I use Cloudflare Application Security and Performance because it offers a ton of free features that other platforms usually charge for. The global edge network helps my customers access the website super fast with almost no lag, which is a huge benefit. Cloudflare also caches websites to make it faster for users, and I appreciate the easy-to-navigate dashboard that provides a single point to access security and insights without needing to switch between multiple tabs. Setting up Cloudflare was easy and simple, with clear rules on what to do, which made the initial setup process smooth. Review collected by and hosted on G2.com.

The customer support for non-enterprise users is hard to access. The Cloudflare dashboard needs improvement due to the service-bloat that hides important features. I suggest adding an AI bot for initial queries and routing to support assistants for complex issues. Additionally, personalized dashboards would be helpful to prioritize important features. Review collected by and hosted on G2.com.

Cloudflare is exceptionally fast, secure and scalable and works very well. Unforuntately they have recently run into some issues with network reliability which is obviously a really big problem for a compnay like them. Review collected by and hosted on G2.com.

Cloudflare has recently over the past two years experience some performance issues where their network, and by extsnion, ours has gone down. Review collected by and hosted on G2.com.

They have a lot of free tier features to get your site started. Review collected by and hosted on G2.com.

It was kind of complicated to set everything up by myself initially but I got there by just lightening the load. Review collected by and hosted on G2.com.

I use Cloudflare Application Security and Performance as the first line of defense against DDoS attacks for my applications, which means I don't have to reinvent the wheel with IP blacklisting. I really appreciate the out-of-the-box experience that doesn't throw me into configuration hell. It just works without me needing to do anything special. Plus, I trust the technology because it's by Cloudflare. It's easy to set up with no or low code required. Review collected by and hosted on G2.com.

I like trusting that I will not be adversely impacted by attackers, but it's less clear how it works internally. Review collected by and hosted on G2.com.

Hey Hey I like best about Cloudflare Application Security and Performance is how integrated and frictionless it is—security, reliability, and speed all work together without adding operational complexity.

A few highlights:

Security baked in by default: WAF, DDoS protection, bot management, and rate limiting are tightly integrated, so protecting apps doesn’t feel like bolting on extra tools.

Performance at global scale: The global Anycast network, smart caching, and Argo routing noticeably reduce latency and improve availability for users everywhere.

Ease of use: The dashboard, rules engine, and APIs make it easy to deploy changes quickly, iterate on policies, and troubleshoot issues without slowing teams down.

Strong visibility and control: Detailed analytics and logs help teams understand traffic patterns, attacks, and performance bottlenecks in real time.

Developer-friendly: Features like Workers and flexible rule customization let teams tailor behavior without sacrificing security or speed.

Overall, Cloudflare does a great job of simplifying app security while actively improving performance, which is a rare and valuable combination. Review collected by and hosted on G2.com.

A few things I dislike about Cloudflare Application Security and Performance—while still recognizing it’s a strong platform overall—are:

Learning curve for advanced features: The basics are easy to get started with, but configuring more advanced WAF rules, bot management, and rate limiting can become complex and sometimes feels unintuitive.

Limited transparency in some detections: It isn’t always clear why certain requests are blocked or challenged, which can slow down troubleshooting and make tuning harder.

Pricing complexity: Some of the more powerful security and performance features are locked behind higher tiers, and it’s not always obvious what’s included without digging through the documentation.

Rule debugging can be tedious: Testing and validating rules in production-like scenarios takes time, especially when changes have unintended side effects.

UI inconsistencies: Some settings are spread across different areas of the dashboard, so navigation can feel fragmented at times.

Overall, the biggest downside is that the platform’s power and flexibility come with added complexity—especially for teams that want fine-grained control without deep Cloudflare expertise. Review collected by and hosted on G2.com.

Cloudflare makes it easy to create and manage security rules with a lot of flexibility. The firewall rule setup is powerful but still intuitive, and the DNS firewall is fast, reliable, and gives great visibility into traffic. It’s a solid balance of performance and security, and once configured, it runs quietly in the background doing exactly what it’s supposed to do. Review collected by and hosted on G2.com.

Overall, the platform is excellent, but some advanced features require an Enterprise plan, which can be a higher cost barrier for smaller teams or growing businesses. While the value is there, the pricing jump to access certain capabilities (around $2,400 per year) may feel steep if you don’t need everything at that tier. Review collected by and hosted on G2.com.

I like that Cloudflare Application Security and Performance is easy to set up and doesn't require a lot of tweaking. It runs seamlessly without much intervention from our team, and it takes care of what we need without requiring a lot of bandwidth. This was a big reason we switched from Akamai, as Cloudflare provided a simpler solution that required less maintenance. The initial setup was very straightforward, which was highly appreciated. Review collected by and hosted on G2.com.

The commercial model can be complex and deceptively expensive. We did not understand initially how it was built, and it uses a lot more units than we were expecting. Review collected by and hosted on G2.com.

The upside of using this platform is that I don't have to use two-factor authentication. With our previous security platform we did and it was time consuming. With Cloudflare I am connected automatically, and it is easy to troubleshoot if ever needed. Review collected by and hosted on G2.com.

There is currently nothing I dislike about Cloudflare. Review collected by and hosted on G2.com.

Cloudflare stands out for its user-friendly interface, featuring an intuitive dashboard that simplifies the management of security and performance settings. One of its key strengths is the ease of implementation, allowing users to enable protection rapidly with minimal setup required. The platform offers a comprehensive set of features, such as DDoS protection, WAF, CDN, and performance optimization tools, which encourages frequent use for daily monitoring and traffic management. Additionally, Cloudflare integrates smoothly with existing infrastructure and cloud services, making adoption straightforward. The combination of responsive customer support and thorough documentation further assists in resolving any issues efficiently. Review collected by and hosted on G2.com.

Although the platform offers a broad range of features, some of the more advanced configuration options can make it less user-friendly, particularly for those who are new to security platforms. While setting up the system is usually straightforward, adjusting and fine-tuning security rules may involve a learning curve. Frequent use of the platform can reveal some shortcomings in its reporting and analytics capabilities, especially when seeking more detailed insights. Additionally, certain integrations and features are only available in higher-priced plans, which can affect how easily the platform integrates with other tools. Customer support response times also tend to vary depending on the level of service plan chosen. Review collected by and hosted on G2.com.

From an infrastructure management perspective, Cloudflare is relatively easy to deploy and manage. DNS management, traffic routing, and security rules are centralized in a single dashboard, making changes quick and auditable. The visibility provided through logs, analytics, and security insights helps the IT team monitor traffic patterns, identify threats, and make informed decisions without deep manual investigation. Review collected by and hosted on G2.com.

There are areas where Cloudflare could be improved from an admin perspective. Some advanced security and performance features require careful configuration to avoid false positives or unintended blocking. Additionally, deeper analytics and log retention options are often tied to higher-tier plans, which can be a consideration for budgeting and long-term monitoring needs. Review collected by and hosted on G2.com.