Cloudflare Application Security and Performance Reviews & Product Details

What I like most about Cloudflare Application Security and Performance is how it combines strong security and performance optimization in a single platform. It provides essential features such as DDoS protection, Web Application Firewall (WAF), and a global CDN, which together significantly improve both the security and responsiveness of my applications.

In my personal setup, I use Cloudflare in front of a VPS hosted on DigitalOcean. I configured Cloudflare DNS and proxy (orange cloud) to route traffic through Cloudflare’s network instead of exposing my server directly to the internet. This helps reduce direct attack exposure on the origin server.

Additionally, I experimented with Cloudflare WARP connectivity in my setup to secure traffic paths and improve routing stability for VPN-style access. This setup helps me manage traffic more safely while benefiting from Cloudflare’s edge network performance improvements. Review collected by and hosted on G2.com.

One downside is that some advanced configurations, such as custom WAF rules, firewall tuning, and routing optimizations, require a good level of technical understanding. For users who are new to networking or security concepts, the learning curve can be challenging.

Also, certain advanced security and performance features are only available on higher-tier plans, which may limit flexibility for smaller projects or personal use cases. Review collected by and hosted on G2.com.

Hey Hey I like best about Cloudflare Application Security and Performance is how integrated and frictionless it is—security, reliability, and speed all work together without adding operational complexity.

A few highlights:

Security baked in by default: WAF, DDoS protection, bot management, and rate limiting are tightly integrated, so protecting apps doesn’t feel like bolting on extra tools.

Performance at global scale: The global Anycast network, smart caching, and Argo routing noticeably reduce latency and improve availability for users everywhere.

Ease of use: The dashboard, rules engine, and APIs make it easy to deploy changes quickly, iterate on policies, and troubleshoot issues without slowing teams down.

Strong visibility and control: Detailed analytics and logs help teams understand traffic patterns, attacks, and performance bottlenecks in real time.

Developer-friendly: Features like Workers and flexible rule customization let teams tailor behavior without sacrificing security or speed.

Overall, Cloudflare does a great job of simplifying app security while actively improving performance, which is a rare and valuable combination. Review collected by and hosted on G2.com.

A few things I dislike about Cloudflare Application Security and Performance—while still recognizing it’s a strong platform overall—are:

Learning curve for advanced features: The basics are easy to get started with, but configuring more advanced WAF rules, bot management, and rate limiting can become complex and sometimes feels unintuitive.

Limited transparency in some detections: It isn’t always clear why certain requests are blocked or challenged, which can slow down troubleshooting and make tuning harder.

Pricing complexity: Some of the more powerful security and performance features are locked behind higher tiers, and it’s not always obvious what’s included without digging through the documentation.

Rule debugging can be tedious: Testing and validating rules in production-like scenarios takes time, especially when changes have unintended side effects.

UI inconsistencies: Some settings are spread across different areas of the dashboard, so navigation can feel fragmented at times.

Overall, the biggest downside is that the platform’s power and flexibility come with added complexity—especially for teams that want fine-grained control without deep Cloudflare expertise. Review collected by and hosted on G2.com.

Cloudflare makes it easy to create and manage security rules with a lot of flexibility. The firewall rule setup is powerful but still intuitive, and the DNS firewall is fast, reliable, and gives great visibility into traffic. It’s a solid balance of performance and security, and once configured, it runs quietly in the background doing exactly what it’s supposed to do. Review collected by and hosted on G2.com.

Overall, the platform is excellent, but some advanced features require an Enterprise plan, which can be a higher cost barrier for smaller teams or growing businesses. While the value is there, the pricing jump to access certain capabilities (around $2,400 per year) may feel steep if you don’t need everything at that tier. Review collected by and hosted on G2.com.

Cloudflare stands out for its user-friendly interface, featuring an intuitive dashboard that simplifies the management of security and performance settings. One of its key strengths is the ease of implementation, allowing users to enable protection rapidly with minimal setup required. The platform offers a comprehensive set of features, such as DDoS protection, WAF, CDN, and performance optimization tools, which encourages frequent use for daily monitoring and traffic management. Additionally, Cloudflare integrates smoothly with existing infrastructure and cloud services, making adoption straightforward. The combination of responsive customer support and thorough documentation further assists in resolving any issues efficiently. Review collected by and hosted on G2.com.

Although the platform offers a broad range of features, some of the more advanced configuration options can make it less user-friendly, particularly for those who are new to security platforms. While setting up the system is usually straightforward, adjusting and fine-tuning security rules may involve a learning curve. Frequent use of the platform can reveal some shortcomings in its reporting and analytics capabilities, especially when seeking more detailed insights. Additionally, certain integrations and features are only available in higher-priced plans, which can affect how easily the platform integrates with other tools. Customer support response times also tend to vary depending on the level of service plan chosen. Review collected by and hosted on G2.com.

From an infrastructure management perspective, Cloudflare is relatively easy to deploy and manage. DNS management, traffic routing, and security rules are centralized in a single dashboard, making changes quick and auditable. The visibility provided through logs, analytics, and security insights helps the IT team monitor traffic patterns, identify threats, and make informed decisions without deep manual investigation. Review collected by and hosted on G2.com.

There are areas where Cloudflare could be improved from an admin perspective. Some advanced security and performance features require careful configuration to avoid false positives or unintended blocking. Additionally, deeper analytics and log retention options are often tied to higher-tier plans, which can be a consideration for budgeting and long-term monitoring needs. Review collected by and hosted on G2.com.

I like how Cloudflare makes it simple to turn on strong security and performance improvements in one place, with quick setup and clear controls. I’ve used Cloudflare for a few years, and it has become noticeably easier to use over time (and understand what toggle does what, etc.). Review collected by and hosted on G2.com.

What I dislike is the lack of direct customer support on the Pro plan. When you need timely help for more advanced or urgent issues, it can be limiting, and features like live chat require upgrading to a more expensive plan. Review collected by and hosted on G2.com.

I like how Cloudflare Application Security and Performance combines both security and performance on one platform. The CDN noticeably improves load time, and it builds in security features like DDoS protection and a web application firewall, which provides strong protection. The interface is very clean and easy to manage, and its overall performance is really good. Their analytics and traffic insights are also very helpful. I find the initial setup to be very straightforward; the dashboard is intuitive, and configuring most core security and performance features doesn't require much technical effort. It's a very easy and good platform to work with. Review collected by and hosted on G2.com.

Some advanced configuration can be a bit complex for a new user, and certain powerful features are limited to the higher-tier plans. It would be great to see simpler guidance for beginners and more flexibility in pricing. Review collected by and hosted on G2.com.

Nothing.Nothing.Nothing.Nothing.Nothing. Review collected by and hosted on G2.com.

Cloudflare's "Cancellation" System is a Joke - 35+ Days, Multiple Charges, Still Can't Cancel

TL;DR: Cancelled all Cloudflare subscriptions on December 25th, 2025. Got charged anyway on December 27th AND January 27th. Their support says "engineers cancelled all subscriptions" but the billing page STILL shows an active $240/year subscription that I literally CANNOT edit or remove (the Edit button does nothing). Over a month later, still fighting this.

---

The Timeline of Absurdity

December 25, 2025: I cancel ALL my subscriptions through the Cloudflare dashboard. Everything. Done. Or so I thought.

December 27, 2025: I get charged $10 for "Advanced Certificate Manager" - a service I JUST cancelled 2 days ago. I open a support ticket demanding a full refund, explanation of why a cancelled service was charged, and all payment methods permanently deleted.

December 31, 2025: Support responds saying it's a "system-side issue" and they've "escalated to engineering." They also mention response times might be slow due to holidays. Fair enough, I guess.

January 27, 2026: I GET CHARGED AGAIN. Same subscription. At this point I've been waiting a MONTH.

January 29, 2026: Support claims "Our engineers have cancelled all active subscriptions on the account."

January 31, 2026 (Today): I check my billing page. THERE'S STILL AN ACTIVE SUBSCRIPTION showing $240.00/yr with a renewal date of June 8, 2026. The "Edit" button? Doesn't work. Nothing happens when you click it.

---

What I've Learned

1. Cloudflare's cancellation system doesn't actually cancel billing - They might stop your services, but the billing keeps rolling.

2. The UI is deliberately broken - You literally CANNOT click "Edit" on subscriptions to remove them. It's not a bug, it's a feature (for them).

3. Support plays the "escalated to engineering" card - Classic stalling tactic while they keep charging your card.

4. They ignore requests for legal contact information - I've asked multiple times for their legal representative's contact details. Radio silence.

---

My Response to Their Latest "We cancelled everything" Email

"No, you did not cancel all active subscriptions in my account! Can you see how that subscription is still active? I want that permanently removed."

"You will have to remove my payment method, and permanently delete my account and make sure all subscriptions are canceled!"

---

What's Next

- Filing complaint with ANPC (Romania's consumer protection agency)

- Filing EU consumer protection complaint

- Contacting legal representation

- Documenting EVERYTHING for potential legal action

---

The Real Question

How is a company this big allowed to have billing systems this broken? Or is it "broken" by design?

When you can't cancel a subscription because the Edit button literally doesn't respond to clicks, that's not a bug - that's a dark pattern.

---

Has anyone else experienced this with Cloudflare? I'd love to hear your stories. Maybe we can compile enough cases for a class action.

EDIT: I have the full 5-page support ticket transcript as evidence. Names/emails redacted for privacy but happy to share with anyone who needs it for similar cases.

---

Posted from someone who's been in tech for 30 years and has never seen billing this bad. Review collected by and hosted on G2.com.

I use Cloudflare Application Security and Performance to protect and speed up websites. What I like most about Cloudflare Application Security and Performance is how it handles security and speed together. The DDoS protection and firewall work really well in the background. The CDN makes the website load faster without much manual work, saving a lot of time and giving peace of mind. The DDoS protection blocks sudden fake traffic effectively, the firewall filters out suspicious requests with ease, and the CDN serves content from nearby servers, improving loading speed. It also works smoothly with other tools like web hosting services, CMS like WordPress, and GitHub for deployment, adding an extra layer of security and performance on top of the existing setup. After moving to Cloudflare, things became more stable, faster, and easier to manage. The initial setup was fairly easy and manageable even without deep expertise. Review collected by and hosted on G2.com.

Some settings are a bit confusing at first, especially the security rules and firewall options. For beginners, it takes some time to understand what to enable and what not. Also, advanced features are locked behind paid plans, which can be limiting sometimes. The learning curve could be smoother. Review collected by and hosted on G2.com.

I find Cloudflare Application Security and Performance to provide a very positive experience with a strong combination of security, performance, and optimization. It's easy to use, suitable for both small applications and large enterprise workloads. The platform helps protect applications from common web threats and improves speed and response time. I like the strong security features like the web application firewall with managed and custom rules and effective protection against bot attacks. Its easy integration with SSL and TLS, zero trust, and limiting options is great. The global CDN and smart caching significantly improve load times, and the ability to block malicious IPs and URLs helps secure our business. Review collected by and hosted on G2.com.

I think there could be improvements in securing our web server's performance to keep clients happy. I mentioned issues with sudden attacks impacting performance and the need for a utilization indicator to manage that. Scanning and blocking malicious traffic based on IPs should be more efficient. Protecting against Trojans and malicious signatures can be daunting. Review collected by and hosted on G2.com.