Free
For personal or hobby projects that aren't business-critical.
$0per month
Pricing guide
Cloudflare pricing and plans
Cloudflare's Free plan costs $0. Pro costs $20 a month billed annually or $25 billed monthly, and Business costs $200 a month billed annually or $250 billed monthly. Enterprise is a custom contract billed annually. Zero Trust is free for up to 50 users, then $7 per user per month or a custom contract.
By VigilbasePublished
Prices checked 18 October 2026 from cloudflare.com/plans. Cloudflare changes its plans and prices, so confirm them with Cloudflare before you buy.
Cloudflare plans: Free, Pro, Business and Enterprise
Cloudflare calls these domain plans: each covers DNS, the CDN, DDoS protection and the WAF. Pro and Business cost less per month when billed annually. Cloudflare's pricing page labels the fourth plan Contract and links it to its Enterprise packages.
Pro
For professional websites that aren't business-critical.
$20a month billed annually, or $25 billed monthly
Business
For small businesses operating online.
$200a month billed annually, or $250 billed monthly
Enterprise
For mission-critical applications that are core to your business.
Custombilled annually; listed as Contract on Cloudflare's pricing page
| Feature | Free | Pro | Business | Enterprise |
|---|---|---|---|---|
| DDoS protection | Unmetered | Unmetered | Unmetered | Unmetered |
| WAF managed rules | Free Managed Ruleset | Adds the Cloudflare Managed Ruleset and OWASP Core Ruleset | Cloudflare Managed Ruleset and OWASP Core Ruleset | Adds Sensitive Data Detection |
| WAF custom rules | 5 | 20 | 100, with regex | 1,000, with regex |
| Rate limiting rules | 1 | 2 | 5 | Needs application security on the contract; the number of rules is set by the contract |
| Bot protection | Bot Fight Mode: simple bots | Super Bot Fight Mode: easy-to-detect bots | Super Bot Fight Mode: sophisticated bots, with basic bot analytics | Bot Management, when added to the contract: all bots, anomaly detection and advanced bot analytics |
| Support | Community forums and documentation | Tickets and community forums | Tickets, chat and community forums | Tickets, chat and phone, 24x7x365 |
| Uptime SLA | Not included | Not included | 100%, with 1x service credits | 100%, with 10x service credits on Standard success or 25x on Premium |
| PCI DSS 4.0 compliance | Not included | Not included | Included | Included |
| Network prioritization | Not included | Not included | Not included | Included |
| API Shield, China Network and Magic Transit | Not included | Not included | Not included | Priced in the contract |
WAF, rate limiting and bot rows come from Cloudflare's developer documentation; the other rows come from cloudflare.com/plans. Every plan also includes DNS, the CDN, Universal SSL, single sign-on and role-based account control.
Add-ons Cloudflare prices separately
Cloudflare lists these paid add-ons on its pricing page. On Enterprise, Cloudflare's account team adds products such as Bot Management to the contract, and its Externa page lists more add-ons, including Cache Reserve, Log Explorer, China Network, Advanced Waiting Room and the Data Localization Suite.
Smart Shield + Argo Smart Routing
From $5 a month
Optimized routes across Cloudflare's network, including Smart Routing and Tiered Caching.
Load Balancing
From $5 a month
Local and global load balancing, geographic routing, health checks and failover.
Advanced Certificate Manager
Costs $10 a month
Flexible certificate issuance and management for your domains.
Log Explorer
Costs $1 per GB ingested; the first 10 GB are free
Log retention and investigation of security and performance issues.
Client-Side Security
Costs $0.099 per 1,000 requests
Defends against attacks on the JavaScript your pages load.
Cache Reserve
Usage-based
Persistent cache storage that reduces requests to your origin.
Automatic Platform Optimization
Costs $5 a month on Free; included with Pro, Business and Enterprise
Caching and optimization for WordPress sites.
Cloudflare Zero Trust and Cloudflare One pricing
Cloudflare prices its Zero Trust and SASE services, part of Cloudflare One, per user. Every tier includes Zero Trust network access, the secure web gateway, digital experience monitoring and network flow monitoring.
Free
Teams under 50 users or enterprise proof-of-concept tests.
$0forever
- Up to 50 users
- Community forums and Discord
- Logs kept for up to 24 hours
Pay-as-you-go
Teams over 50 solving narrow SSE use cases without enterprise support.
$7per user per month
- No user limit
- Chat and ticket support
- Logs kept for up to 30 days
Contract
Organizations building toward full-featured SASE or workspace security.
Customannual price per user
- No user limit
- Phone, chat and ticket support, with professional services as an add-on
- Logs kept for up to 6 months, with Logpush to a SIEM or cloud storage
Advanced features change by tier. CASB covers up to two read-only API integrations on Free and Pay-as-you-go, and unlimited out-of-band integrations as a Contract add-on. Data Loss Prevention has limited predefined profiles until you buy the full-featured Contract add-on. Remote Browser Isolation is an add-on from Pay-as-you-go, and Email Security and Network Services for SASE are Contract add-ons.
For full SASE, Cloudflare sells Interna packages through its sales team. It prices Interna per seat, with no bandwidth charges for devices running its agent, and every Externa package includes 50 Interna Essentials seats.
How Cloudflare Enterprise pricing works
Cloudflare does not publish Enterprise prices. Its pricing page lists the plan as Contract, with a custom price billed annually, and sends buyers to its sales team. Treat any Enterprise figure that is not in a written quote as an estimate.
What Cloudflare says goes into an Enterprise contract
Packages
Externa packages protect public-facing systems. Interna packages protect internal systems and are priced per seat.
Traffic
For Externa, Cloudflare says you pay for clean traffic, not for the malicious requests it blocks, and that it does not charge per WAF rule or for origin fetches.
Products added to the contract
Bot Management, API Shield, AI Security for Apps, China Network and the Data Localization Suite are added to the contract rather than listed at a public price.
Support
The Standard success package is included with a Cloudflare contract. Premium success is an optional upgrade with faster response times.
Services
Professional services (Quickstart, Migration and Expert), technical account management, a SOC service and incident response are sold in addition.
Term
Enterprise contracts are billed annually.
What the Enterprise SLA commits to
Cloudflare's Enterprise Customer Support and Service Level Agreement, with a policy date of 1 April 2026, sets these terms:
- A 100% uptime commitment: the service will serve your content globally 100% of the time.
- Service credits of 10x on the Standard success package or 25x on Premium, according to Cloudflare's pricing page. Credits are the sole remedy and are capped at six months of fees in an annual billing period.
- Emergency phone support at any hour for P1 issues, and online support at any hour for everything else.
- With Cloudflare's Technical Account Management service, an initial response to P1 issues within 30 minutes.
- Support does not include code development or debugging your websites or software.
Business also carries a 100% uptime SLA, with 1x service credits. Free and Pro have no uptime SLA.
| Severity | Standard success | Premium success |
|---|---|---|
| P1 | Under 2 hours | Under 1 hour |
| P2 | Under 4 hours | Under 2 hours |
| P3 | Under 48 hours | Under 24 hours |
| P4 | Under 48 hours | Under 24 hours |
Under that agreement, you manage and configure the service in Cloudflare's dashboard yourself. Cloudflare's support answers tickets; someone on your side still has to tune WAF and bot rules, plan changes and respond to incidents. That is the work a partner can take on.
Cloudflare Enterprise explained →Vigilbase prices, separate from Cloudflare's
Buying Cloudflare Enterprise through Vigilbase
Vigilbase is a Cloudflare Registered Partner. We sell the Cloudflare Enterprise licence, deploy the agreed controls and run the account after launch. The licence and the operation are scoped together, and quotes show a fixed monthly operating fee plus the licence.
Core
Governance, guidance, structured change management and business-hours support.
Managed operations start at
$3,500per month
Priority
24/7 operations, active mitigation and defined incident SLAs.
Managed operations start at
$7,500per month
Critical
Immediate escalation, senior incident leadership and mission-critical edge defence.
Managed operations start at
$15,000per month
These are Vigilbase's operating fees, not Cloudflare prices. They do not include the Cloudflare licence.
Compare Core, Priority and CriticalCoverage and incident response commitmentsCloudflare Enterprise with Vigilbase
For smaller sites: Vigilbase Shield
Vigilbase Shield is a pre-Enterprise plan on Cloudflare at a monthly cost, with managed WAF rules, DDoS protection, Super Bot Fight Mode and support through Vigilbase One. Choose 1 TB, 5 TB or 10 TB of included monthly traffic; the Shield page shows current prices.
See Shield plans and prices →Cloudflare in Vigilbase OS
Vigilbase OS, the cybersecurity operating system, has a native Cloudflare integration. Cloudflare events sit alongside your other security tools, and the Vigil agent can take live Cloudflare response actions within the authority you set.
Get started with Vigilbase OS →Which Cloudflare plan do you need?
Start from what you need to protect and who will run it. Cloudflare's own plan descriptions are the starting point.
A personal or hobby site
Start on Free. It includes DNS, the CDN, unmetered DDoS protection, Universal SSL and the Free Managed Ruleset.
A professional site that is not business-critical
Pro adds the Cloudflare Managed Ruleset and OWASP Core Ruleset, Super Bot Fight Mode and ticket support.
A business that sells or operates online
Business adds the 100% uptime SLA, PCI DSS 4.0 compliance, regex in WAF custom rules and chat support.
Mission-critical applications
Enterprise adds round-the-clock phone support, network prioritization, higher service credits and contract products such as Bot Management and API Shield. It needs a quote.
Employees and internal applications
Look at Zero Trust: free for up to 50 users, $7 per user per month on Pay-as-you-go, or a contract for full SASE.
Someone to run it
Cloudflare's plans include the platform and Cloudflare's support, not an operator for your account. Vigilbase Shield covers smaller sites; Managed Cloudflare covers Enterprise accounts.
Cloudflare pricing questions
How much does Cloudflare cost per month?
Free costs $0. Pro costs $20 a month billed annually or $25 billed monthly. Business costs $200 a month billed annually or $250 billed monthly. Enterprise is a custom contract billed annually.Cloudflare Enterprise licensing explainedCloudflare Checkup and report options
How much does Cloudflare Enterprise cost?
Cloudflare does not publish Enterprise prices. Each contract is quoted from the packages, products, support package and services you choose, and is billed annually.When Vigilbase supplies Enterprise, the quote shows the Cloudflare licence plus a fixed monthly operating fee for running the account. Public operating prices start at $3,500 a month for Core.Cloudflare Enterprise licensing explainedCompare Core, Priority and Critical
Is the Cloudflare WAF included on every plan?
Yes. Every plan includes the WAF and the Free Managed Ruleset. Pro and above add the Cloudflare Managed Ruleset and OWASP Core Ruleset, and the number of custom rules rises from 5 on Free to 1,000 on Enterprise.How a web application firewall worksManaged WAF operations and change control
Does Cloudflare charge for DDoS attack traffic?
Every plan lists unmetered DDoS protection. For its Externa Enterprise packages, Cloudflare says you pay for clean traffic, not for the malicious requests it blocks.Understand DDoS attacksRespond to a DDoS attack
How much does Cloudflare Zero Trust cost per user?
Zero Trust is free for up to 50 users. Pay-as-you-go costs $7 per user per month with no user limit. Contract plans have a custom annual price per user.Internal access and Zero TrustZero Trust principles and access controls
How much does Cloudflare Bot Management cost?
Cloudflare does not list a public price. Bot Management for Enterprise is added to Enterprise plans by Cloudflare's account team. Free includes Bot Fight Mode, and Pro and Business include Super Bot Fight Mode.Application and API protectionCloudflare Enterprise licensing explained
What uptime SLA does Cloudflare offer?
Business and Enterprise carry a 100% uptime SLA. Business earns 1x service credits; Enterprise earns 10x on the Standard success package or 25x on Premium. Free and Pro have no uptime SLA.Coverage and incident response commitmentsCloudflare Enterprise licensing explained
Do Vigilbase's prices include the Cloudflare licence?
No. Core, Priority and Critical are Vigilbase's starting operating fees for running the account. Quotes show a fixed monthly operating fee plus the Cloudflare licence.Compare Core, Priority and CriticalWhat Managed Cloudflare includes
Sources
Prices checked 18 October 2026 from cloudflare.com/plans. Cloudflare changes its plans and prices, so confirm them with Cloudflare before you buy.
- Cloudflare: Plans and pricing
- Cloudflare: Network and CDN pricing guide
- Cloudflare: SASE and Zero Trust pricing guide
- Cloudflare: Externa packages
- Cloudflare: Interna packages
- Cloudflare: Enterprise Customer Support and Service Level Agreement
- Cloudflare: Business Service Level Agreement
- Cloudflare: Success packages
- Cloudflare docs: WAF managed rules by plan
- Cloudflare docs: WAF custom rules by plan
- Cloudflare docs: Rate limiting rules by plan
- Cloudflare docs: Bot protection by plan
Price Cloudflare Enterprise with the operator included.
Tell us what you run and what needs to improve. We will scope the licence and the operation around your environment.
Under attack? Get emergency onboarding help