Cloudflare Application Security and Performance Reviews & Product Details

What I like most about Cloudflare is that it gives us security and performance in one place without making things overly complicated. The protection against common web threats is strong, and the CDN helps keep our applications fast for users in different locations. I also like the dashboard because it makes it relatively easy to monitor traffic, security events, and performance without having to manage several different tools. It works well with the other tools in our stack, especially Slack. The integration makes it easier to share alerts and keep the team updated without having to constantly switch between different platforms. Review collected by and hosted on G2.com.

The main thing I dislike is that some of the settings can take a little time to understand, especially when you are dealing with more advanced security rules and configurations. There are quite a few options available, which is useful, but it can also feel a bit overwhelming at first. Pricing can also become a consideration as your requirements and usage grow. Review collected by and hosted on G2.com.

What I love most is how seamless it is. The platform provides robust DDoS protection and an excellent CDN that instantly boosts site performance. Also it provides like 100000 requests per day that too in free tier. It's like a set-it-and-forget-it solution that drastically reduces our server load and protects my site from malicious bots. I have also made a daily task manager web app for my GF, and I integrated cloud flare in that for authentication. Review collected by and hosted on G2.com.

The dashboard layout can feel a bit overwhelming for beginners. Specially Finding specific advanced firewall rules occasionally takes too much time and multiple checks. I remember when I first used it, I literally asked chatGPT on how to create a project in cloud flare. Review collected by and hosted on G2.com.

I like how Cloudflare Application Security and Performance lets me easily block countries we don't do business with just with easy clicks. It gives me the ability to monitor requests by individual IP addresses and block them if necessary. The analytics part is amazing and helps me quickly glance at the traffic. The AI Crawl traffic is also impressive, as it helps me understand where the traffic is coming from and how it's managed. Migrating DNS was super easy, and their caching mechanism makes our application work faster without having to process every request by reaching out to the server. I've seen many images being processed using this caching mechanism. Setting it up was a breeze; it was just plug in, and everything was ready with zero downtime. Review collected by and hosted on G2.com.

Some of the feature are only available with higher version but essential for smaller business too. Review collected by and hosted on G2.com.

I've been using Cloudflare for over 2 months now. I started hosting an app so that I could beta test more easily rather than self-hosting. The experience was quick and painless. It's an all-in-one solution that covers all my needs, from hosting and defining the access parameters, to easily deploying new versions of my app on the fly. I'm not paying anything as I'm using the free tier, however the value is immense. I can test out the product and use it to host my app and quickly get it in the hands of my beta testers. When the time is right I'll be scaling up for sure in order to stay in the Cloudflare environment. Review collected by and hosted on G2.com.

Navigation is a bit complex, but luckily the cmd+k function can alleviate this by showing me what pages match the char. string I typed. Review collected by and hosted on G2.com.

I really like how Cloudflare Application Security and Performance mitigates DDoS attacks, malicious traffic, and zero-day threats, ensuring uptime and application integrity. It also significantly improves load times and reduces latency with its global CDN and edge caching, enhancing user experience and response times. The integrated platform is extremely valuable because I can control security enforcement, WAF, DDoS mitigation, and performance optimizations from a single interface, which minimizes complexity while maintaining speed and security. The integration of these features reduces operational overhead by allowing threat responses like WAF adjustments to be deployed alongside performance tweaks in one action. This unified approach ensures rapid reaction to security incidents and performance needs, keeping applications protected and fast. Additionally, setting it up was quite efficient, with DNS integration, baseline WAF rules, and standard CDN policies becoming operational quickly, making the out-of-the-box deployment seamless. Review collected by and hosted on G2.com.

Advanced role fine tuning can have a steep learning curve. While the baseline is easy, complex configurations, like custom rate limiting or intricate WAF logic, could benefit from more intuitive guidance or templates. A clear improvement would be modular templates for common scenarios, such as predefined rate limiting patterns or step-by-step wizards for complex WAF logic. This would reduce the learning curve and accelerate correct implementation. Additionally, more AI assisted suggestions could help with fine tuning. Review collected by and hosted on G2.com.

What I like most is how Cloudflare brings application security and performance together in a single platform. Features like the WAF, DDoS protection, CDN, and DNS are easy to manage, and they offer solid visibility into traffic patterns and potential security threats. Overall, it’s helped us boost website performance while cutting down the time and effort needed to protect our internet-facing applications. Review collected by and hosted on G2.com.

What I dislike is that the dashboard and security configuration can feel complicated at first, especially when I’m setting up WAF rules or trying to investigate blocked traffic. Some advanced features are only available on higher-tier plans, and dealing with false positives can mean extra tuning to get the rules right. Overall, it works well, but the initial setup and configuration take time before everything feels properly dialed in. Review collected by and hosted on G2.com.

UI / UX: Clean, simple dashboard that turns complex DNS and security configs into a few clicks.

Integrations: Fits naturally into modern tech stacks, from WordPress and GitHub to Terraform.

Performance: Blazing fast. Its global network absorbs massive traffic surges and DDoS attacks effortlessly.

Pricing / ROI: Exceptional value. The free tier is remarkably generous, and paid plans feature predictable flat rates.

Support & Onboarding: Takes 10 minutes to set up with fantastic docs (though free-tier support relies on forums).

AI / Intelligence: Leading the edge AI space run models and vector databases at ultra-low latency with Workers AI and AI Gateway.

Bottom Line: Set it up once, forget about it, and let it handle your speed and security. An absolute no-brainer. Review collected by and hosted on G2.com.

Support on non-enterprise tiers is painfully slow, strict captcha challenges often annoy real visitors, and moving away from their proprietary edge ecosystem down the road can be a technical headache. Review collected by and hosted on G2.com.

What I like best about Cloudflare Application Security and Performance is the combination of strong security, ease of management, and noticeable performance improvements. Features such as DDoS protection, Web Application Firewall (WAF), CDN, and caching are integrated into a single platform, making it easier to protect applications while also improving availability and load times. I also appreciate the visibility and analytics Cloudflare provides, which help identify threats and performance issues quickly. Review collected by and hosted on G2.com.

The main thing I dislike is that some of the more advanced settings can be a bit confusing at first. There are a lot of options, and it can take some time to understand how everything works together. Troubleshooting certain configurations is not always straightforward, and some of the more advanced features can also get expensive. Review collected by and hosted on G2.com.

After using Cloudflare across four projects over seven years, its combination of CDN performance and security has consistently been one of the most reliable parts of any stack I've set up. The WAF and DDoS protection give solid peace of mind without needing to build custom security infrastructure, and setup is straightforward even for projects with limited DevOps resources. Performance improvements from caching and edge network distribution have been noticeable across different project sizes, from small side projects to larger production systems. Being free at the entry tier for core protections makes the ROI excellent, especially for smaller projects that don't have budget for dedicated security tooling, and the dashboard makes monitoring traffic and threats accessible without needing deep security expertise. Review collected by and hosted on G2.com.

Some of the more advanced security rules and configurations require a decent understanding of how Cloudflare's rule engine works, which took time to get comfortable with across different projects. Debugging caching issues can be tricky at times, since aggressive caching occasionally serves stale content until manually purged or configured correctly. Pricing for advanced features and higher-tier plans scales up quickly once a project needs more than the basic free protections, and support response times on lower tiers can be slower than ideal when troubleshooting more complex configuration issues. Review collected by and hosted on G2.com.

I find the security scan provides great insight into what can be improved across all the websites and apps using Cloudflare services, all in one place. It’s intuitive and informative, and it clearly guides you on how to implement fixes and strengthen overall security. I maintain 20+ websites and apps on Cloudflare, and for any serious developer, this feature feels like a must-have. Review collected by and hosted on G2.com.

There isn’t much I can complain about, to be honest. I’ve been a Cloudflare user since it first started trading, and I feel like I’ve grown alongside the service. I also try to stay up to date with new developments in security and safety as they’re introduced. Review collected by and hosted on G2.com.