Actual Cloudflare Pricing 2026

How Cloudflare pricing works

Cloudflare uses a hybrid pricing model that combines flat-rate subscription tiers for its core web performance and security products with usage-based pay-as-you-go pricing for its developer platform and add-on services. Most buyers start with a website plan (Free, Pro, Business, or Contract) and layer on developer platform products and paid add-ons as needed.

Website plans: flat-rate tiers

Cloudflare's core offering — CDN, DNS, DDoS protection, SSL, and WAF — is packaged into four subscription tiers priced per domain (zone). You pick a plan per website, not per user or per seat. The Free plan costs nothing. Pro is $20/month billed annually ($25/month billed monthly). Business is $200/month billed annually ($250/month billed monthly). The Contract tier (often called Enterprise) is custom-priced and billed annually.

Annual billing saves you 20% compared to monthly billing on the Pro and Business plans. There is no annual discount to negotiate on the Free plan (it's already free) or the Contract tier (which is always billed annually at a negotiated rate).

Zero Trust / SASE plans: per-user pricing

Cloudflare's Zero Trust and SASE products (Access, Gateway, WARP, DLP) follow a separate pricing structure based on the number of users. A free tier covers up to 50 users. The pay-as-you-go tier costs $7 per user per month with no user cap. The Contract tier is custom-priced per user, billed annually, and includes advanced features like extended log retention, Logpush, and professional services.

Developer platform: usage-based pricing

Cloudflare's developer products — Workers, R2, D1, KV, Durable Objects, Queues, Vectorize, Workers AI, Images, Stream, and others — are priced on a pure usage basis. Each product has a generous free tier (daily or monthly allowance) and then charges per unit of consumption (requests, CPU milliseconds, GB stored, rows read/written, etc.). There is no bundled "developer plan" — you pay only for what each product consumes beyond the free allowance.

Add-ons

Several features are available as paid add-ons on top of any plan: Argo Smart Routing ($5/month + usage), Load Balancing (starting at $5/month), Advanced Certificate Manager ($10/month), Cache Reserve (usage-based), Log Explorer ($1/GB ingested, first 10 GB free), and others. Some add-ons like APO (Automatic Platform Optimization) are free on Pro, Business, and Enterprise but $5/month on the Free plan.

Key cost drivers

The primary cost drivers for Cloudflare depend on which products you use:

• Website plans: Number of domains/zones and the tier selected for each
• Zero Trust / SASE: Number of users
• Developer platform: Request volume, compute time (CPU ms), storage (GB), and data transfer
• Add-ons: Each has its own pricing dimension (per-request, per-GB, flat monthly)

Cloudflare does not charge for bandwidth on its CDN or for DDoS mitigation — both are unmetered across all plans. This is a meaningful differentiator that eliminates surprise overage bills for traffic spikes.

‍

Cloudflare pricing plans

Cloudflare organizes its pricing into three categories: website plans (per domain), Zero Trust / SASE plans (per user), and developer platform products (usage-based). Below is a breakdown of each.

Website plans

Free — $0/month

• Price: Free forever
• Key features: DNS, CDN, unmetered DDoS protection, universal SSL, free managed WAF ruleset, SSO support, role-based account control
• Notable limits: No image optimization, no AMP support, no PCI DSS 4.0 compliance, no uptime SLA, community support only
• Best for: Personal sites, hobby projects, and non-business-critical websites

Pro — $20/month (annual) or $25/month (monthly)

• Price: $20/month billed annually; $25/month billed monthly
• Key features: Everything in Free, plus lossless image optimization, Accelerated Mobile Pages (AMP), enhanced WAF rules
• Notable limits: No PCI DSS compliance, no uptime SLA, no network prioritization
• Best for: Professional websites and side projects that benefit from image optimization and enhanced security but don't require uptime guarantees

Business — $200/month (annual) or $250/month (monthly)

• Price: $200/month billed annually; $250/month billed monthly
• Key features: Everything in Pro, plus PCI DSS 4.0 compliance, 100% uptime SLA with 1x service credits
• Notable limits: No network prioritization, standard support only
• Best for: Small businesses running online stores or applications that require PCI compliance and uptime guarantees

Contract (Enterprise) — Custom pricing

• Price: Custom, billed annually; requires contacting sales
• Key features: Everything in Business, plus 100% uptime SLA with 10x–25x service credits, network prioritization, dedicated support, advanced configurations
• Best for: Mission-critical applications, large organizations, and businesses needing SLAs, priority routing, and dedicated account management

Website plan comparison

Zero Trust / SASE plans

Free — $0 (up to 50 users)

• Price: Free forever for teams under 50 users
• Key features: Core Zero Trust access, DNS filtering, WARP client
• Notable limits: 50-user cap, up to 24 hours log retention, community support only
• Best for: Small teams or proof-of-concept deployments

Pay-as-you-go — $7/user/month

• Price: $7 per user per month
• Key features: No user limit, 100% uptime SLA, up to 30 days log retention, chat and ticket support
• Best for: Teams over 50 users solving specific SSE use cases without needing enterprise-grade support

Contract — Custom pricing per user

• Price: Custom annual price per user; requires contacting sales
• Key features: No user limit, 100% uptime SLA, up to 6 months log retention with Logpush, phone/chat/ticket support, optional professional services
• Best for: Organizations building toward full SASE or comprehensive workspace security

Developer platform products (usage-based)

All developer products include a free tier. Paid usage is billed per unit consumed beyond the free allowance. Key products and their pricing:

Paid add-ons

‍

Cloudflare hidden costs and fees

Cloudflare markets itself on transparent pricing, and it largely delivers. There are no bandwidth charges on the CDN, no per-request fees for DDoS mitigation, and no surprise overage penalties. That said, there are cost dimensions that can catch buyers off guard.

Add-on stacking

Core features like DDoS protection and CDN are included in every plan, but several capabilities that buyers assume are included actually require separate add-ons. Argo Smart Routing ($5/month+), Load Balancing ($5/month+), Advanced Certificate Manager ($10/month), and Log Explorer ($1/GB) are all extra. On a Business plan at $200/month, layering on three or four add-ons can push your effective cost 20–30% higher than the headline price.

Usage-based developer product costs

Developer platform products have generous free tiers, but costs can scale quickly once you exceed them. Workers charges per million requests and per million CPU milliseconds — a high-traffic API endpoint can accumulate meaningful costs. R2 Class A operations ($4.50/million) and D1 row writes ($1.00/million) are the most common sources of unexpected bills. Monitor usage dashboards closely during the first few months after deploying a new product.

Per-zone pricing on website plans

Cloudflare prices website plans per domain/zone. If you run 10 domains on the Business plan, that's $2,000/month — not $200. Businesses managing many domains should evaluate whether an Enterprise contract with a negotiated per-zone rate would be cheaper than stacking individual plans.

Zero Trust per-user scaling

At $7/user/month on pay-as-you-go, a 500-person organization pays $3,500/month ($42,000/year). There's no volume discount on the self-serve tier. Organizations above ~100 users should explore Enterprise pricing where per-seat rates decrease with commitment.

No hidden fees

To be clear: Cloudflare does not charge egress fees on R2 or CDN bandwidth, does not have data transfer charges between its own services, and does not impose minimum commitments on self-serve plans. These are genuine cost advantages compared to AWS, GCP, and Azure equivalents.

‍

How to negotiate lower Cloudflare pricing

Cloudflare's self-serve plans (Free, Pro, Business) have fixed list prices, but the Contract/Enterprise tier is fully negotiable. Even on self-serve plans, there are tactics to reduce your effective cost. Here are six approaches grounded in how Cloudflare's pricing actually works.

1. Commit to annual billing for an immediate 20% discount

Pro drops from $25 to $20/month and Business drops from $250 to $200/month when you switch to annual billing. This is the simplest lever — it's automatic and requires no negotiation. If you're currently paying monthly, switching to annual saves you the equivalent of 2.4 months per year.

2. Consolidate zones to negotiate Enterprise volume pricing

Cloudflare's website plans are priced per domain (zone). If you manage multiple domains across separate Pro or Business plans, the combined cost adds up fast. Moving all zones under a single Enterprise contract gives you leverage to negotiate a lower per-zone rate. Cloudflare's sales team is incentivized to land multi-zone deals, especially when the alternative is you staying on self-serve.

3. Bundle developer platform usage into your Enterprise contract

If you're a significant user of Workers, R2, D1, or other developer platform products, don't pay usage-based rates separately. Roll projected usage into your Enterprise contract negotiation. Committed usage volumes typically get discounted rates compared to pay-as-you-go pricing, and Cloudflare benefits from the revenue predictability.

4. Use competitor pricing as leverage

Cloudflare competes directly with AWS CloudFront, Fastly, Akamai, and Zscaler (for Zero Trust). Before your Enterprise negotiation, get quotes or published pricing from at least one competitor. Cloudflare's sales team is aware of competitive dynamics — showing you have an alternative with a concrete price point strengthens your position, particularly for CDN, WAF, and Zero Trust deals.

5. Time your purchase near fiscal quarter-end

Like most SaaS vendors, Cloudflare's sales team has quarterly targets. Deals closed in the final weeks of a quarter (Cloudflare's fiscal quarters end in March, June, September, and December) are more likely to get concessions. If your timeline is flexible, push your Enterprise negotiation to align with quarter-end.

6. Negotiate Zero Trust seat counts with growth ramps

For Zero Trust / SASE contracts, don't commit to your full projected user count upfront at the highest per-seat rate. Negotiate a ramp: a lower per-seat price for the first year at your current headcount, with pre-agreed rates for expansion tiers. Cloudflare wants to land the SASE deal and is often willing to discount the initial seat commitment if you commit to a multi-year term with built-in growth.

A note on self-serve plans

If you're on the Pro or Business plan and don't need Enterprise features, your main lever is annual billing. Cloudflare does not negotiate custom pricing on self-serve tiers. However, if your total spend across zones and add-ons exceeds roughly $500–$1,000/month, it's worth contacting sales to explore whether an Enterprise contract would actually cost less than your current stack of self-serve plans and add-ons.