I use Cloudflare Application Security and Performance to keep our app fast and online. I love that it automatically handles site speed and blocks threats in the background, which gives me peace of mind knowing our users have a smooth experience. What I like the most is how it's 'set it and forget it'. The Global CDN and automated threat protection work seamlessly in the background to keep our app fast and safe with minimal developer setup. I also love the clear dashboard—it gives me great visibility into our traffic and blocked attacks without needing a technical background to understand it. The combination of these features provides me with complete peace of mind and operational autonomy. The dashboard and consolidated features in one place were key reasons for switching to Cloudflare, and I found the initial setup fairly easy. Review collected by and hosted on G2.com.

I find much of the help doc written for deep engineers rather than me as a PM trying to troubleshoot. I feel that security settings and help documentation could be simplified for a non-tech person. Review collected by and hosted on G2.com.

I like the single-pane-of-glass dashboard in Cloudflare Application Security and Performance because it lets us manage security rules, caching, and traffic routing across our entire streaming infrastructure without needing to switch between different tools. The WAF and bot management features run seamlessly in the background, keeping our origin servers safe and saving us hundreds of engineering hours by blocking threats before they reach the servers. The edge caching and smart routing speed up API responses and media delivery globally, ensuring our video playback is fast and uninterrupted. I also appreciate the smooth onboarding process, which took less than an hour. The ability to consolidate our edge security and media acceleration into one unified network really helps reduce our origin server load during high-traffic events. Review collected by and hosted on G2.com.

The enterprise pricing model feels opaque and scales up quickly when you need advanced feature add-ons for high-volume streaming traffic. Additionally, propagating complex custom WAF rules or worker scripts across their global edge network can occasionally take longer than expected during live events. To improve Cloudflare Application Security and Performance, the analytics interface could offer more granular, real-time logging without requiring additional paid add-ons. It would also help if they simplified the UI for managing complex page rules and worker deployments across multiple streaming domains. Review collected by and hosted on G2.com.

What I like most is that Cloudflare brings DNS management, performance, and security together in one platform. As someone who oversees our websites and landing pages from a marketing perspective, I can quickly review DNS records and make updates when we connect new tools or campaigns without digging through a complicated interface. I also appreciate the added security layer it gives our sites, since bot protection and traffic filtering in front of our websites gives our team more confidence, especially since our sites are a key source of customer leads. It offers enough depth for technical work while keeping routine tasks manageable for a business user like me. Review collected by and hosted on G2.com.

Cloudflare has a large number of products, settings, and technical options. That is valuable, but it can feel overwhelming when trying to figure out which features or settings are actually relevant to our websites. Some of the more advanced security and caching settings require a fair amount of technical knowledge, and clearer explanations inside the dashboard about what a setting does and how it might affect the site would help business and marketing users like me feel more confident making changes. DNS, caching, proxying, and firewall settings can also interact with each other, so it helps to understand the consequences before adjusting anything advanced. Review collected by and hosted on G2.com.

I like the cost, performance, and ease of use of Cloudflare Application Security and Performance. Even on the free tier, there's a good standard of product that helps me. I find the paid plans valuable because they include allowances for additional filters and rules over the free one. The initial setup was super easy, and I obviously benefit from their DNS and domain registrar services. I'm also looking into using their Storage. Review collected by and hosted on G2.com.

Nothing. Review collected by and hosted on G2.com.

I like that all of the solutions are managed in one single console, and that the application all work together seamlessly and are very well integrated. The initial setup was very easy, with a lot of it working out of the box, and we only needed to tweak a few things to get it to where we need it to be. Review collected by and hosted on G2.com.

I think that their zero trust solution they offer is not as robust as some of its competitors, and that's why we are not using that product currently. I feel like their zero trust solution is primarily targeted at mid-sized customers, sub 2,500 users. As a larger organization, it doesn't seem like it has all the needed functionality. Review collected by and hosted on G2.com.

What I like best about Cloudflare Application Security and Performance is the combination of affordability, ease of use, and strong security capabilities. The pricing is very competitive compared to similar solutions, making it accessible even for smaller teams. At the same time, the platform is easy to build, configure, and manage, with a straightforward setup process that doesn’t require heavy effort.

On top of that, Cloudflare provides robust security features, including effective protection against common web threats, DDoS mitigation, and performance optimization tools. This balance of cost, simplicity, and powerful functionality makes it a highly practical solution for managing and securing applications. Review collected by and hosted on G2.com.

The jump in cost to access some premium features doesn’t feel reasonable for SMBs. Review collected by and hosted on G2.com.

I like the simple access and easy navigation with Cloudflare Application Security and Performance, which makes it easy to connect and migrate from other services like GoDaddy. It's easy to set up domains, check locations for servers, and map APIs for connection to the website. The process of switching from Google was very easy, which I appreciate, given Google's complexity and limitations. Review collected by and hosted on G2.com.

We experienced some downtime with Cloudflare Application Security and Performance, which is not cool. Review collected by and hosted on G2.com.

Honestly, their WAF is top-notch and surprisingly easy to configure. I really value how fast we can push custom rules when a new vulnerability drops or when we're seeing weird traffic anomalies. The real-time visibility is great for threat monitoring, and getting those security events forwarded into our SIEM for deeper correlation is a pretty seamless process. It handles the heavy lifting for DDoS mitigation on autopilot, which gives me peace of mind. Review collected by and hosted on G2.com.

The main headache is around log retention and exporting. Getting granular, real-time logs pushed out to a SIEM can be unnecessarily restrictive and expensive if you aren't on the higher enterprise tiers. Also, while their managed rulesets are generally solid, tuning out false positives sometimes requires writing some pretty complex regex exceptions to ensure you aren't accidentally blocking legitimate API traffic. Support response times can also lag a bit unless you're a massive enterprise account. Review collected by and hosted on G2.com.

I appreciate Cloudflare Application Security and Performance for its robust security features like DDoS protection and the advanced web application firewall. It's also very strong in bot mitigation, which is crucial for keeping sites secure from automated threats. Additionally, it boosts performance through a global content delivery network and smart routing. I find it really effective in securing the whole application from threats and attacks. Another thing I like is the ease of setup since it's a SaaS solution—it's straightforward to configure, and the UI-based admin part is quite easy. Review collected by and hosted on G2.com.

The main challenge I've noticed with Cloudflare Application Security and Performance is related to integration. When integrating with solutions like managed detection response systems, it's not as straightforward as expected. Most of the times, it doesn't work the way we are expecting, and it often creates duplicate events. Even though the integration methods are supposed to follow Cloudflare's documentation, these issues still occur. Review collected by and hosted on G2.com.

I use Cloudflare Application Security and Performance because it offers a ton of free features that other platforms usually charge for. The global edge network helps my customers access the website super fast with almost no lag, which is a huge benefit. Cloudflare also caches websites to make it faster for users, and I appreciate the easy-to-navigate dashboard that provides a single point to access security and insights without needing to switch between multiple tabs. Setting up Cloudflare was easy and simple, with clear rules on what to do, which made the initial setup process smooth. Review collected by and hosted on G2.com.

The customer support for non-enterprise users is hard to access. The Cloudflare dashboard needs improvement due to the service-bloat that hides important features. I suggest adding an AI bot for initial queries and routing to support assistants for complex issues. Additionally, personalized dashboards would be helpful to prioritize important features. Review collected by and hosted on G2.com.