NNetify

SASE / Zero Trust / network services

Cloudflare One

Cloudflare sources evidence WAN any-to-any connectivity, Magic WAN Connector and Cloudflare One integrated SASE positioning.

Contact Cloudflare One via Netify ↗www.cloudflare.com ↗Cloudflare One alternativesLast verified 2026-07-29

Netify profile

Cloudflare One in depth

Platform and architecture

Cloudflare One delivers SASE from the same anycast edge that runs Cloudflare's CDN: 330+ cities, every service in every location, with traffic attracted to the nearest PoP and policy applied there. Connectivity options include the WARP agent, Magic WAN for site tunnels and Cloudflare Network Interconnect. There are no Cloudflare branch appliances; Magic WAN partners and standard IPsec/GRE handle site onboarding.

Security and SASE capability

Gateway (SWG), Access (ZTNA), CASB, DLP, email security and browser isolation compose the SSE layer, tightly integrated with Cloudflare's DDoS and application security heritage. Access is notably easy to adopt app by app. Depth in enterprise DLP and CASB trails the specialist leaders, while network-adjacent security (DDoS, WAF, bot management) is far beyond what SASE rivals carry.

Service, support and channel

Self-serve to enterprise sales motions, with UK partners growing; managed offers exist though carrier-style wrap is thinner than for appliance vendors. Deployment is fast and developer-friendly with excellent documentation. Enterprise support runs 24x7 with named contacts on larger contracts.

Commercials and the Netify verdict

Per-user Zero Trust plans with transparent public entry pricing and contract pricing at enterprise; Magic WAN priced separately. The Netify verdict: shortlist Cloudflare One when you already trust Cloudflare for performance or security, when fast app-by-app ZTNA adoption appeals, or when global edge reach per pound matters. Heavy CASB/DLP programmes and appliance-led branch estates fit other platforms better.

Evaluate Cloudflare One properly

An AI can summarise Cloudflare One. It cannot gather structured, evidence-backed responses from Cloudflare One and its closest competitors. Describe your requirement once at netify.co.uk and Cloudflare One arrives pinned for an evidence-graded evaluation: the market takes position around your words, one signature publishes an anonymous notice free, and matched vendors respond side by side with pricing private to you.

AI assistants can score Cloudflare One against a requirements list directly with the score_vendor_fit tool on the Netify connector, and build the same position with workspace_ingest.

Questions

Cloudflare One: common buyer questions

Can Cloudflare One replace my VPN quickly?

Yes, that is its strongest entry point: Cloudflare Access publishes internal apps behind zero trust authentication app by app, often within days, without re-architecting the network first. Full SASE adoption can then proceed incrementally.

How do sites connect without Cloudflare appliances?

Magic WAN terminates standard IPsec or GRE tunnels from existing routers, SD-WAN edges or firewalls, and Cloudflare Network Interconnect offers private peering. Cloudflare partners with SD-WAN vendors rather than shipping edges.

Is Cloudflare One enterprise-ready for compliance-heavy estates?

Certifications and regional controls have matured substantially, and the edge offers strong data localisation suites. Deep DLP and CASB programmes should still benchmark against Netskope and Zscaler before committing.

Key differentiators

  • Cloudflare global edge network provides one of the largest PoP footprints in the category for SASE traffic.
  • Strong Zero Trust and SWG capability inheritance from the wider Cloudflare security platform.
  • Magic WAN Connector provides simplified branch connectivity into the Cloudflare One platform.

Best fit for

  • Buyers already using Cloudflare for DDoS protection, CDN or Zero Trust who want to extend into WAN.
  • Organisations prioritising global PoP coverage and edge performance for SaaS access.
  • Mid-market buyers attracted to Cloudflare One pricing transparency for Zero Trust user tiers.

Watch-outs

  • SD-WAN capabilities (path selection, QoS, packet loss remediation) have limited public evidence compared to SD-WAN-first vendors.
  • Less mature for very large branch estates with complex underlay requirements.
  • Managed and co-managed service models are partner-led; this is primarily a self-service platform.

40 features, 6 categories

Capability matrix

Each capability is graded against public source evidence. Hover any status grade for a definition. Where evidence is limited, the grade reflects that uncertainty rather than assuming the capability is present.

Service delivery and operating model

#CapabilityStatusDefinition
F01Fully managed serviceNot primaryProvider designs, deploys, monitors, changes, supports and reports on the service.
F02DIY / self-managed modelYesCustomer operates SD-WAN controller, policies, updates and incident response.
F03Co-managed servicePartialProvider runs platform/support while customer retains selected policy or change rights.
F04Multi-tenant MSP / white-label supportPartialTenant isolation, delegated administration, branded portals, templates and service-provider scale.
F05Professional services and migration supportYesDiscovery, design, pilot, staging, migration runbooks, rollback and training.
F06Last-mile circuit managementPartner / integratedSourcing, monitoring and support for broadband, DIA, LTE/5G, MPLS and cross-connects.
F07Lifecycle managementUnknownHardware replacement, firmware upgrades, patching, renewals and EoL planning.
F08Flexible commercial modelYesPer-site, per-bandwidth, per-user, per-device, consumption, NaaS or bundled pricing.

Network architecture and transport

#CapabilityStatusDefinition
F09Encrypted overlay fabricPartialSecure tunnels across broadband, DIA, MPLS, LTE/5G, satellite or private WAN.
F10Dynamic path selectionPartialReal-time routing based on latency, jitter, packet loss, brownouts, MOS and policy.
F11Active-active link utilisationPartialUse multiple links concurrently rather than passive backup only.
F12Application-aware routingPartialIdentification and routing for SaaS, UCaaS, ERP and custom applications.
F13QoS and traffic shapingPartialPer-application and per-class prioritisation, reservation and policing.
F14Packet loss remediationPartialFEC, packet duplication, jitter buffering, TCP optimisation and WAN optimisation.
F15Local internet breakoutPartialSecure direct internet access from branch sites.
F16MPLS coexistence and migrationPartialHybrid MPLS/internet/cellular during transition.
F17Cellular and 5G supportUnknownIntegrated/external modem, SIM management, signal monitoring and failover.
F18Cloud on-rampYesAutomated/simplified connectivity to AWS, Azure, Google Cloud, Oracle, Equinix, Megaport and SaaS.

Gateway, PoP and backbone design

#CapabilityStatusDefinition
F19Public cloud gatewaysYesVendor-operated gateways/PoPs for SaaS optimisation, remote access or security enforcement.
F20Private PoPs / dedicated PoPsPartialCustomer-hosted, dedicated or sovereign PoP options.
F21Private global backboneYesVendor-owned or controlled backbone between PoPs.
F22Regional breakout and data residencyYesPin traffic to countries, regions or approved inspection locations.
F23Multi-cloud transit fabricYesBranch-to-cloud, cloud-to-cloud and user-to-cloud connectivity under common policy.
F24Flexible edge form factorsPartialPhysical, virtual, cloud marketplace, container or uCPE.
F25High availability designPartialDual appliances, dual circuits, dual power, HA clustering and gateway redundancy.
F26SLA-backed service fabricYesSLA for uptime, response, change handling and possibly latency/jitter/loss.

Security and SASE capability

#CapabilityStatusDefinition
F27Integrated next-generation firewallYesStateful firewall, app control, IPS/IDS, malware inspection and URL filtering.
F28Full SASE platformYesSD-WAN plus SWG, CASB, ZTNA, FWaaS, DLP, RBI, DNS security and threat prevention.
F29SSE ecosystem integrationYesInteroperation with Zscaler, Netskope, Palo Alto Prisma Access, Cisco Secure Access, Cloudflare etc.
F30Zero Trust Network AccessYesIdentity and posture-based access to private applications.
F31Secure web gatewayYesURL filtering, SSL inspection, malware scanning and acceptable-use controls.
F32CASB capabilityYesSaaS discovery, sanctioned/unsanctioned app control and SaaS policy enforcement.
F33Data loss preventionYesData classification, inspection, blocking, alerting and exception workflow.
F34Remote user accessYesClient or clientless access for remote workers, contractors and mobile users.
F35SOC/SIEM/SOAR integrationYesSyslog, APIs, event export, threat intelligence and workflow integration.

Operations, assurance and automation

#CapabilityStatusDefinition
F36Centralised orchestrationYesTemplates, intent-based policy, zero-touch provisioning and configuration compliance.
F37Customer portal and RBACYesReal-time status, role-based access, reporting, tickets and change requests.
F38Observability and digital experience monitoringYesApp experience, user experience, device health, SaaS telemetry and path analytics.
F39APIs and automationYesREST APIs, Terraform, webhooks, event streaming and ITSM integration.
F40Managed service assurancePartial24/7 NOC/SOC, proactive monitoring, incident ownership, RCA, service reviews and change governance.

Commercial

Cost model and pricing visibility

Public pricing visibility

Quote-based. No complete public enterprise price was found in reviewed sources.

Cost model

Quote-based enterprise pricing; some Zero Trust user tiers public, Magic WAN enterprise requires quote.

Evidence

Sources and exclusions

38 facts about Cloudflare One were re-verified on 2026-07-29 against named sources, each carrying a sentence quoted from the source and confirmed present on that page. 38 sources were used. 7 more were read and rejected, and are listed below with the reason.

Sourced facts for Cloudflare One, each with its grade, the source it rests on and the sentence quoted from that source.
FactFindingEvidenceQuoted from the source
Fully managed serviceNot primary[10] [6] [1]"Cloudflare authorized service delivery partners have a strong track record of delivering excellent customer experiences and in-depth knowledge of our services to customers."
Co-managed servicePartial[10]"a Cloudflare solution SME works alongside your team to guide configuration with proven best practices"
Multi-tenant MSP / white-label supportPartial[9] [6] [21]"The Cloudflare Tenant API is a provisioning mechanism to help Channel and Alliance partners set up and manage Cloudflare accounts and services for their customers."
Professional services and migration supportYes[10]"For deployments with complex or unique requirements, Cloudflare architects and consultants are available to help you manage your implementation end-to-end."
Lifecycle managementNot found[8] [20]Not found in public sources reviewed. The Cloudflare One Appliance documentation states it is managed remotely through the dashboard, but no statement was found covering firmware upgrades, patching, hardware replacement or RMA, renewals or end-of-life planning as part of the service. Pages read: the connector documentation index and the maintenance documentation index; the connector hardware reference URL returned 404.
Cellular and 5G supportNot found[8] [3] [20]Not found in public sources reviewed. No mention of 4G, 5G, LTE, modems or SIM management appears on the Cloudflare WAN product page, the Cloudflare One Appliance documentation or its maintenance index. The connector hardware specification URL returned 404 and web search was unavailable to locate an alternative page.
Public cloud gatewaysYes[17] [1] [2]"Instead of backhauling traffic through a central data center or maintaining dedicated MPLS circuits at every site, your traffic routes through the nearest Cloudflare data center where security policies apply inline."
Private PoPs / dedicated PoPsPartial[13]"Choose the location of the data centers where your traffic is inspected."
Private global backboneYes[18] [17]"Our backbone is a dedicated network, providing guaranteed network capacity and consistent latency between various locations."
SLA-backed service fabricYes[16]"backed by dependable SLAs, 100% uptime, and reliable service you can trust."
Integrated next-generation firewallYes[1] [11] [7]"Cloudflare One converges core SASE services such as zero trust network access (ZTNA), secure web gateway (SWG), cloud access security broker (CASB), network-as-a-service (NaaS), and firewall-as-a-service (FWaaS)."
Managed service assurancePartial[16] [10]"Award-winning, global, 24/7/365 email and emergency phone support (for Enterprise plans)."
delivery modeltechnology_vendor[1] [10]"Cloudflare One converges core SASE services such as zero trust network access (ZTNA), secure web gateway (SWG), cloud access security broker (CASB), network-as-a-service (NaaS), and firewall-as-a-service (FWaaS)."
underlay ownershipmixed[18] [17]"We began building out our global backbone in 2018. It comprises a network of long-distance fiber optic cables connecting various Cloudflare data centers across North America, South America, Europe, and Asia."
sse layer ownershipnative[1] [11] [5] [15]"Cloudflare One converges core SASE services such as zero trust network access (ZTNA), secure web gateway (SWG), cloud access security broker (CASB), network-as-a-service (NaaS), and firewall-as-a-service (FWaaS)."
regulatory documentationdocumented[19] [4] [13]"Explore our posture around ISO 27001, ISO 27701, PCI DSS, SOC 2 Type II, and others"
pop count300+[1] [2]"Cloudflare delivers full SASE from 300+ cities"
sla availability pct100[16]"backed by dependable SLAs, 100% uptime, and reliable service you can trust."
sectors.financial servicesYes[30] [25]"Cloudflare empowers over 1,700 financial services organizations to deliver secure digital experiences while meeting data sovereignty, regulatory, and resiliency requirements."
sectors.retail ecommerceYes[33] [34]"Retail giant Carrefour replaced five separate security tools, put 400 e-commerce sites behind Cloudflare, and cut incident-resolution time by 75% after deploying the WAF (plus Bot Management)."
sectors.manufacturingYes[36] [35]"Mitsubishi Gas Chemical Company (MGC) is a unique technology-oriented manufacturer producing more than 90% of its products using proprietary technologies."
sectors.energy utilitiesNot found[29] [38] [45]No energy or utilities evidence found. Checked: the solutions index (only four industry pages exist and energy is not one of them), the SASE page logo wall, the Magic WAN customer logo row, the case studies index and an attempted industry filtered case study URL which the site resolves client side and therefore returned unfiltered results. The index states 251 case studies exist but only 12 render server side, so an energy case study may exist and simply be unreachable by this method.
sectors.government public sectorYes[32] [25]"Cloudflare is FedRAMP Moderate Authorized and 'In Process' for High, ensuring secure connectivity for public sector organizations."
sectors.educationPartial[32] [29] [42] [43] [44]"We are committed to helping governments, education institutions, and defense organizations secure and enhance their online presence."
sectors.transport logisticsYes[34] [25]"Japan Airlines"
sectors.professional servicesNot found[29] [25] [34] [38]No professional services evidence found. Checked: the solutions index (no such industry page), the SASE logo wall, the Magic WAN logo row and the case studies index. Logos such as Workday, Asana and Atlassian are software vendors, not professional services firms, and grading the sector from them would be inference rather than evidence.
sectors.hospitality leisureNot found[37] [29] [38]No hospitality or leisure evidence found that meets the bar. The closest candidate read in full was the Kaizen Gaming case study, an Athens based online sports betting technology company, but the page carries no industry metadata and the deployment described is Cloudflare Workers and Durable Objects rather than SASE or SD-WAN, so it was deliberately not used to award a grade. Also checked the solutions index (no hospitality page) and the case studies index.
regions.uk irelandYes[26]"London, GB"
regions.europeYes[26] [36]"Europe — from Reykjavík to Istanbul, every major market covered."
regions.north americaYes[26] [32]"North America — the densest concentration of Cloudflare data centers on the planet."
regions.asia pacificYes[26] [35]"Asia — Tokyo, Singapore, Mumbai, and dozens more across the continent."
regions.middle east africaYes[26]"19 cities across the Middle East — Dubai, Riyadh, Tel Aviv, and more."
regions.latin americaYes[26] [37]"Latin America & the Caribbean — deep presence across Brazil and beyond."
regions.china mainlandPartner / integrated[41] [40] [26]"operated by Cloudflare's partner JD Cloud"
organisation fit.large global enterpriseYes[27] [34] [25] [32]"Organizations building toward full-featured SASE or workspace security."
organisation fit.mid marketYes[27] [34]"Teams over 50 solving narrow SSE use cases without enterprise support."
organisation fit.small businessYes[27] [34]"Teams under 50 users or enterprise proof-of-concept tests."
published pricingdocumented[27] [28] [25]"Teams over 50 solving narrow SSE use cases without enterprise support."

Sources used

  1. [1] Tier 1. Cloudflare One SASE platform Undated. Read 2026-07-29. Vendor product page, undated. Primary source for platform composition and city count.
  2. [2] Tier 1. The Cloudflare global network Undated. Read 2026-07-29. Vendor network page, undated. Source for city and region counts and interconnection count.
  3. [3] Tier 1. Cloudflare WAN (Magic WAN) product page Undated. Read 2026-07-29. Vendor product page. Thin on specifics; no SLA, cellular or PoP detail found.
  4. [4] Tier 1. Cloudflare Trust Hub compliance resources Undated. Read 2026-07-29. Vendor page. Names no frameworks itself; routes users to dashboard downloads.
  5. [5] Tier 1. Cloudflare One docs: Data Loss Prevention Undated. Read 2026-07-29. Vendor technical documentation. Direct product behaviour statements.
  6. [6] Tier 1. Cloudflare partner services page Undated. Read 2026-07-29. Vendor partner page. No MSP, white-label or multi-tenant language found.
  7. [7] Tier 1. Cloudflare Magic Firewall Undated. Read 2026-07-29. Vendor product page. Confirms cloud-delivered layer 3 and 4 filtering; no verbatim IPS or stateful wording found.
  8. [8] Tier 1. Cloudflare One Appliance (Magic WAN Connector) documentation Undated. Read 2026-07-29. Vendor documentation. Confirms remote management; silent on cellular, firmware and RMA.
  9. [9] Tier 1. Cloudflare Tenant Platform documentation Undated. Read 2026-07-29. Vendor documentation. Primary source for partner multi-account provisioning.
  10. [10] Tier 1. Cloudflare Professional Services Undated. Read 2026-07-29. Vendor page. Primary source for advisory, implementation and partner-delivered services.
  11. [11] Tier 1. Cloudflare One docs: Gateway policies Undated. Read 2026-07-29. Vendor documentation. Source for DNS, network, HTTP and egress policy inspection.
  12. [12] Tier 1. Cloudflare Magic Transit Undated. Read 2026-07-29. Vendor product page. Checked for SLA figures; only a time-to-mitigate statement found, no availability percentage.
  13. [13] Tier 1. Cloudflare Data Localization Suite Undated. Read 2026-07-29. Vendor page. Source for region-of-inspection control; no dedicated or customer-hosted PoP offer found.
  14. [14] Tier 1. Cloudflare Argo Smart Routing Undated. Read 2026-07-29. Vendor page. Describes path optimisation but does not itself evidence a private backbone.
  15. [15] Tier 1. Cloudflare reference architecture: SASE Undated. Read 2026-07-29. Vendor reference architecture. Confirms anycast and every-service-everywhere model; the word backbone does not appear.
  16. [16] Tier 1. Cloudflare Enterprise plan Undated. Read 2026-07-29. Vendor plan page. Primary source for the published uptime commitment and support hours.
  17. [17] Tier 1. Cloudflare WAN documentation overview Undated. Read 2026-07-29. Vendor documentation. Source for the traffic on-ramp model and Cloudflare Network Interconnect.
  18. [18] Tier 1. Cloudflare blog: Cloudflare's backbone, a fast lane on a busy Internet highway Published 2021-09-16. Read 2026-07-29. Vendor engineering blog with a publication date. Primary and dated source for backbone ownership.
  19. [19] Tier 1. Cloudflare Trust Hub Undated. Read 2026-07-29. Vendor trust centre. Names the certification set held.
  20. [20] Tier 1. Cloudflare One Appliance maintenance documentation index Undated. Read 2026-07-29. Vendor documentation index only. No firmware, patching or RMA statements on the page read.
  21. [21] Tier 1. Cloudflare partners managed service providers URL Undated. Read 2026-07-29. Resolved to generic partner content with no MSP, white-label or multi-tenant wording.
  22. [25] Tier 1. Cloudflare | The agile SASE platform (Cloudflare One SASE product page) Undated. Read 2026-07-29. Tier 1 supplier page. Primary SASE positioning page named in the brief. Carries the 300+ cities SASE delivery claim, the single global per-seat pricing claim and a large customer logo wall. Logo wall carries no sector labels, so it supports named customers but not sector grading on its own.
  23. [26] Tier 1. Cloudflare | The Cloudflare global network Undated. Read 2026-07-29. Tier 1 supplier page. Best available service delivery evidence: per region city counts plus an enumerated city list including UK and Ireland locations. Two separate fetches of this page returned different Latin America city counts (67 and 66), so the numeric counts are treated as soft.
  24. [27] Tier 1. Cloudflare | Plans and pricing Undated. Read 2026-07-29. Tier 1 supplier page. Only page found that publishes SASE and Zero Trust plan tiers with an audience description and a per user price. Price string formatting differed between fetches, so the audience strings are used as the graded quotes.
  25. [28] Tier 1. Cloudflare | Zero Trust and SASE plans Undated. Read 2026-07-29. Tier 1 supplier page. Confirms that full Cloudflare One SASE packaging is not publicly priced and directs buyers to sales. Useful as a negative: it corroborates that only the entry SSE tier is published.
  26. [29] Tier 1. Cloudflare | Solutions index Undated. Read 2026-07-29. Tier 1 supplier page. Used to enumerate which dedicated industry pages exist. Important negative evidence: only four industry pages are published (financial services, healthcare, public sector, retail).
  27. [30] Tier 1. Cloudflare for Financial Services Undated. Read 2026-07-29. Tier 1 supplier page. Dedicated industry page with a quantified customer count claim. Vendor self reported figure, not independently audited.
  28. [31] Tier 1. Cloudflare for Healthcare - Secure Access to Medical Systems Undated. Read 2026-07-29. Tier 1 supplier page. Dedicated industry page with SASE specific healthcare language. Weaker than the other industry pages: no named healthcare customer, no healthcare case study and no explicit HIPAA accreditation statement found on it.
  29. [32] Tier 1. Cloudflare for Public Sector - Enhance Cyber Resilience Undated. Read 2026-07-29. Tier 1 supplier page. Strongest sector page found: states a named accreditation status (FedRAMP), names US federal agencies and names a public research laboratory. Also the only place education is mentioned.
  30. [33] Tier 1. Cloudflare for Retail Undated. Read 2026-07-29. Tier 1 supplier page. Dedicated industry page carrying a named retail customer with quantified outcomes. Note the named deployment is application security, not SASE.
  31. [34] Tier 1. Cloudflare WAN (Magic WAN) product page Undated. Read 2026-07-29. Tier 1 supplier page. The SD-WAN side of the portfolio. Carries organisation size targeting language and a customer logo row including transport and logistics operators. Logo names are not accompanied by case study detail on this page.
  32. [35] Tier 1. Cloudflare case study: Mitsubishi Gas Chemical Undated. Read 2026-07-29. Tier 1 supplier case study. Named manufacturing customer deploying Zero Trust, with an Asia Pacific region tag. Directly relevant to the SASE grading.
  33. [36] Tier 1. Cloudflare case study: Anadolu Efes Undated. Read 2026-07-29. Tier 1 supplier case study. Named manufacturer (brewing) explicitly deploying Cloudflare One, ZTNA, Magic WAN and Secure Web Gateway. The single best SASE plus SD-WAN sector case study found.
  34. [37] Tier 1. Cloudflare case study: Kaizen Gaming Undated. Read 2026-07-29. Tier 1 supplier case study. Read and considered for hospitality and leisure. Not used to award a grade: the page carries no industry metadata and the deployment is Workers and Durable Objects, not SASE or SD-WAN.
  35. [38] Tier 1. Cloudflare case studies index Undated. Read 2026-07-29. Tier 1 supplier index. States 251 case studies exist but server renders only 12. Industry filtering is client side, so the full sector distribution could not be enumerated. This is a real coverage limitation on this assessment.
  36. [39] Tier 1. Cloudflare customers page Undated. Read 2026-07-29. Tier 1 supplier page. Redirects to the same 12 rendered case studies as the index with no industry groupings. Added no sector evidence beyond source 14.
  37. [40] Tier 1. Cloudflare China Network Undated. Read 2026-07-29. Tier 1 supplier page. Confirms mainland China is delivered with in country partners and mentions Zero Trust among the services. Does not name the partner or state licensing on this page.
  38. [41] Tier 1. Cloudflare China Network (developer documentation) Undated. Read 2026-07-29. Tier 1 supplier documentation. Names the operating partner (JD Cloud), states the ICP filing requirement and explicitly warns that not all products are available. More specific and more reliable than the marketing page at source 16.

Sources found and not used

These were read and rejected as evidence. They are listed so the record can be audited rather than taken on trust, and because what a comparison refuses to rely on says as much as what it cites.

  1. [22] Cloudflare One SLA URL attempted. https://www.cloudflare.com/cloudflare-one-sla/ Not used as evidence. URL returned HTTP 404, so no page content existed to grade from.
  2. [23] Cloudflare service level agreement URL attempted. https://www.cloudflare.com/service-level-agreement/ Not used as evidence. URL returned HTTP 404, so the contractual SLA document could not be read.
  3. [24] Cloudflare connector hardware reference URL attempted. https://developers.cloudflare.com/magic-wan/reference/connector-hardware/ Not used as evidence. URL returned HTTP 404, so cellular and modem specifications could not be checked here.
  4. [42] Cloudflare education landing page (attempted). https://www.cloudflare.com/lp/education/ Not used as evidence: the URL returned HTTP 404. Attempted to find a dedicated education page to test whether education deserved better than a list mention. Its absence supports the partial grade.
  5. [43] Cloudflare Project Cybersafe Schools landing page (attempted). https://www.cloudflare.com/lp/project-cybersafe-schools/ Not used as evidence: the URL returned HTTP 404. Attempted to locate a schools specific Zero Trust programme page. Could not be verified in this task, so no education grade rests on it.
  6. [44] Cloudflare Cybersafe Schools (attempted alternative URL). https://www.cloudflare.com/cybersafeschools/ Not used as evidence: the URL returned HTTP 404. Second attempt at the same schools programme, also unverifiable.
  7. [45] Cloudflare case studies filtered by industry (attempted). https://www.cloudflare.com/case-studies/?industry=Energy%20%26%20Utilities Not used as evidence: the industry filter is applied client side, so the server returned the same unfiltered 12 case studies. No energy or utilities case study could be confirmed or ruled out by this route.

Claims that disagree

Where two sources conflict, both are recorded rather than one being chosen quietly. Confirm these directly with the vendor.

  • pop count. [1] Cloudflare delivers full SASE from 300+ cities [2] 337 cities · 8 regions

Verification notes

Re-verified 2026-07-29 against named primary sources. Every graded fact carries a source, a tier and a verbatim quote confirmed present on the cited page by an independent check. Industry, region, organisation-size and pricing evidence was sourced on the same basis. Facts that could not be sourced are published as unknown with the reason. The value_tier field is a Netify assessment of relative cost position, not a supplier claim: most of this market publishes no price. Sources found and rejected are listed at tier 4.

Where next

Continue your Cloudflare One evaluation

AI advisor · Continue from this page · Cloudflare One · evaluated 29 Jul 2026

Describe what you need

Your first sentence is drafted from this page. Edit it, or replace it with your own words: sites, regions, what must not go down.

Drafted from this page. Everything you type stays yours to edit before anything is published.

Cloudflare One arrives pinned; the evaluated market takes position around your words. Nothing runs until you go, and nothing publishes without your signature.

Opens your procurement on Netify

Working with an assistant? Connect netify.co.uk/sase/api/mcp/ and use workspace_ingest with this page as context.

Close peers in the directory

AryakaCato Networks
Score Cloudflare One against your requirementsBack to the evaluated directory