[ Cloudfl... Reviews ](https://www.g2.com/products/cloudflare-application-security-and-performance/reviews) [ Cloudfl... Reviews ](https://www.g2.com/products/cloudflare-application-security-and-performance/reviews) # Cloudflare Application Security and Performance Features ##### ## File Management (12) File Type Support Supports all required file types including but not limited to: Google Docs, MS Office, images, videos, etc. Metadata Automatically adds descriptive metadata like file size and upload date, has standard metadata fields like keywords, and allows the definition of custom fields and vocabulary. OCR Scanning Can structure unstructured data through Optical Character Recognition or other automated filing/tagging processes for scanned documents. Versioning Keep track of incrementally changing versions of the same file. Collaboration Multiple users can collaborate on document creation, annotation, and review. Document Assembly Autogenerate documents based on templates and form submission. Form Creation Able to create and manage submittable user forms. Portals and Sites Able to create user portals and sites. Disposition Automatically archive, delete, or revoke access to files that have reached the end of their life cycle. Search Can easily find files via a simple and/or advanced search. Web Interface Ability to access documents via a web interface without a client being installed on a device. Mobile Apps iOS, Android and Windows phone apps provide functionality that enable users to perform the same functions as they would on a PC. Show More ##### ## Workflow (5) Process Automation Specifying a series of conditions and actions can automate internal processes, is customizable to the complexities of organization's needs and easy to set up and execute. Conditions The workflow engine provides relevant and customizable conditions on which to execute rules. Activities Any action a user can perform in the system can be specified as an automated action. Records Management System provides the necessary tools and fuctionality to maintain evidence of business activites and comply with governmental requirements or industry standards. Case Management System provides specialized functionality for bundling structured and unstructured content, automating adaptive, multi-person processes and setting deadlines for open cases. Also, cases can be completed and closed with the associated information stored and auditable. Show More ##### ## Platform (5) Internationalization Allows organizations multi-national organizations to use tool effectively across multiple languages and currencies. Performance and Reliability Software is consistently available (up-time) and allows users to complete tasks quickly because they are not waiting for the software to respond to an action they took. Reporting and Auditing Access pre-built and custom reports to monitor user activity and storage. System of Record Integration Integrates with other systems of record such as CRM, ERP, Outlook, Sharepoint. APIs Enables custom integration to external systems. Show More ##### ## Content (3) Static Content Caching Caching of static content at distributed PoPs for faster load times. Dynamic Content Routing Routing of dynamic content for faster load time of dynamic pages. Cache purging The ability to purge the cache from different edge location PoPs. Show More ##### ## Security (7) SSL Shared SSL certificate. Custom SSL SSL certificate that you provide to the CDN software, or is provided for you and is not shared. Domain Validated SSL Provides Domain Validated SSL certificates. Issuance Speed Issues SSL certificates in a timely manner. Encryption Strength Provides at least 128-bit encryption during SSL session. Extended Validation SSL Provides Extended Validation SSL certificates. Organization Validated SSL Provides Organization Validated SSL certificates. Show More ##### ## Management (7) Dashboard An easy to read, often single page, real-time user interface, showing a graphical presentation of the current status and historical trends of an organization's Key Performance Indicators (KPIs) to enable instantaneous and informed decisions to be made at a glance. Reports Access pre-built and custom reports. Logs Record of data changes taking place in the software. IT Alerting Send summary, update, or actionable alerts to administrators to detail activity. Network Capacity Provide control over traffic. Limits access to suspicious visitors and monitors for traffic spikes to prevent overloads like DDoS attacks. Logging Information on each incident is stored in databases for user reference and analytics. API / Integrations Application Programming Interface - Specification for how the application communicates with other software. API's typically enable integration of data, logic, objects, etc. with other software applications. Show More ##### ## Integration (2) API Application Programming Interface - Specification for how the application communicates with other software. API's typically enable integration of data, logic, objects, etc. with other software applications. CMS Integration Standard integrations for common CMS tools. Show More ##### ## Orchestration (4) Asset Management Lets users group and organize their endpoints to gather threat intelligence on specific technologies. Security Workflow Automation Reduces the need for IT and security professionals to iterate repetitive tasks associated with gathering threat information. Deployment The process in which users integrate their existing security systems and endpoints to the threat intelligence platform. Sandboxing A feature that allows security testing and information gathering to occur in a secure, resource independent environment. Show More ##### ## Information (3) Proactive Alerts Prior to security incidents, the product will alert users when a new, relevant vulnerability or threat is discovered. Malware Detection Provides multiple techniques and information sources to alert users of malware occurrences. Intelligence Reports The ability for users to produce reports outlining detailed and personalized threat information Show More ##### ## Personalization (3) Endpoint Intelligence Analysis for users to examine threat intelligence data specific to their endpoint devices. Security Validation The product has a recurring examination process to update your intelligence reports as new threats emerge. Dynamic/Code Analysis The ability to examine your application, website, or database's code to uncover zero-day vulnerabilities. Show More ##### ## Administration (16) Content Delivery Caching of static or dynamic content at distributed PoPs for faster load times. Dashboard & Reporting Reporting and analytics that report on activity and program effectiveness. Alerting Identifies and alerts administrators of threats, issues, incidents and requests related to website security. Integrations / APIs Application Programming Interface - Specification for how the application communicates with other software. API's typically enable integration of data, logic, objects, etc. with other software applications. Administration Console Provides Administration tools/console that are easy to use and learn for routine maintenance tasks Availability Control Helps administrators ensure applications and information is accessible to users Traffic Management Limits access to suspicious visitors and monitors for traffic spikes to prevent overloads like DDoS attacks. Notifications Self-monitors important metrics and sends notifications to users in-app or through email, text message or otherwise. Warranty Ensures reimbursement in the case of money lost during payment on SSL-secured site. Server License Providers may limit the number of servers to which SSL certificates may be issued. Free Reissues Allows users to reissue SSL information in the case the private key or certificate is lost. Whitelisting The ability to green light a specific Domain or system to bypass the scanning process. Policy Enforcement Abilities to set DNS protection policy control standards including whitelisting, blacklisting, and application access. Incident Reports Produces reports detailing suspicious activity and anomalies related to networks and endpoints. Domain Categorization Allows administrators to group users and devices based on IP, Endpoint, or role. Multi-Network Management Allows centralized administration and control of DNS protection and policies across multiple networks. Show More ##### ## Risk Analysis (3) Blacklist and Whitelist Tracking recipient tagging of domains for blacklists and whitelists. Vulnerability Assessment Analyzes your existing website and network to outline access points that can be easily compromised. Security Auditing Analyzes data associated with web traffic and site performance to provide vulnerability insights and best practices. Show More ##### ## Threat Protection (4) Firewall Protects websites and web applications from a variety of attacks and malware threats. DDoS Protection Protects against distributed denial of service (DDoS) attacks. Malware Detection Discovers website and web application malware. Malware Removal Facilitates the remediation of website and web application malware. Show More ##### ## Protect (6) Login Offers multi-factor authentication to better protect information. Data Injections Protects application's code from data injections Code Ability to protect both byte and binary code Certificate Exploitation Protects applications against man-in-the-middle attacks Advanced Awareness Offers advance detection of potential risks to your application Digital Content Ability to protect a variety of different kinds of data, including digital content Show More ##### ## Execute (3) Environment Gives users a secure enviornment to access and process sensitive data Compliance Ensures applications are in compliance with necessary policies and regulations Cross-Platform Implementation Ability to run on any device that has software needing protection Show More ##### ## Analysis (3) Logging and Reporting Provides required reports to manage business. Provides adequate logging to troubleshoot and support auditing. Issue Tracking Track issues and manage resolutions. Security Monitoring Detects anomalies in functionality, user accessibility, traffic flows, and tampering. Show More ##### ## Controls (3) Application-Layer Controls Gives user configurable rules to control requests, protocols and policies. Traffic Controls Limits access to suspicious visitors and monitors for traffic spikes to prevent overloads like DDoS attacks. Network Controls Lets users provision networks, deliver content, balance loads, and manage traffic. Show More ##### ## Functionality (19) API / Integrations API / Integrations Extensibility Provides the ability to extend the platform to include additional features and functionalities Bot Traffic Control and filter bot traffic. Multi-Domain Support Supports SSL encryption across multiple website domains Browser Support Supports SSL-secured access across required browser types. Site Seal Provides a visual indicator for online privacy status. AI Features Utilizes AI for certificate lifecycle management functions. DNS Lookups Associate information from various domains to identify associated parties and threats. Threat Intelligence Develops domain reputation by gathering contextual information related to web-based threats. Advanced Traffic Filtering Allows DNS routing to resolve requests across HTTP or HTTPs requests and/or covers IPv4 and IPv6 protocols. Certificate Discovery Automatic discovery of certificates directly from Certificate Authorities, network scanning, and deep discovery methods. Expiration Monitoring Monitors and notifies administrators of certificate expiration dates. Automated Certificate Operations Automates certificate deployment, renewals, and revocations. Policy And Role-Based Access Controls Offers granular permissions for assigning certificate owners and other roles. Workflow Offers built-in workflows to assign ownership and management of certificates. Protocol Support Offers industry-standard protocols such as CMP, ACME, and SCEP. Reporting And Search Offers template and custom reports and search functionality. Audit And Enforcement Enforces certificate policies and provides audit trails of user and certificate activities to detect issues. Key Storage Allows keys to be stored on end devices, on the platform, or hardware security modules. Show More ##### ## Media Delivery (4) Video Delivery Live streams audio and video from both teacher and student managed devices Software Distribution Allows administrative ability to deploy software, applications, and operating systems across endpoints. Static Content Caching Caching of static content at distributed PoPs for faster load times. Dynamic Content Routing Routing of dynamic content for faster load time of dynamic pages. Show More ##### ## Security and Performance (3) Patch Deployment Allows users to update programs, fix bugs and patch security flaws remotely. Monitoring Documents the actions from endpoints within a network. Alerts users of incidents and abnormal activities and documents the access point. Firewall Protects media, websites and web applications from a variety of attacks and malware threats. Show More ##### ## Protection (9) DNS Protection Detect and protect against attacks targeting domain name servers. Website Protection Detect and protect against attacks targeting websites. Infrastructure Protection Detect and protect against attacks targeting on-premise or locally controlled infrastructure. Quarantine Blocks malicious website or destination, redirecting the user to a secure page Continuous Monitoring Monitors 24/7 to detect anomalies in functionality, user accessibility, traffic flows, and tampering. Off-Network Protection Supports agent-based DNS protection with individual endpoint devices on any network. Guest Network Protection Allows DNS filtering and protection for guest WiFi networks. BYOD Protection Supports bring-your-own-device (BYOD) users, supporting DNS protection across any device connected to a network or equipped with an agent. Native DNS over HTTPS (DoH) “DoH” is a protocol that facilitates DNS resolution via HTTPS. Native DoH functionality facilitates DNS over DoH using local agents to manage DNS requests, extending DoH beyond a single browser or network. Show More ##### ## Resolution (5) Attack Mitigation Monitors for and rids systems of bots, or other threats suspected of committing unauthorized actions. Network Monitoring Documents the actions from endpoints within a network. Alerts users of incidents and abnormal activities and documents the access point. Security Monitoring Detects anomalies in functionality, user accessibility, traffic flows, and tampering. Anomoly Detection Constantly monitors acivity related to user behavior and compares activity to benchmarked patterns. Resolution Automation Diagnoses and resolves incidents without the need for human interaction. Show More ##### ## API Management (4) API Discovery Detects new and undocumented assets as they enter a network and add them to asset inventory. API Monitoring Detects anomalies in functionality, user accessibility, traffic flows, and tampering. Reporting Provides results of the simulation and reveals potential security gaps or vulnerabilitites. Change Management Tools to track and implement required security policy changes. Show More ##### ## Security Testing (3) Compliance Monitoring Monitors data quality and send alerts based on violations or misuse. API Verification Allows users to set customizable API verification settings to improve security requirements. API Testing Runs pre-scripted security tests without requiring manual work. Show More ##### ## Security Management (3) Security and Policy Enforcement Abilities to set standards for network, application, and API security risk management. Anomoly Detection Constantly monitors activity related to user behavior and compares activity to benchmarked patterns. Bot Detection Monitors for and rids systems of bots suspected of committing fraud or abusing applications. Show More ##### ## Generative AI (6) AI Text Summarization Condenses long documents or text into a brief summary. AI Text Summarization Condenses long documents or text into a brief summary. Generate Attack Scenarios Use AI to propose possible threat actor tactics, techniques, and procedures against specific environments or assets. Generate Threat Detection Rules Use AI to automatically create detection rules based on observed patterns. Generate Threat Summaries Use AI to produce concise summaries of complex threat reports or alerts. AI Text Summarization Condenses long documents or text into a brief summary. Show More ##### ## Threat Detection and Protection - Client-Side Protection (5) Continuous Scanning Continuously scans websites and applications to detect suspicious activities. Signature-Based Detection Performs signature-based detection for known threats. Threat Protection Protects against a wide range of client-side threats, including XSS attacks, formjacking, digital skimming, and Magecart exploits. Risk Prioritization Prioritizes the script's degree of risk based on its behavior. Heuristic Analysis Performs heuristic analysis to identify suspicious behavior. Show More ##### ## Data Security - Client-Side Protection (7) First-Party JavaScript Obfuscation Obscures first-party Javascript code to make it less readable and harder to understand. Browser Security Protects against browser-based attacks (e.g., XSS, CSRF) and bloc malicious scripts. Encryption Encrypts data in transit and at rest. Obfuscation Offers several obfuscation methods, including polymorphic obfuscation, control flow flattening, code hardening, and virtual-machine based obfuscation. Data Loss Prevention (DLP) Monitors and prevents data leakage by blocking destinations that are unknown or have illegitimate parameters. Third-Party Security Discovers third-party services automatically and continuously with detailed activity tracking. Endpoint Security Protects against endpoint attacks such as ransomware and phishing. Show More ##### ## Logging and Monitoring - Client-Side Protection (3) Event Logging Logs events for security incidents and policy violations. Reporting Provides actionable insights and reports for clear visibility into security incidents, vulnerabilities, and compliance status. Real-Time Monitoring Monitors client-side activities in real time. Show More ##### ## Usability - Load Balancing (4) User Interface Design Provides an intuitive interface for managing configurations and monitoring activity. Setup Simplicity Simplifies the setup process with clear instructions and minimal technical effort. Platform Integration Integrates seamlessly with cloud, on-premises, and hybrid environments. Container Support Works effectively with containerized applications and orchestration platforms like Kubernetes. Show More ##### ## Performance Optimization - Load Balancing (4) Global Load Balancing Distributes traffic across multiple data centers or regions to optimize performance. Dynamic Resource Allocation Adjusts resources automatically to handle traffic spikes efficiently. Server Health Monitoring Continuously monitors server availability to prevent routing to unresponsive systems. Disaster Recovery Restores operations quickly and effectively after failures or disruptions. Show More ##### ## Security & Compliance - Load Balancing (5) SSL/TLS Termination Efficiently manages encryption and decryption of traffic to secure data in transit. Application Firewall Integration Supports integration with web application firewalls (WAF) for additional protection against vulnerabilities. DDoS Mitigation Protects against Distributed Denial of Service (DDoS) attacks to maintain service availability. Access Control Provides mechanisms to restrict unauthorized access and manage user or system permissions. IP Whitelisting/Blacklisting Controls traffic by allowing or blocking specific IP addresses to enhance security. Show More ##### ## Agentic AI - Threat Intelligence (4) Autonomous Task Execution Capability to perform complex tasks without constant human input Multi-step Planning Ability to break down and plan multi-step processes Proactive Assistance Anticipates needs and offers suggestions without prompting Decision Making Makes informed choices based on available data and objectives Show More ##### ## Agentic AI - Enterprise Content Delivery Network (eCDN) (1) Proactive Assistance Anticipates needs and offers suggestions without prompting Show More ##### ## Agentic AI - Content Delivery Network (CDN) (1) Proactive Assistance Anticipates needs and offers suggestions without prompting Show More ##### ## Agentic AI - Enterprise Content Management (ECM) (3) Autonomous Task Execution Capability to perform complex tasks without constant human input Natural Language Interaction Engages in human-like conversation for task delegation Decision Making Makes informed choices based on available data and objectives Show More ##### ## Traffic Management & Performance - AI Gateways (3) Token-Aware Rate Limiting Enforces strict request and token quotas per user, tenant, or application to prevent system overloads and manage API budget limits. Semantic Caching Caches responses for identical or semantically similar prompts to significantly reduce API latency and eliminate redundant token costs. Multi-Model Routing & Fallbacks Routes API requests to various LLM providers via a single unified API and automatically fails over to backup models if downtime occurs. Show More ##### ## Governance & Observability - AI Gateways (3) Data Privacy Intercepts traffic to detect and mask Personally Identifiable Information (PII) or block malicious prompt injections before the request reaches the external model. Cost Tracking Provides granular dashboards to monitor token consumption and calculate exact monetary costs broken down by application, team, or specific model. Centralized API Key Security Securely vaults and manages external LLM API keys within the gateway so developers do not need to hardcode credentials into their applications. Show More ##### ## Bot Detection & Classification - Bot Detection and Mitigation (3) Bot Traffic Analytics Provides visibility into bot activity, attack trends, and traffic composition through dashboards and reporting Good Bot Identification Distinguishes approved bots such as search engine crawlers and partner integrations from malicious automation Malicious Bot Detection Identifies and classifies malicious automated traffic across web applications, APIs, or digital services Show More ##### ## AI-Powered Detection & Intelligence - Bot Detection and Mitigation (3) AI-Powered Bot Detection Uses machine learning or AI models to identify sophisticated or evolving bot behavior patterns AI Agent & LLM Traffic Management Identifies, classifies, and manages traffic generated by AI agents, autonomous agents, or LLM-based systems Adaptive AI Threat Response Dynamically adjusts detection and mitigation decisions based on AI-driven risk analysis Show More ##### ## Protection & Mitigation - Bot Detection and Mitigation (3) Automated Bot Mitigation Automatically blocks, challenges, rate limits, or otherwise mitigates malicious bot traffic API Abuse Protection Protects APIs from automated attacks, scraping, excessive requests, and unauthorized access attempts Account Takeover Protection Detects and prevents credential stuffing, account takeover, and automated login abuse Show More ## Top-Rated Alternatives [ ![HAProxy](https://images.g2crowd.com/uploads/product/hd_favicon/7b4d7d3f13ff9a655c3e07b1ab59128a/haproxy.svg "HAProxy") HAProxy 4.7/5 (893) ](https://www.g2.com/products/haproxy/reviews) [ ![Bunny CDN](https://images.g2crowd.com/uploads/product/hd_favicon/8deb8687507141d9a93a33883dc9d4da/bunny-cdn.svg "Bunny CDN") Bunny CDN 4.8/5 (484) ](https://www.g2.com/products/bunny-cdn/reviews) [ ![Akamai Cloud Computing](https://images.g2crowd.com/uploads/product/hd_favicon/88a10113936d5d26cc5455decf5a8817/akamai-cloud-computing.svg "Akamai Cloud Computing") Akamai Cloud Computing 4.6/5 (387) ](https://www.g2.com/products/akamai-cloud-computing/reviews) [ View All Alternatives ](https://www.g2.com/products/cloudflare-application-security-and-performance/competitors/alternatives) Cloudflare Application Security and Performance Comparisons ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/small_square/small_square_cacdec8b8edeace9b3c89e0c2cded695/amazon-cloudfront.jpg "Product Avatar Image") CloudFront 4.4/5 (192) [ Compare Now ](https://www.g2.com/compare/amazon-cloudfront-vs-cloudflare-application-security-and-performance) ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/small_square/small_square_9d189d79d76d02af5b1701652b086d5f/akamai-content-delivery-solutions-cdn.png "Product Avatar Image") Akamai Content Delivery... 4.1/5 (49) [ Compare Now ](https://www.g2.com/compare/akamai-content-delivery-solutions-cdn-vs-cloudflare-application-security-and-performance) ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/small_square/small_square_1fff394b86d3cd58b2e72b3d467cf332/bunny-cdn.png "Product Avatar Image") Bunny CDN 4.8/5 (488) [ Compare Now ](https://www.g2.com/compare/bunny-cdn-vs-cloudflare-application-security-and-performance) ##### Categories on G2 [ Enterprise Content Management (ECM) ](https://www.g2.com/categories/enterprise-content-management-ecm)[ API Security ](https://www.g2.com/categories/api-security)[ Content Delivery Network (CDN) ](https://www.g2.com/categories/content-delivery-network-cdn) [ Threat Intelligence ](https://www.g2.com/categories/threat-intelligence)[ AI Gateways ](https://www.g2.com/categories/ai-gateways)[ Bot Detection and Mitigation ](https://www.g2.com/categories/bot-detection-and-mitigation)[ Load Balancing ](https://www.g2.com/categories/load-balancing)[ Web Application Firewall (WAF) ](https://www.g2.com/categories/web-application-firewall-waf)[ DDoS Protection ](https://www.g2.com/categories/ddos-protection)[ DNS Security Solutions ](https://www.g2.com/categories/dns-security-solutions)[ Website Security ](https://www.g2.com/categories/website-security)[ Managed DNS Solutions ](https://www.g2.com/categories/managed-dns-solutions)[ Certificate Lifecycle Management (CLM) ](https://www.g2.com/categories/certificate-lifecycle-management-clm)[ SSL & TLS Certificate Tools ](https://www.g2.com/categories/ssl-tls-certificate-tools)[ Enterprise Content Delivery Network (eCDN) ](https://www.g2.com/categories/enterprise-content-delivery-network-ecdn)[ Application Shielding ](https://www.g2.com/categories/application-shielding)[ Client-Side Protection ](https://www.g2.com/categories/client-side-protection) Show More ##### Explore More [ What software provides the most advanced client communication features? ](https://www.g2.com/discussions/what-software-provides-the-most-advanced-client-communication-features)[ Best performance management software for small tech startups ](https://www.g2.com/discussions/what-s-the-best-performance-management-software-for-small-tech-startups)[ What lease administration tool offers the fastest setup? ](https://www.g2.com/discussions/what-lease-administration-tool-offers-the-fastest-setup) [ What are the best platforms for integrating demand planning with ERP systems? ](https://www.g2.com/discussions/what-are-the-best-platforms-for-integrating-demand-planning-with-erp-systems)[ Which enterprise mobility management solutions offer zero-touch enrollment and automated device provisioning while meeting compliance requirements? ](https://www.g2.com/discussions/which-enterprise-mobility-management-solutions-offer-zero-touch-enrollment-and-automated-device-provisioning-while-meeting-compliance-requirements)[ Pros and Cons Details ](https://www.g2.com/products/cloudflare-application-security-and-performance/reviews?qs=pros-and-cons) Show More [ What software provides the most advanced client communication features? ](https://www.g2.com/discussions/what-software-provides-the-most-advanced-client-communication-features)[ Best performance management software for small tech startups ](https://www.g2.com/discussions/what-s-the-best-performance-management-software-for-small-tech-startups)[ What lease administration tool offers the fastest setup? ](https://www.g2.com/discussions/what-lease-administration-tool-offers-the-fastest-setup) [ What are the best platforms for integrating demand planning with ERP systems? ](https://www.g2.com/discussions/what-are-the-best-platforms-for-integrating-demand-planning-with-erp-systems)[ Which enterprise mobility management solutions offer zero-touch enrollment and automated device provisioning while meeting compliance requirements? ](https://www.g2.com/discussions/which-enterprise-mobility-management-solutions-offer-zero-touch-enrollment-and-automated-device-provisioning-while-meeting-compliance-requirements)[ Pros and Cons Details ](https://www.g2.com/products/cloudflare-application-security-and-performance/reviews?qs=pros-and-cons)