Cloudflare Application Security and Performance Reviews & Product Details

What I like most is that it gives us a single layer for security and traffic management, instead of having to handle everything across different systems. We’ve used it to deploy our map server and integrate it with Claude Code, and it also gives us direct access to token and resource management from one central place. It’s been useful on the CDN side as well, and the caching has reduced latency. Overall, it’s a great product. Review collected by and hosted on G2.com.

A lot of features, and it took quite a while to get comfortable with them. At first, it felt a bit tacky around rate limiting and routing, as well as access policies. Troubleshooting blocked requests is still difficult. Review collected by and hosted on G2.com.

At Prism Network Limited we run a 24/7 claims management platform that insurers, loss adjusters and policyholders log into for real-time status, photo/video validation and contractor coordination. What stands out is how cleanly Cloudflare sits in front of that environment and gives us both edge protection and measurable speed gains without forcing us to redesign our stack. The combination of always-on DDoS absorption, a practical WAF with managed rules, and intelligent bot scoring has kept our portals responsive even when we see sudden spikes in claim submissions after weather events. The global edge network noticeably shortens load times for documents and image uploads from different parts of the UK, which directly helps our remote validation workflow. Setup and day-to-day management through the dashboard have been straightforward for our small technical team, and the free SSL plus basic caching layers removed several manual certificate and performance tasks we used to handle ourselves. Review collected by and hosted on G2.com.

The jump in cost and complexity once you move beyond the simpler plans can feel steep for a mid-sized claims organisation that needs only a focused set of security and performance features. Some of the more advanced bot-management and analytics options require extra configuration time and occasional rule tuning that a lean internal team has to learn. Support responses for non-urgent questions have occasionally taken longer than we would like, and a few of the newer dashboard features feel denser than necessary for everyday use. None of these are deal-breakers for us, but they mean we still spend a bit more time than ideal keeping the configuration tight and evaluating which paid tiers actually deliver proportional value for our specific claims-platform traffic patterns. Review collected by and hosted on G2.com.

It sits in front of our ASP .NET Core APIs and Angular apps with zero code changes, which is exactly what I was looking for. The dashboard is clean and easy to navigate, and making DNS updates or adjusting cache settings takes just a few clicks. From a performance standpoint, our static assets load quickly from the edge, and API response times have improved for users in other regions. I also appreciate the bot analytics: it clearly shows which AI crawlers and other bots are hitting our endpoints. On top of that, the rate limiting has stopped abusive traffic on our public APIs more than once. Review collected by and hosted on G2.com.

The dashboard is split into a lot of sections, so it took me a bit of clicking around at first to locate the advanced WAF rules. A few useful capabilities, like advanced WAF rules and longer analytics retention, are also locked behind the paid plans. On the lower tiers, support feels slow as well, so you’re mostly on your own relying on the docs and forums. Review collected by and hosted on G2.com.

Honestly, the best part is just how easy it is to set up and manage. We used to struggle with complex firewall rules, but Cloudflare’s dashboard is super straightforward. The WAF catches basically all the junk traffic before it even hits our servers, and the CDN actually speeds things up noticeably for our users. I don't have to think about it much once it's running, which is exactly what you want from this kind of tool. Review collected by and hosted on G2.com.

The pricing can get pretty steep once you start needing the more advanced features, like detailed bot management. It feels like things get expensive fast as you scale up. Also, if you run into a weird technical edge case, getting a quick, helpful answer from support can be tough unless you're paying for one of their top-tier enterprise plans. Review collected by and hosted on G2.com.

The WAF setup was more straightforward than I expected—you can enable managed rulesets in minutes instead of having to write custom rules from scratch. Page load times for users outside our home region also improved noticeably once we had the CDN caching properly. Review collected by and hosted on G2.com.

Some of the more advanced bot management and analytics features are locked behind higher pricing tiers, so smaller teams end up choosing between basic protection or a big jump in cost. Occasional WAF false positives also need manual tuning early on. Review collected by and hosted on G2.com.

The unified control plane stands out. Being able to manage DDoS mitigation, WAF rules, bot scoring, caching, and performance optimizations from a single dashboard removes a lot of tool-switching friction that used to slow our teams down.

For a media agency running dozens of concurrent client campaign sites and internal tools, the global edge network delivers consistently low latency for audiences in different regions without us having to spin up separate regional infrastructure. The automatic SSL and the way managed rulesets stay current with emerging threats mean we spend far less time on routine security hygiene and more time on campaign-specific custom rules. The real-time analytics also give our technical and media ops teams clear visibility into traffic patterns during high-stakes launches, which helps us respond faster when something unusual appears. Review collected by and hosted on G2.com.

The learning curve for advanced custom rules and some of the more granular bot-management settings can be steeper than expected when onboarding new team members who are not deeply technical. Documentation is solid, but certain edge-case configurations still require trial-and-error or support tickets.

Pricing jumps between tiers can also feel abrupt once you move beyond the lower plans and need enterprise-level features or higher support SLAs, which requires careful internal budgeting conversations. Support response times on non-critical issues have occasionally been slower than ideal during busy campaign periods. Finally, while the dashboard is powerful, the volume of configuration options can feel overwhelming at first glance if you are managing a large number of zones and need tight consistency across them. Review collected by and hosted on G2.com.

I started using Cloudflare for my website and so far it's been good. Setting up SSL was easy and DNS changes happen quickly. I also noticed my website is loading faster now. Haven't faced any major problem till now. Overall, I'm happy with it and will continue using it. Review collected by and hosted on G2.com.

The service is good, but sometimes DNS changes takes longer than I expected. Also there are too many options in the dashboard, which makes it confusing for new users. Review collected by and hosted on G2.com.

What I like best about Cloudflare’s Application Security and Performance is how seamlessly it improves both speed and protection without needing constant tuning. The CDN, caching, and security layers work quietly in the background, so apps load faster and stay protected from common attacks without extra overhead. Review collected by and hosted on G2.com.

The only downside is that some of the configuration options feel a bit buried. When I need to tweak a rule or adjust a setting, it sometimes takes longer than expected to find the right place. The platform is powerful, but a few areas could be more intuitive. Review collected by and hosted on G2.com.

I've used Cloudflare on and off for about 4 years in total. At Culltron we use it mainly for R2 storage and security, and we're moving our domains onto it too. Let's face it, everyone uses them for a reason. We're also in their startup programme with $10k in credits, which helps a lot. Cloudflare runs DNS and security for our company domain culltron.app (Culltron (Pty) Ltd), managed by Ashveer Ramlukan. Review collected by and hosted on G2.com.

Honestly, I can't think of anything I dislike. Review collected by and hosted on G2.com.

We use it to manage and set up applications without having to set up and maintain different servers for everything. The setup was fairly straightforward, and configuring security and access was also much easier than I expected. We’ve used it to connect with the MCP server and our internal service with Claude Code, and the level of control we get is pretty great. Review collected by and hosted on G2.com.

There were some fairly elaborate settings we needed to configure to make it accessible to everyone. The documentation could also be better, especially when you’re setting it up for the first time. Review collected by and hosted on G2.com.