Claim Listing
Claim your listing

Find a provider

Domains

Free tools

Rankings & research

Learn

For providers

AboutContact
ENESJADEFRZH-HANT
Appearance set to Dark
Cloudflare logo

Cloudflare

Cloud WAFUnverified

Cloudflare sits in front of a website at the DNS layer, so every request passes through its global edge network before reaching the origin. That position lets it absorb volumetric DDoS, filter malicious requests with a WAF, and serve cached content from hundreds of locations worldwide, all from one dashboard.

cloudflare.com ↗2009 (USA)
Visit Cloudflare ↗← All security solutionsClaim this listing →
Profile unclaimed

If you represent Cloudflare, claiming is free and adds a Verified badge to this security profile. Start verification →

Category
Cloud WAF
Best for
Any site owner, from free blogs to enterprise
Pricing
Free tier; Pro $20/mo; Business $200/mo; Enterprise custom
Founded
2009 (USA)

HOW IT WORKS

The free tier already includes a CDN, shared SSL, and unmetered DDoS protection, which is why Cloudflare fronts a large share of the web. The managed WAF rulesets and rate limiting move up to the Pro and Business plans, and Enterprise adds custom rules, advanced bot management, and an SLA.

Cloudflare protects the edge, not the server itself: an attacker who finds the origin IP can bypass it, so it pairs best with origin-side protection (a server WAF or locked-down firewall) and origin-IP allowlisting.

Category context: Sits in front of the origin via DNS so attack traffic is filtered in the cloud, never reaching your server. Pairs well with a small origin.

WHAT IT DOES

  • Cloud WAF with managed rulesets (OWASP, Cloudflare, per-app)
  • Global CDN and DNS with unmetered DDoS mitigation (L3/4/7)
  • Bot management and the Turnstile CAPTCHA alternative
  • Free universal SSL and rate limiting

BEST FOR

  • Sites that need DDoS protection and a CDN without managing infrastructure
  • Anyone wanting a capable WAF and SSL on a free tier
  • High-traffic sites layering an edge WAF over origin-level security

ALTERNATIVES TO CLOUDFLARE

Cloud WAF
Sucuri

Cloud-based WAF and managed incident response. Sits in front of the origin via DNS.

Compare →
Cloud WAF
SiteLock

Website malware scanning, automatic removal, and a cloud WAF, widely resold by hosting providers.

Compare →
Cloud WAF
Astra Security

A website firewall and malware scanner combined with continuous vulnerability scanning and pentesting.

Compare →

CLOUDFLARE FAQ

What is Cloudflare?

Cloudflare is a global content delivery network and cloud security platform. Pointed at via DNS, it filters traffic through its edge network before it reaches your server, providing a Web Application Firewall, DDoS mitigation, CDN caching, DNS, and free SSL. It is the most widely deployed service of its kind on the web.

Is Cloudflare free?

Yes, Cloudflare has a genuinely useful free plan that includes the CDN, shared SSL, unmetered DDoS protection, and basic DNS. The managed WAF rulesets, rate limiting, and image optimisation are on the paid Pro ($20/mo) and Business ($200/mo) plans, with custom rules and advanced bot management on Enterprise.

Does Cloudflare replace a server-level firewall?

No. Cloudflare protects at the DNS edge, so an attacker who discovers your origin server IP can hit it directly and bypass Cloudflare. Serious setups keep a host-level firewall or server WAF running underneath and restrict the origin to only accept traffic from Cloudflare IPs.

Editorial independence

HostList is independent. This profile is editorial; HostList accepts no sponsorship, affiliate commission, or paid placement from Cloudflare or any security vendor.