Cloudflare One

The Cloudflare Tenant API is a provisioning mechanism to help Channel and Alliance partners set up and manage Cloudflare accounts and services for their customers. The Tenant Platform gives partners per-customer account provisioning and delegated administration, which covers tenant isolation. No evidence found on the pages read of branded portals or white-label templates letting an MSP operate the platform under its own brand.

Native, via the confirmed Argo Smart Routing capability, which dynamically routes traffic across Cloudflare's own network for optimal performance [33]

Instead of backhauling traffic through a central data center or maintaining dedicated MPLS circuits at every site, your traffic routes through the nearest Cloudflare data center where security policies apply inline. The enforcement points are Cloudflare's own data centres, not a third party's infrastructure that Cloudflare resells. The SASE page states Cloudflare delivers full SASE from 300+ cities and the network page states 337 cities and 8 regions.

Choose the location of the data centers where your traffic is inspected. The Data Localization Suite offers regional control over which of Cloudflare's own data centres inspect traffic, which addresses sovereignty of the processing location. That remains region selection inside the shared multi-tenant network. No offer of customer-hosted or physically dedicated PoPs was found on the pages read.

Our backbone is a dedicated network, providing guaranteed network capacity and consistent latency between various locations. The same dated vendor post states the backbone comprises long-distance fibre optic cables connecting Cloudflare data centres across North America, South America, Europe and Asia, so it is intercontinental rather than national. Evidence is from a 2021 post; the SASE reference architecture read in 2026 does not use the word backbone.

backed by dependable SLAs, 100% uptime, and reliable service you can trust. Availability and 24/7/365 support commitments are published for Enterprise plans. The underlying contractual SLA document itself was not reachable, as two candidate SLA URLs returned 404, so change handling and latency, jitter and loss commitments could not be verified.

Cloudflare One converges core SASE services such as zero trust network access (ZTNA), secure web gateway (SWG), cloud access security broker (CASB), network-as-a-service (NaaS), and firewall-as-a-service (FWaaS). Firewall, secure web gateway and DLP are converged into Cloudflare's own platform and delivered from its network rather than as a separate appliance or a resold third-party stack. Gateway documentation confirms packet-level network policies and full inspection of web request content. Intrusion prevention specifically was not confirmed by a verbatim sentence on the pages read.

Native, well-evidenced via the confirmed, massive-scale, continuous global threat-telemetry operation (47.1 million DDoS attacks mitigated in 2025, 230 billion threats blocked daily per Cloudflare's own reporting) [33] [10] Not confirmed

Award-winning, global, 24/7/365 email and emergency phone support (for Enterprise plans). Round the clock vendor support is published, but no statement was found describing a NOC and SOC proactively monitoring the customer service, owning incidents through to root cause analysis, or running structured service reviews and change governance.