has a premium pricing structure due to its diverse features, offering value in IAM capabilities but can be costly for smaller enterprises. Cloudflare One’s pricing is affordable and competitive in network security, with stakeholders viewing its ROI favorably due to cost efficiencies.

To learn more, read our detailed Cloudflare One vs. ForgeRock Report (Updated: September 2026).

Buyer's Guide

Cloudflare One vs. ForgeRock

September 2026

Download the complete report

Helped 920,574 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Cloudflare One

Ranking in Access Management

11th

Average Rating

8.6

Reviews Sentiment

6.5

Number of Reviews

Ranking in other categories

Email Security (20th), Secure Web Gateways (SWG) (12th), Data Loss Prevention (DLP) (24th), Cloud Access Security Brokers (CASB) (13th), Distributed Denial-of-Service (DDoS) Protection (8th), Software Defined WAN (SD-WAN) Solutions (14th), Bot Management (4th), ZTNA as a Service (7th), ZTNA (5th), Secure Access Service Edge (SASE) (9th), Remote Browser Isolation (RBI) (2nd)

ForgeRock

Ranking in Access Management

8th

Average Rating

8.0

Reviews Sentiment

6.5

Number of Reviews

Ranking in other categories

Identity Management (IM) (9th), Customer Identity and Access Management (CIAM) (6th)

Mindshare comparison

As of November 2026, in the Access Management category, the mindshare of Cloudflare One is 3.7%, up from 3.3% compared to the previous year. The mindshare of ForgeRock is 3.4%, down from 6.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Access Management Mindshare Distribution
Product	Mindshare (%)
ForgeRock	3.4%
Cloudflare One	3.7%
Other	92.9%

Access Management

Featured Reviews

Cobe Van Coller

Network Architect at IP Dimension

Cloud security has improved remote access and has reduced costs for smaller client sites

I have used Cloudflare One's Identity-Aware Proxy, and it is quite straightforward from what I have seen so far. The app registration on the Azure side integrates fully into Cloudflare, and I am very satisfied with that part because it is easy to set up. The integration of Cloudflare One's Secure Web Gateway and Zero Trust Network Access works without any issues. That part is pretty automatic, and if you complete the rest of the setup, it comes together by itself with no issues from my side. What makes it nice is that we can actually start replacing on-site firewalls at this stage for the smaller clients because it does not matter if they go to a coffee shop or work from home; they are still secured by the same connection. The hops get shorter and you get better latency. We have done testing to see if it is better. One thing that we did notice with our proof of concept with our current client is that they have people connecting from the UK. When they used their previous VPN solution, uploading CAD drawings and other files to the server took a long time. They mentioned that it is much quicker on Cloudflare One's solution. I definitely believe that is part of the improved performance, and I am satisfied with that as well. What is nice about Cloudflare One is that it makes the setup easier and also easier to train technicians to maintain it. Compared to legacy systems, we do not need to get fancy firewalls in place that are costly. That is definitely also a cost-saver with Cloudflare One.

Read full review

Shreya Reddy

Software Engineer at a financial services firm with 10,001+ employees

Centralized access control has improved secure onboarding and supports strict compliance

I wish we had used ForgeRock's adaptive risk-based authentication, which allows dynamic adjustment of authentication requirements based on user behavior. This could have helped us further strengthen our security. Another hidden gem is the built-in support for custom authentication modules and scripting, which gives a great deal of flexibility to tailor authentication flows. The self-service capabilities for password resets and account recovery have been very helpful in reducing support overhead and improving user experience. Discovering and utilizing these features would have definitely made our integration even smoother and would have provided additional value for both our users and our security team. One area of improvement would be the user interface for policy and workflow configuration, which can become complex and sometimes unintuitive, especially for new administrators. A more streamlined and user-friendly UI would help reduce the learning curve. Enhanced out-of-the-box analytics and reporting would also be valuable, as our current options often require custom development or integration with external tools. While extensibility is a strength, documentation for advanced customizations and integrations could be more comprehensive and easier to follow. Improved support for seamless upgrades and backward compatibility would also help minimize downtime. In terms of performance, optimizing the platform for high concurrency environments would be beneficial, especially for organizations with large user bases or peak usage periods. Enhanced scalability features such as more granular or horizontal scaling options would provide better support for distributed deployments. For integrations, having more pre-built connectors and easy integration with modern cloud-native services would accelerate adoption. Improved monitoring and real-time health dashboards would help proactively identify and resolve performance bottlenecks.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Clover is the best product globally."

"Cloudflare Access is part of the Zero Trust philosophy."

"For Cloudflare Access, I am using the free plan...The most valuable feature is their protection."

"Cloudflare Access is a stable solution."

"It's the endpoint exposition. We don't need to expose our VPN server to the internet and need a zero-test solution. I can apply some conditional access to the endpoint that's connecting to our network to check their security policies or the security condition of their workstation. Once the workstation is trying to connect to my internal network, then I would like to check the discrete condition of these endpoints that are trying to access my internal network. We created some conditional access. We have CrowdStrike, to check if the CrowdStrike is installed, to check if it's updated, and to check for Windows updates. We created some conditional policies to check it."

"Using Cloudflare One makes my work quite easy because for DDoS protection, all I need to do is understand the OSI model and click; it makes it easier than trying to write a command line or use a Linux command."

"We mostly use Cloudflare WAF, and gets basic Cloudflaire DDoS, caching as extra bonus . We like the factor these features are all integrated into 1 console, simple to manage."

"Cloudflare Zero Trust Platform removes the risk of exposing the applications to the public."

More Cloudflare One pros

"ForgeRock is an extensive product with many functionalities and capabilities, much more than many other tools combined."

"It secured our system so that it is accessed only by authorized people, and it implemented the SSO."

"Since ForgeRock is an authentication tool, it gives more use cases and more revenue for companies."

"We found this solution and we found someone who could create a proof of concept and we decided to change from Solaris IDM to this, as it has the same functionality."

"Flexibility in the customisation. Out-of-the-box support for almost all authentication mechanisms/products."

"The support team is better than the other product we were using."

"ForgeRock products are customizable, and the out-of-the-box features are solid, too. I primarily use the OIDC compliance features. It's just a configuration. it's easy to set up and customize trees. We can add our own features if necessary. Banks and corporations have different standards and specific validations."

"Almost all the notes which are required for these journeys are out of the box, and if you want to enable biometrics, you can get these notes from ForgeRock marketplace, so most technologies are out of the box or require a minimum configuration."

More ForgeRock pros

Cons

"The response time for support must be reduced."

"For the topic of improvement, providing some training material is one of my suggestions."

"Our customers no longer use Cloudflare because its service is subpar."

"Feedback could be enhanced. While I work efficiently with Clover as a partner in Mexico City, sometimes the information and requests are easier to manage with more concrete solutions."

"Operating and tuning the product is difficult."

"I would like them to include a VPN feature to provide a secure connection to the data center."

"From a logging perspective, it is still a bit difficult to see exactly what users are being blocked with the current views."

"When there are any dynamic changes in complex applications, the tool takes a lot of time, making its analytics-related area a major matter of concern where improvements are needed."

More Cloudflare One cons

"The solution's documentation is not very good, and they do not give more details."

"ForgeRock can improve by offering a unified development IDE for workflows, as we currently maintain BPMN, XML, JSON, and JavaScript separately."

"It would be better if they were available for support whenever the customer needs it, especially during migration or go-live time periods."

"You have to be careful about customizing the solution, and how to sustain it across your teams."

"The only problem with ForgeRock is that it is derived from an open-source product, so sometimes it's a bit unstable."

"The identity management model needs a bit of improvement."

"ForgeRock can be a complex product that requires a lot of time to learn and understand its real value."

"I don't think ForgeRock directly supports integrations with Slack, making it an area where improvements are required."

More ForgeRock cons

Pricing and Cost Advice

"The pricing is somewhere in the middle. I would rate the pricing a seven out of ten."

"My company has to make yearly payments towards the licensing costs attached to the solution. There are no hidden charges apart from the licensing costs of the solution."

"The price tag is no longer $200,000, but rather $300,000 to $400,000. It's twice."

"The prices are slightly expensive."

"The solution is not that expensive."

"Cloudflare Zero Trust Platform's pricing is good."

"The pricing of the solution is cheap. The licensing cost is also very low. I rate the cost and pricing a three out of ten."

"The solution's pricing lacks transparency."

"Its licensing is on a yearly basis, but it also depends on the contract that you have with the vendor. They have multiple types of contracts. There are additional costs to the standard licensing fees. If you need some of the features, you have to pay more."

"The pricing of the solution is fair but I do not have the full details."

"ForgeRock's pricing is more competitive than other products."

"It's a bit pricey and could be more competitive."

"ForgeRock is an expensive solution."

"Its price is comparable to other products in the market."

"The license is purchased annually per user. However, you can negotiate if you are signing for a longer period of time. When comparing this solution to others on the market it is priced fair, it is not at the top of the price range or at the bottom end."

"We have multiple clients we are looking at right now. We are at a very small number, however, the idea and the goal is to grow. We are looking at about $100,000 and $50,000 a minimum a month cost. That'd be minimum maybe in a couple of years."

See which vendors are best for you

Use our free recommendation engine to learn which Access Management solutions are best for your needs.

See recommendations

920,574 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Construction Company

18%

Comms Service Provider

10%

Outsourcing Company

Financial Services Firm

17%

Outsourcing Company

14%

Manufacturing Company

Construction Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	10
Large Enterprise	13

By reviewers
Company Size	Count
Small Business	15
Midsize Enterprise	5
Large Enterprise	18

Questions from the Community

What is your experience regarding pricing and costs for Cloudflare Zero Trust Platform?

Pricing is competitive. Akamai is more expensive, in my view.

See all answers

What needs improvement with Cloudflare Zero Trust Platform?

In my opinion, Cloudflare One can be improved mainly through compatibility, as the integration should be much simpler because it is currently too closed and too proprietary. Regarding additional fe...

See all answers

What is your primary use case for Cloudflare Zero Trust Platform?

Cloudflare One's primary use case for my organization is to protect servers and to provide remote access with the VPN, strong authentication, and DDoS protection. The integration of Secure Web Gate...

See all answers

What is your experience regarding pricing and costs for ForgeRock?

The pricing, setup cost, and licensing are very straightforward, which is a good success. I appreciate that it is very straightforward and helpful.

See all answers

What needs improvement with ForgeRock?

There are some areas I want ForgeRock to improve. These areas include policy configuration, documentation clarity, UI complexity, and debugging token flow. I want ForgeRock to improve in documentat...

See all answers

What is your primary use case for ForgeRock?

I am using ForgeRock for standard support, policy configurations, and documentation clarity. The pricing, setup cost, and licensing are very straightforward, which is a good success. I appreciate t...

See all answers

Comparisons

Cato SASE Cloud Platform vs Cloudflare One

Compared 3% of the time

Zscaler Zero Trust Exchange Platform vs Cloudflare One

Compared 3% of the time

Prisma Access by Palo Alto Networks vs Cloudflare One

Compared 3% of the time

Twingate vs Cloudflare One

Compared 2% of the time

Fortinet FortiGate vs Cloudflare One

Compared 2% of the time

More Cloudflare One Competitors

SecureAuth Identity Platform vs ForgeRock

Compared 6% of the time

Symantec Identity Governance and Administration vs ForgeRock

Compared 6% of the time

SailPoint Identity Security Cloud vs ForgeRock

Compared 4% of the time

Auth0 Platform vs ForgeRock

Compared 4% of the time

Ping Identity Platform vs ForgeRock

Compared 4% of the time

More ForgeRock Competitors

Product Reports

Buyer's Guide

Cloudflare One

October 2026

Download Cloudflare One product report

Buyer's Guide

ForgeRock

October 2026

Download ForgeRock product report

Also Known As

Cloudflare Area 1 Email Security, Cloudflare Bot Management, Cloudflare Gateway, Cloudflare Zero Trust Platform, Cloudflare DDoS, Cloudflare SASE & SSE Platform

ForgeRock Identity Platform, ForgeRock OpenIDM

Overview

Cloudflare One is a comprehensive platform for security, performance, and connectivity. It provides features like rate limiting, DDoS protection, and application access, tailored to enhance user experience while securing internet access and accelerating communications.

Designed to integrate security measures with ease of use and scalability, Cloudflare One offers a secure web gateway and zero trust network access. These features ensure seamless setup and operation, making connectivity reliable and protected. Users appreciate its integrated console, intuitive interface, and the ability to manage risk effectively. It offers straightforward deployment, improves latency, and boasts cost-effectiveness. While its onboarding process and documentation need enhancement, its value in content delivery and application shielding is notable. Despite challenges in integrating Cloudflare Access with existing VPNs and the need for better automation and support, it remains vital for DNS and infrastructure protection.

What features make Cloudflare One stand out?

Rate Limiting: Controls the traffic rate to prevent abuse.
DDoS Protection: Shields applications from distributed denial-of-service attacks.
Secure Web Gateway: Provides secure internet access with seamless operation.
Zero Trust Network Access: Ensures secure, application-based connectivity without relying on traditional VPNs.
Access for Connectivity: Facilitates access to internal applications securely.

What benefits should users look for in reviews?

Security: Robust measures for DNS and browsing protection.
Performance: Enhanced site accessibility and communication speed.
Cost-Effectiveness: Offers competitive pricing for its features.
Ease of Deployment: Straightforward and efficient setup process.

In industries like finance, retail, and technology, Cloudflare One is crucial for enabling secure remote access and protecting web applications against dynamic threats. It supports compliance access policies and enhances content delivery, playing a key role in safeguarding digital infrastructure.

Cloudflare

ForgeRock offers robust integration, customization, and identity management with support for SAML, OAuth 2.0, and DevOps readiness, ensuring enhanced security and scalability.

ForgeRock stands out in identity and access management featuring flexible authentication flows, risk-based authentication, centralized policy management, and comprehensive data protection. Its open-source foundation and cloud capabilities allow versatility and ease of use. While it provides excellent user path orchestration through the Journey feature, challenges exist in integration support and user-friendly customization. Improved documentation and streamlined interfaces are necessary to overcome deployment complexities. Additionally, the cost and support model may be burdensome for smaller organizations.

What are the key features?

Flexible Authentication Flows: Personalizes user login experiences.
Risk-Based Authentication: Adjusts security measures based on user behavior.
Identity Management: Manages digital identities efficiently.
Policy Configuration: Automates access control policies.
DevOps Readiness: Integrates seamlessly with DevOps workflows.

What benefits should users expect?

Enhanced Security: Protects data and user identities.
Scalability: Supports growing business needs.
Developer-Friendly: Simplifies deployment and management processes.
Centralized Management: Streamlines access control and policy enforcement.
Versatile Cloud Offerings: Facilitates deployment across cloud environments.

ForgeRock is widely utilized in industries like telecommunications, insurance, and open banking for secure user authentication and access management. It supports microservice authentications, customer identity management, single sign-on, and multi-factor authentication, integrating effectively with existing infrastructures to enhance security and user experience.

Ping Identity

Sample Customers

23andMe

Geico, Thomson Reuters, Salesforce, McKesson, Trinet, SKY, BNP Paribas, Deloitte, Capgemini, North Western University

Buyer's Guide

Cloudflare One vs. ForgeRock

September 2026

Free Report: Cloudflare One vs. ForgeRock

Find out what your peers are saying about Cloudflare One vs. ForgeRock and other solutions. Updated: September 2026.

DOWNLOAD NOW

920,574 professionals have used our research since 2012.

See our Cloudflare One vs. ForgeRock report.

See our list of best Access Management vendors.

We monitor all Access Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.