We use the solution as a web application firewall.
Senior Information Security Analyst at Everbridge
An easy-to-deploy defense tool that provides a lot of good features and documentation
Pros and Cons
- "The blocking feature is very good."
- "The response time for support must be reduced."
What is our primary use case?
What is most valuable?
The blocking feature is very good. The traffic feature is also very good. The product has a lot of good features that we can use on-premises or on the cloud. I like the product very much. It is a very good defense tool.
What needs improvement?
The solution must improve support. The response time for support must be reduced.
For how long have I used the solution?
I have been using the solution for one and a half years.
Buyer's Guide
Cloudflare One
February 2025
Learn what your peers think about Cloudflare One. Get advice and tips from experienced pros sharing their opinions. Updated: February 2025.
832,891 professionals have used our research since 2012.
What do I think about the stability of the solution?
The tool is pretty stable. I rate the stability a nine out of ten.
What do I think about the scalability of the solution?
I rate the tool’s scalability an eight out of ten. More than 40 people in my organization are using the tool.
How are customer service and support?
We get people to support us when we contact them. However, it takes them too long to respond. The first response is quick, but the follow-ups are slower.
How would you rate customer service and support?
Positive
How was the initial setup?
The initial setup was easy. The time taken for deployment depends on the devices we deploy, the logs we want, and the kind of product we are deploying.
What about the implementation team?
The deployment was done in-house.
What's my experience with pricing, setup cost, and licensing?
The solution is not that expensive. It is moderately priced.
What other advice do I have?
The documentation is easy to follow. The documentation is really helpful for first-time users. Overall, I rate the product a nine out of ten.
Disclosure: I am a real user, and this review is based on my own experience and opinions.
IT Associate at GNRC Hospitals
The rate limiting feature helps restrict unwanted requests
Pros and Cons
- "The best feature is rate limiting. If I'm expecting 500 visits per hour, Cloudflare will limit the requests if I suddenly get 50,000."
- "The free plan has limitations. For example, I can only set up three rules, and the application firewall is unavailable."
What is our primary use case?
Cloudflare DDoS protects against bots and DDoS attacks. I'm using the free version for my personal website.
What is most valuable?
The best feature is rate limiting. If I'm expecting 500 visits per hour, Cloudflare will limit the requests if I suddenly get 50,000.
What needs improvement?
The free plan has limitations. For example, I can only set up three rules, and the application firewall is unavailable.
For how long have I used the solution?
I have used Cloudflare DDoS for about a year.
How was the initial setup?
The initial setup isn't difficult. When a user signs up for a Cloudflare account and adds domains, it automatically deploys basic protection.
What other advice do I have?
I rate Cloudflare DDoS 10 out of 10. Before you opt for Cloudflare DDoS, you should understand that every cloud provider includes DDoS. If you are hosting your services in AWS, Google Cloud, or Microsoft Azure, you already have DDoS, so secondary protection isn't necessary.
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Buyer's Guide
Cloudflare One
February 2025
Learn what your peers think about Cloudflare One. Get advice and tips from experienced pros sharing their opinions. Updated: February 2025.
832,891 professionals have used our research since 2012.
Provides remote access, is feature-rich and user-friendly
Pros and Cons
- "Enables me to work from two locations."
What is our primary use case?
Access provides remote access to RDP, FSH, and security camera websites.
What is most valuable?
I work from two locations and Access enables me to work from both. It's feature-rich and user-friendly.
What needs improvement?
It's a little difficult to implement although that has nothing to do with the product.
For how long have I used the solution?
I've been using this solution for two years.
What do I think about the stability of the solution?
Access has always been stable.
What do I think about the scalability of the solution?
I haven't tried scaling this solution.
How was the initial setup?
You need to know a lot about networking to implement the solution but that has nothing to do with the product itself.
What's my experience with pricing, setup cost, and licensing?
This is a very affordable solution.
What other advice do I have?
I recommend this product, it's probably the best thing out there, especially if you're already a software customer. I rate Access nine out of 10.
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Information Security and Compliance Manager at a tech vendor with 11-50 employees
Helps to secure applications from public but needs improvement in documentation
Pros and Cons
- "Cloudflare Zero Trust Platform removes the risk of exposing the applications to the public."
- "Cloudflare Zero Trust Platform needs to improve its documentation. It took time to do the implementation."
What is our primary use case?
We use the product to access applications that are restricted to employees only.
How has it helped my organization?
Cloudflare Zero Trust Platform removes the risk of exposing the applications to the public.
What needs improvement?
Cloudflare Zero Trust Platform needs to improve its documentation. It took time to do the implementation.
For how long have I used the solution?
I have been using the product since January.
What do I think about the stability of the solution?
I rate the solution's stability a ten out of ten.
What do I think about the scalability of the solution?
I rate the product's scalability a ten out of ten.
How was the initial setup?
Cloudflare Zero Trust Platform's deployment can be complex if the documentation doesn't cover the use cases.
What's my experience with pricing, setup cost, and licensing?
Cloudflare Zero Trust Platform's pricing is good.
What other advice do I have?
I rate the product a nine out of ten.
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Senior Associate at a transportation company with 5,001-10,000 employees
Provides robust capabilities to protect our domain and website from potential threats and compromises and simplified configuration
Pros and Cons
- "The capabilities of the software are strong enough for me to do what it's supposed to do. For me, we don't need to do a lot of configuration on our site. We just enable it and monitor it."
- "The software has automated alerts, but the automated alerts are not available in the mobile app."
What is our primary use case?
We have to make sure that we are protected in our domain, our website from the public Internet because we don't want any compromise to our site.
With DDoS, we have to ensure that we are not hijacked. So that's why we want to eliminate the attacks on our infracturer.
What is most valuable?
The capabilities of the software are strong enough for me to do what it's supposed to do. For me, we don't need to do a lot of configuration on our site. We just enable it and monitor it.
Cloudflare is good at consolidating the solution embedded into one single console, which makes it interesting for us to explore more on Cloudflare. Besides that, the CDN performance has also helped us improve the accessibility of the site to the public.
What needs improvement?
There is little room for improvement dashboard-wise.
In future releases, I would like to see alerts. The software has automated alerts, but the automated alerts are not available in the mobile app.
Now, we have to be fast to get ready, not just from the end-user site, but we have to know first if possible.
For how long have I used the solution?
I have been using Cloudflare DDoS for almost three years.
What do I think about the stability of the solution?
So far, we haven't received any complaints or issues from our application site. So far, we don't see any issues that are concerning. Because I am the one managing the infrastructure, the others are managed by my application team.
So, it has been a stable product for us.
There are more than five end users in our company. So, we added a key percentage that manages the product and the system.
Which solution did I use previously and why did I switch?
When I stepped into the current company, the system was already onboarded.
We use Cloudflare WAF CDN and DDoS protection for our domain.
How was the initial setup?
The initial setup is easy and straightforward. For me, it's easy because we only need to point our DNS to Cloudflare, so we receive traffic from Cloudflare.
What other advice do I have?
I'm suggesting using Cloudflare based on our experience. This is in terms of compliance. So, it complies with the top tech standards. And configuration is easy for us. We don't need to stress it for customization or configure rules. We enable it, and it's done. We only monitor the logs and any issues. So I'm suggesting you use Cloudflare if you want to.
Overall, I would rate the solution an eight out of ten.
Which deployment model are you using for this solution?
Public Cloud
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Partenaire, CEO at a tech services company with 1-10 employees
Simple to use, but the price could be improved
Pros and Cons
- "Cloudflare is simple to use."
- "Our customers no longer use Cloudflare because its service is subpar."
What is most valuable?
Cloudflare is simple to use.
What needs improvement?
Cloudflare is similar to a toolbox. It's simple to handle the box, but it's a different story when it comes to handling the tools. The same is true for Amazon. That is true for all companies. The majority of them have it. They will sell you a toolbox, but you must know how to use it.
Cloudflare isn't all bad. We have customers who are getting rid of Imperva because they can't find anyone who knows anything about it. Our customers no longer use Cloudflare because its service is subpar.
There's another company, Sucuri, that has excellent customer support, but you don't buy it because you don't want to talk to customer support. Customer support is not something you want to purchase. You're supposed to buy something without requiring customer support, which is the main point.
The same goes for Fortinet. While I am not familiar with the machine, it can cost a lot of money sometimes, $300,000 for a medium-sized business. Furthermore, you will require a full-time employee in your office who is knowledgeable. Dependent on the skill level today's resources can range from 80 to 150.
What's my experience with pricing, setup cost, and licensing?
You don't want to pay. The price tag is no longer $200,000, but rather $300,000 to $400,000. It's twice.
What other advice do I have?
The industry is changing right now. There is artificial intelligence. You have blockchain, and Quantum is on the way. It's there and on its way. So there is a significant shift in that area, of cyber security.
And, on top of that, there is a global shortage of 3.5 million security experts or professionals.
You are not an expert in your first year. People believe they are experts because they have a certification or something similar. Experts do not behave in this manner. Expert in dealing with a crisis. To become an expert, you must go through many crises. However, people are now claiming to be experts simply because they can scan something.
I would rate Cloudflare DDoS a seven out of ten.
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Technical Solutions Specialist at Google
The most effective solution with excellent signatures and a helpful support team
Pros and Cons
- "Cloudflare is by far the most effective solution that I have come across."
- "Operating and tuning the product is difficult."
What is our primary use case?
I use the solution for scrubbing internet-based traffic that comes toward a particular company’s data center. The traffic is directed to Cloudflare first. Cloudflare does the traffic scrubbing and sends the clean traffic toward the company's data center.
What is most valuable?
I have worked with many DDoS solutions. Cloudflare is by far the most effective solution that I have come across. It is really good. The product’s signatures are good. The people in the accounting and technical management teams are nice. Support is also good.
What needs improvement?
Operating and tuning the product is difficult.
For how long have I used the solution?
I have been using the solution for almost one and a half years.
What do I think about the stability of the solution?
The tool is pretty much stable. I rate the stability a ten out of ten.
What do I think about the scalability of the solution?
I rate the scalability a nine out of ten. The solution has a huge customer base. In our organization, 10,000 people are using the solution.
How are customer service and support?
When we often face issues with the service, we contact the support team. The team is really good. However, support could be improved.
How was the initial setup?
The onboarding process was pretty simple.
What about the implementation team?
We deployed the product two years ago. We took a couple of months to deploy it.
What other advice do I have?
If someone wants to set up a DDoS solution for the first time, they should choose Cloudflare. Overall, I rate the product a nine out of ten.
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Senior Cyber Security Consultant at ATOS
User-friendly solution with an easy initial setup process
Pros and Cons
- "It is a stable solution."
- "Our subscription plan for the solution has a limitation of bot signatures."
What is our primary use case?
We use the solution to protect some of the services. It helps us protect our applications and infrastructure.
What is most valuable?
The solution is user-friendly in terms of graphical interface and is easy to deploy.
What needs improvement?
Our subscription plan for the solution has a limitation of bot signatures.
What do I think about the stability of the solution?
It is a stable solution.
How was the initial setup?
It is an in-built tool in our Cloudflare infrastructure, and we use it as a DNS service. Thus, we don't necessarily have to configure it. We add it as a service, and it works great for us.
What other advice do I have?
The solution is excellent. It helped us a lot with DDoS issues. I rate it a ten out of ten.
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Buyer's Guide
Download our free Cloudflare One Report and get advice and tips from experienced pros
sharing their opinions.
Updated: February 2025
Product Categories
Secure Access Service Edge (SASE) Email Security Secure Web Gateways (SWG) Data Loss Prevention (DLP) Cloud Access Security Brokers (CASB) Distributed Denial-of-Service (DDoS) Protection Access Management Bot Management ZTNA as a Service ZTNA Remote Browser Isolation (RBI)Popular Comparisons
Cisco Umbrella
Prisma Access by Palo Alto Networks
Zscaler Zero Trust Exchange Platform
Lookout
Netskope
Cato SASE Cloud Platform
VMware VeloCloud SD-WAN
Check Point Harmony SASE (formerly Perimeter 81)
Skyhigh Security
Appgate SDP
FortiSASE
Twingate
Prisma SD-WAN
Axis Security
Buyer's Guide
Download our free Cloudflare One Report and get advice and tips from experienced pros
sharing their opinions.
Quick Links
Learn More: Questions:
- What security features does Cloudflare Bot Management provide to protect against malicious bot traffic?
- What are fullz and how can Cloudflare Bot Management help our company mitigate their misuse?
- Why is Cloudflare deprecating Railgun if it's their own product?
- What is the difference between point solutions (SD-WAN, NGFW, SWG, VPN) and SASE?
- What questions do you need to ask when choosing a Secure Access Service Edge (SASE) solution?
- When evaluating Secure Access Service Edge (SASE), what aspect do you think is the most important to look for?
- Has anyone ever heard of secureaccess.com?
- What is the difference between SASE and SD-WAN?
- What is the difference between SASE and CASB?
- What SASE solution does your company use?