What stands out to me is Cloudflare's ability to improve both security and performance without requiring major infrastructure changes. The global edge network, DDoS protection, WAF, caching, SSL/TLS, and traffic optimization work together to deliver faster, more secure applications with minimal operational overhead. Review collected by and hosted on G2.com.

The main downside is that some advanced features are locked behind premium plans, and the platform can take time to learn if you're new to web security. However, once configured properly, it provides strong security and performance benefits. Review collected by and hosted on G2.com.

I like that Cloudflare Application Security and Performance is easy to set up, which saves me time and resources, and makes fixing problems easier and faster. The good data analytics feature lets me see where traffic is coming from and how many requests or visits were blocked, which is helpful in determining the value of the service. I also appreciate how it helps prevent bots from overwhelming my website, protecting my landing pages from spam and preventing detrimental impacts on my business. Review collected by and hosted on G2.com.

It doesn't stop every bot from visiting the site. So if it could stop every bot, that would be an improvement. Although, I don't know if there's a service on the earth that does stop every bot. Otherwise, I've been very happy with the service. Review collected by and hosted on G2.com.

I appreciate that the free offer of Cloudflare Application Security and Performance is already very comprehensive, allowing me to perform most of the uses I want. This is particularly useful for me as a small company because it provides me with professional tools for free. Moreover, when I exceed the free usage, I like the fact that there are measured costs thanks to pay-as-you-go, which is appreciable compared to other tools. Review collected by and hosted on G2.com.

I find that the rules can be complex, and the documentation is not always up to date. I think the interface is quite heavy and complex, which complicates its use. However, I am relieved that Cloudflare has recently released an MCP solution to which I can delegate an AI agent. Review collected by and hosted on G2.com.

I love how easy it is to set up and manage Cloudflare Application Security and Performance. Its seamless automated DDoS protection and reliable global CDN are fantastic. I also appreciate the comprehensive analytics dashboard that gives full visibility into our web traffic and security threats. It reduces management overhead, cuts hosting and bandwidth costs, and ensures consistent high uptime. The initial setup was very easy and seamless, requiring minimal technical overhead and completed within minutes without any downtime. Review collected by and hosted on G2.com.

I find WAF custom rule configuration can have a learning curve, advanced enterprise features are quite expensive, and I think support response times on lower-tier plans could be faster. Review collected by and hosted on G2.com.

What I like most about Cloudflare Application Security and Performance is how it brings security and speed together in a single platform. The CDN helps websites load faster, and features like DDoS protection, WAF, and bot mitigation add strong protection without needing much ongoing maintenance. I also find the dashboard easy to navigate, which makes it straightforward to monitor traffic and keep an eye on security events. Review collected by and hosted on G2.com.

One drawback is that some of the more advanced security and performance features are limited to the higher-tier plans, which can get pricey. On top of that, the sheer number of configuration options can feel overwhelming at first, so there’s definitely a learning curve when you’re trying to set up more advanced rules and policies. Review collected by and hosted on G2.com.

What I like most about Cloudflare Application Security and Performance is how it combines strong security and performance optimization in a single platform. It provides essential features such as DDoS protection, Web Application Firewall (WAF), and a global CDN, which together significantly improve both the security and responsiveness of my applications.

In my personal setup, I use Cloudflare in front of a VPS hosted on DigitalOcean. I configured Cloudflare DNS and proxy (orange cloud) to route traffic through Cloudflare’s network instead of exposing my server directly to the internet. This helps reduce direct attack exposure on the origin server.

Additionally, I experimented with Cloudflare WARP connectivity in my setup to secure traffic paths and improve routing stability for VPN-style access. This setup helps me manage traffic more safely while benefiting from Cloudflare’s edge network performance improvements. Review collected by and hosted on G2.com.

One downside is that some advanced configurations, such as custom WAF rules, firewall tuning, and routing optimizations, require a good level of technical understanding. For users who are new to networking or security concepts, the learning curve can be challenging.

Also, certain advanced security and performance features are only available on higher-tier plans, which may limit flexibility for smaller projects or personal use cases. Review collected by and hosted on G2.com.

I like Cloudflare Application Security and Performance for its powerful security features, including DDOS protection, WAF, and bot mitigation. I also appreciate its ease of use and the benefits of its global CDN, which help in reducing latency through caching. This has led to improved website speed, better uptime, and reduced infrastructure load. Additionally, I found the initial setup to be straightforward. Review collected by and hosted on G2.com.

I find the pricing for advanced features can become expensive as traffic grows. I wish the pricing could be more flexible with lower cost tiers or usage-based options for advanced security features, making them more accessible for growing businesses. Review collected by and hosted on G2.com.

What I like most is how much Cloudflare lets you do in one place without introducing noticeable latency. You point your DNS at Cloudflare and, all of a sudden, you’ve got DDoS protection, a WAF, bot management, and CDN caching working together, instead of having to stitch five different vendors into a single setup.

A concrete example is rate limiting: the rules are dead simple to create—something like “block an IP hitting /login more than 20 times a minute”—and you can see the impact in the analytics dashboard within minutes. There’s no waiting around for logs to slowly trickle in before you know whether it’s doing what you intended.

It’s also worth calling out that the free/cheap tier is genuinely useful rather than just a teaser. Basic DDoS protection and CDN are free, so even a small side project can get real protection without feeling like it’s just being funneled toward an enterprise pitch deck. Review collected by and hosted on G2.com.

A few things stand out.

Over the years, the WAF rule language and dashboard have become more complex. There are now multiple overlapping products and rule layers (WAF, Rulesets, Bot Management, Page Rules vs. Rules) that can accomplish similar goals, and it isn’t always clear which one should “own” a given policy. New users will often create a rule in one place and then wonder why traffic still isn’t being blocked, only to find that a rule in another layer is overriding or interfering.

Debugging false positives is another pain point. When the WAF blocks a legitimate user (which can happen with aggressive managed rulesets), the error page is generic, and figuring out exactly which rule fired usually means digging through logs. Those logs also aren’t consistently available on lower-tier plans, since proper WAF event logging is often gated behind Enterprise pricing.

Pricing can also jump significantly between tiers. The free and Pro plans are great, but once you need advanced bot management, custom WAF rules at scale, or stronger support SLAs, the cost can rise sharply into enterprise territory. It ends up feeling like a steep cliff rather than a gradual scale-up. Review collected by and hosted on G2.com.

So I basically know that when I don't have the time to look up information on the website to b proven legit, if it is stamped with the cloudflare logo at the bottom or top of the website I totally trust it one hundred percent. Cloudflare has a wonderful security and performance program all in itself let alone a whole program of amazing features. Review collected by and hosted on G2.com.

I have not found much on the cloud flare application security and performance that I don't like so far. Love it actually and think its wonderful along with sum of the extra features that come with it as well. Review collected by and hosted on G2.com.

I really like the security of this application. Cloudflare works really well with GoDaddy, AWS, and many other providers. I recently started using Modal for my AI as a serverless provider, but I ran into some difficulties, and Cloudflare came in clutch and helped me run the model more efficiently. Review collected by and hosted on G2.com.

The UI is a little complex and can feel nested at times, which makes it confusing. Review collected by and hosted on G2.com.