I really appreciate that Cloudflare Application Security and Performance is easy to use and set up. It solved a major issue I had where customers couldn't access or sign up due to traffic being diverted to a sinkhole by a local Internet provider. Cloudflare provided a good workaround for that problem. I mainly use its DNS service, which is quite valuable to me. Review collected by and hosted on G2.com.

nothing, I havent really had a chance to push usage to that limift where i find some issue Review collected by and hosted on G2.com.

I love how it combines really good DDoS protection and WAF. You get really got security that actually speeds up your site instead of slowing it down. Review collected by and hosted on G2.com.

I would say the bot protection is kind of aggressive and could block real users or lock them in CAPTCHA loops. Review collected by and hosted on G2.com.

I appreciate Cloudflare Application Security and Performance as a convenient all-in-one solution that integrates workers and domain control, making it easier for me by keeping everything in one place. The integration with Git is also a nice touch. I love the combination of speed and security it offers, with features like bot blocking and DDNS protection that simplify my life by ensuring my web apps are protected from attacks and can maintain reliable uptime. The initial setup was very easy, with every step being self-explanatory and supported by good information. Review collected by and hosted on G2.com.

I occasionally struggle with navigation around the site. Review collected by and hosted on G2.com.

I use Cloudflare Application Security and Performance to keep our app fast and online. I love that it automatically handles site speed and blocks threats in the background, which gives me peace of mind knowing our users have a smooth experience. What I like the most is how it's 'set it and forget it'. The Global CDN and automated threat protection work seamlessly in the background to keep our app fast and safe with minimal developer setup. I also love the clear dashboard—it gives me great visibility into our traffic and blocked attacks without needing a technical background to understand it. The combination of these features provides me with complete peace of mind and operational autonomy. The dashboard and consolidated features in one place were key reasons for switching to Cloudflare, and I found the initial setup fairly easy. Review collected by and hosted on G2.com.

I find much of the help doc written for deep engineers rather than me as a PM trying to troubleshoot. I feel that security settings and help documentation could be simplified for a non-tech person. Review collected by and hosted on G2.com.

I like the single-pane-of-glass dashboard in Cloudflare Application Security and Performance because it lets us manage security rules, caching, and traffic routing across our entire streaming infrastructure without needing to switch between different tools. The WAF and bot management features run seamlessly in the background, keeping our origin servers safe and saving us hundreds of engineering hours by blocking threats before they reach the servers. The edge caching and smart routing speed up API responses and media delivery globally, ensuring our video playback is fast and uninterrupted. I also appreciate the smooth onboarding process, which took less than an hour. The ability to consolidate our edge security and media acceleration into one unified network really helps reduce our origin server load during high-traffic events. Review collected by and hosted on G2.com.

The enterprise pricing model feels opaque and scales up quickly when you need advanced feature add-ons for high-volume streaming traffic. Additionally, propagating complex custom WAF rules or worker scripts across their global edge network can occasionally take longer than expected during live events. To improve Cloudflare Application Security and Performance, the analytics interface could offer more granular, real-time logging without requiring additional paid add-ons. It would also help if they simplified the UI for managing complex page rules and worker deployments across multiple streaming domains. Review collected by and hosted on G2.com.

What I like most is that Cloudflare brings DNS management, performance, and security together in one platform. As someone who oversees our websites and landing pages from a marketing perspective, I can quickly review DNS records and make updates when we connect new tools or campaigns without digging through a complicated interface. I also appreciate the added security layer it gives our sites, since bot protection and traffic filtering in front of our websites gives our team more confidence, especially since our sites are a key source of customer leads. It offers enough depth for technical work while keeping routine tasks manageable for a business user like me. Review collected by and hosted on G2.com.

Cloudflare has a large number of products, settings, and technical options. That is valuable, but it can feel overwhelming when trying to figure out which features or settings are actually relevant to our websites. Some of the more advanced security and caching settings require a fair amount of technical knowledge, and clearer explanations inside the dashboard about what a setting does and how it might affect the site would help business and marketing users like me feel more confident making changes. DNS, caching, proxying, and firewall settings can also interact with each other, so it helps to understand the consequences before adjusting anything advanced. Review collected by and hosted on G2.com.

I like the cost, performance, and ease of use of Cloudflare Application Security and Performance. Even on the free tier, there's a good standard of product that helps me. I find the paid plans valuable because they include allowances for additional filters and rules over the free one. The initial setup was super easy, and I obviously benefit from their DNS and domain registrar services. I'm also looking into using their Storage. Review collected by and hosted on G2.com.

Nothing. Review collected by and hosted on G2.com.

I like that all of the solutions are managed in one single console, and that the application all work together seamlessly and are very well integrated. The initial setup was very easy, with a lot of it working out of the box, and we only needed to tweak a few things to get it to where we need it to be. Review collected by and hosted on G2.com.

I think that their zero trust solution they offer is not as robust as some of its competitors, and that's why we are not using that product currently. I feel like their zero trust solution is primarily targeted at mid-sized customers, sub 2,500 users. As a larger organization, it doesn't seem like it has all the needed functionality. Review collected by and hosted on G2.com.

What I like best about Cloudflare Application Security and Performance is the combination of affordability, ease of use, and strong security capabilities. The pricing is very competitive compared to similar solutions, making it accessible even for smaller teams. At the same time, the platform is easy to build, configure, and manage, with a straightforward setup process that doesn’t require heavy effort.

On top of that, Cloudflare provides robust security features, including effective protection against common web threats, DDoS mitigation, and performance optimization tools. This balance of cost, simplicity, and powerful functionality makes it a highly practical solution for managing and securing applications. Review collected by and hosted on G2.com.

The jump in cost to access some premium features doesn’t feel reasonable for SMBs. Review collected by and hosted on G2.com.

Honestly, their WAF is top-notch and surprisingly easy to configure. I really value how fast we can push custom rules when a new vulnerability drops or when we're seeing weird traffic anomalies. The real-time visibility is great for threat monitoring, and getting those security events forwarded into our SIEM for deeper correlation is a pretty seamless process. It handles the heavy lifting for DDoS mitigation on autopilot, which gives me peace of mind. Review collected by and hosted on G2.com.

The main headache is around log retention and exporting. Getting granular, real-time logs pushed out to a SIEM can be unnecessarily restrictive and expensive if you aren't on the higher enterprise tiers. Also, while their managed rulesets are generally solid, tuning out false positives sometimes requires writing some pretty complex regex exceptions to ensure you aren't accidentally blocking legitimate API traffic. Support response times can also lag a bit unless you're a massive enterprise account. Review collected by and hosted on G2.com.