Cloudflare
Cloudflare offers a portfolio covering applying access policy to users, applications or traffic, protecting availability during malicious traffic floods, protecting or governing business messaging and applying security rules to application requests. The entries in this catalog include Cloudflare Access, Cloudflare DDoS Protection, Cloudflare Email Security, Cloudflare Gateway and Cloudflare WAF. Cloudflare Access focuses on identity-aware access to private applications. Cloudflare DDoS Protection focuses on network and application attack mitigation. Cloudflare Email Security focuses on email phishing and impersonation protection. When reviewing Cloudflare, compare the named products individually: a platform family, a specific module and a managed service can have different scopes and purchasing requirements. Selection should account for identity integration, application reachability, traffic routing and the user experience during a staged rollout. Portfolio detail - Cloudflare Access: the catalog lists Zero trust network access, Device posture checks, Private application access. - Cloudflare DDoS Protection: the catalog lists DDoS attack detection, Network-layer protection, Attack visibility and reporting. - Cloudflare Email Security: the catalog lists Phishing detection, Business email compromise detection, Attachment threat analysis. - Cloudflare Gateway: the catalog lists Zero trust network access, Secure web gateway, Cloud access security broker. - Cloudflare WAF: the catalog lists Web request filtering, OWASP attack coverage, Bot traffic controls. For procurement, map each required capability to a named offering and confirm the edition, dependencies and delivery responsibility with the vendor. Product-level entries below provide the operational context and evaluation questions for that comparison.
Documented Software Products (7)
Cloudflare One SASE
Cloud-native SASE and SSE platform integrating ZTNA (Access), Secure Web Gateway (Gateway), Remote Browser Isolation (RBI), and Cloud Access Security Broker (CASB).
Cloudflare Magic Transit
BGP Anycast-routed DDoS protection and traffic acceleration for on-premise, cloud, and hybrid enterprise networks.
Cloudflare Access
Cloudflare Access from Cloudflare focuses on identity-aware access to private applications. It is secure access and networking technology used for applying access policy to users, applications or traffic. Capabilities - Zero trust network access: Grants access to the applications or resources defined by policy rather than relying solely on network location. - Device posture checks: Uses the condition of the connecting device as an input to access decisions. - Private application access: Connects authorized users to private applications according to access policy. - Remote workforce access: Addresses secure connectivity for users working beyond a traditional office network. Use and operational context Cloudflare Access is relevant to teams supporting distributed users and application access when the requirement centers on applying access policy to users, applications or traffic. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Deployment: Cloud service / SaaS; Self-managed / on-premises option documented by the vendor. Before adoption, review identity integration, application reachability, traffic routing and the user experience during a staged rollout. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Cloudflare Access focuses on applying access policy to users, applications or traffic. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Cloudflare DDoS Protection
Cloudflare DDoS Protection from Cloudflare focuses on network and application attack mitigation. It is DDoS mitigation technology or service used for protecting availability during malicious traffic floods. Capabilities - DDoS attack detection: Identifies traffic associated with distributed denial-of-service activity. - Network-layer protection: Addresses the network-layer attack scope stated by the vendor. - Attack visibility and reporting: Provides information for assessing observed attack traffic and mitigation activity. - Mitigation orchestration: Supports applying the mitigation approach documented for the deployment. Use and operational context Cloudflare DDoS Protection is relevant to organizations safeguarding network or application availability when the requirement centers on protecting availability during malicious traffic floods. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Deployment: Cloud service / SaaS. Before adoption, review traffic routing, attack coverage, mitigation activation and communication arrangements during an attack. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Cloudflare DDoS Protection focuses on protecting availability during malicious traffic floods. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Cloudflare Email Security
Cloudflare Email Security from Cloudflare focuses on email phishing and impersonation protection. It is email and messaging security technology used for protecting or governing business messaging. Capabilities - Phishing detection: Analyzes email threats that try to mislead recipients into sharing information or taking unsafe actions. - Business email compromise detection: Focuses on impersonation and social engineering patterns that may not involve a malicious attachment. - Attachment threat analysis: Examines or evaluates attachments using the mechanisms documented by the vendor. - Malicious link protection: Addresses threats carried through links in messages. - Impersonation protection: Identifies attempts to misuse a trusted sender identity or appearance. - Outbound data controls: Adds policy controls for the movement of sensitive information through supported email workflows. Use and operational context Cloudflare Email Security is relevant to teams administering email protection and message investigation when the requirement centers on protecting or governing business messaging. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Deployment: Cloud service / SaaS. Before adoption, review mail routing or API permissions, incident handling, legitimate-message delivery and the exact services included in the license. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Cloudflare Email Security focuses on protecting or governing business messaging. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Cloudflare Gateway
Cloudflare Gateway from Cloudflare focuses on secure web gateway and DNS filtering. It is secure access and networking technology used for applying access policy to users, applications or traffic. Capabilities - Zero trust network access: Grants access to the applications or resources defined by policy rather than relying solely on network location. - Secure web gateway: Applies security policy to users' internet-bound traffic. - Cloud access security broker: Provides policy and visibility for the cloud application interactions covered by the product. - Data loss prevention controls: Adds sensitive-data policy enforcement to the access or traffic protection workflow. - Private application access: Connects authorized users to private applications according to access policy. - Remote workforce access: Addresses secure connectivity for users working beyond a traditional office network. Use and operational context Cloudflare Gateway is relevant to teams supporting distributed users and application access when the requirement centers on applying access policy to users, applications or traffic. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Deployment: Cloud service / SaaS. Before adoption, review identity integration, application reachability, traffic routing and the user experience during a staged rollout. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Cloudflare Gateway focuses on applying access policy to users, applications or traffic. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.
Cloudflare WAF
Cloudflare WAF from Cloudflare focuses on web application request inspection and attack filtering. It is web application protection technology used for applying security rules to application requests. Capabilities - Web request filtering: Applies protection rules to requests reaching the web applications covered by the deployment. - OWASP attack coverage: Targets application attack classes referenced in the product's protection documentation. - Bot traffic controls: Adds controls for automated traffic that can create application abuse or availability problems. - Rate limiting: Restricts request volume according to the limits defined by an administrator. - Attack signatures: Matches requests against the attack signatures or rule sets supplied for the product. - DDoS mitigation integration: Can be evaluated within the vendor's documented application availability and attack mitigation scope. - Virtual patching: Uses protective rules to reduce exposure while application remediation is being arranged. Use and operational context Cloudflare WAF is relevant to application owners and security teams protecting web services when the requirement centers on applying security rules to application requests. Scope the evaluation around the functions listed above and the assets or workflows that need coverage. A useful trial should use representative business conditions so the team can assess the quality of the results and the effort needed to act on them. Deployment and evaluation Deployment: Cloud service / SaaS. Before adoption, review application onboarding, rule tuning, false-positive handling and behavior under representative legitimate traffic. Assign an owner for administration, document required permissions and identify how the product or service will fit the existing operating process. Buyer questions - What is the main purpose? Cloudflare WAF focuses on applying security rules to application requests. - What should a proof of concept establish? Test the listed capabilities against representative assets and workflows, record useful results and unresolved gaps, and confirm who handles follow-up work. - What should be confirmed before purchase? Ask the vendor which edition or service scope includes the required features, which dependencies must be configured and what licensing or contract terms apply. Pricing has not been verified for this catalog.