Cloudflare, Inc. (NET) Company Overview

What does Cloudflare do?

Cloudflare, Inc. is a New York Stock Exchange-listed technology company whose Class A shares trade under the ticker NET. It operates a global cloud network that sits between users, applications, websites, APIs, devices, and private networks. The practical objective is to make digital traffic faster, safer, more reliable, and easier to control without requiring each customer to assemble separate appliances, point products, and regional networks. Cloudflare describes this integrated architecture as a “connectivity cloud,” a useful label because the platform now spans content delivery, application security, Zero Trust access, wide-area networking, developer compute, storage, databases, and AI services.

The official company overview organizes the portfolio around application services, network services, developer services, and consumer offerings. Application products include DDoS mitigation, web application firewall, bot management, API protection, content delivery, DNS, and performance tools. Network and Zero Trust products include Cloudflare One, Secure Web Gateway, access control, email security, browser isolation, and network connectivity. Developer services include Workers, Workers AI, R2 object storage, D1 databases, Durable Objects, Vectorize, AI Gateway, Queues, Stream, Images, and related services.

Why does the platform matter to customers?

Cloudflare's relevance comes from architectural consolidation. A multinational enterprise can route traffic through one control plane, apply common security policies, deploy code close to users, and replace portions of legacy hardware or multiple cloud services. Small organizations can begin with a free or self-service plan, while large enterprises can sign negotiated annual contracts with support and committed spending. That breadth gives Cloudflare exposure to cybersecurity, networking, application delivery, edge computing, and AI infrastructure rather than a single narrow software category.

How does Cloudflare make money?

Cloudflare earns substantially all revenue from subscriptions and support. It reports one operating and reportable segment, so investors do not receive a clean revenue split among security, delivery, networking, and developer products. Instead, the economics must be understood through customer type, contract structure, geographic mix, remaining performance obligations, and expansion behavior. The business combines a freemium acquisition engine, pay-as-you-go usage, and negotiated enterprise contracts.

How does the land-and-expand model work?

The official plans and pricing pages show the range from free plans to pay-as-you-go services and customized enterprise agreements. This model produces recurring revenue but also introduces complexity: flexible enterprise commitments may delay the timing of individual product consumption, usage-based services can be variable, and bigger contracts require longer sales cycles and more implementation support.

What does Cloudflare's latest quarter show?

For the quarter ended March 31, 2026, Cloudflare reported strong top-line and cash-flow growth alongside a lower GAAP gross margin and a major operating-model reset. Revenue reached $639.8 million, up 34% year over year. The company ended the quarter with 4,416 large customers, defined as customers generating more than $100,000 in annualized revenue, and dollar-based net retention rose to 118%. Remaining performance obligations reached $2.54 billion, with 64% expected to be recognized over the following 12 months.

The figures are reported in Cloudflare's Q1 2026 earnings release and Form 10-Q. Management also announced a reduction of approximately 1,100 employees, with expected restructuring charges of $140 million to $150 million, including $105 million to $110 million of cash charges. The stated aim is to simplify execution and redirect resources toward the largest growth opportunities, but the change creates near-term execution and morale risk.

Is growth accelerating or simply benefiting from comparisons?

The guidance frame matters as well. For Q2 2026, Cloudflare projected revenue of $664 million to $665 million. For full-year 2026, it projected $2.805 billion to $2.813 billion of revenue and non-GAAP operating income of $418 million to $421 million. Those targets imply continued expansion, but they also make execution after the workforce reduction a central near-term test.

How did Cloudflare become strategically important?

Cloudflare's current position is the result of a sequence of platform expansions rather than one product breakthrough. The company began by protecting and accelerating websites, then used the same global network to move into application security, enterprise networking, developer compute, storage, and AI. Each step increased the number of workloads that could run through the network and made the data generated by traffic more useful.

1. 2009–2010
   Cloudflare was founded and publicly launched as a service to improve website security and performance. The original product established the reverse-proxy architecture that still underpins the platform.
2. 2014
   Universal SSL expanded encrypted web access at no cost. This reinforced the freemium flywheel and made security a default feature rather than an enterprise-only add-on.
3. 2017
   Cloudflare launched Workers, allowing developers to execute code on the network. The move changed Cloudflare from a traffic intermediary into a programmable application platform.
4. 2019
   The company completed its initial public offering and began trading under NET. Public capital supported network expansion, enterprise sales, R&D, and acquisitions.
5. 2021
   R2 object storage introduced a zero-egress-fee proposition, directly challenging a costly convention in public-cloud storage and strengthening the developer platform.
6. 2022
   The Area 1 Security acquisition added cloud-native email security, improving Cloudflare One's ability to compete for broader enterprise security budgets.
7. 2023
   Workers AI and the “connectivity cloud” positioning linked Cloudflare's distributed infrastructure to AI inference, model access, and unified controls.
8. 2026
   The Q1 workforce reduction and operating-model redesign signaled a shift toward fewer priorities, more automation, and higher productivity while preserving investment in network and AI capacity.

Cloudflare's founders' account of the company's origin and the 2017 Workers launch show the strategic continuity: use a distributed network first to protect traffic, then to run increasingly complex workloads. The history matters because the company is still monetizing infrastructure built for earlier products. It also explains the principal risk: every new layer increases technical complexity and the consequences of an outage or security failure.

What creates Cloudflare's connectivity-cloud moat?

Cloudflare's moat is best understood as a reinforcing system rather than a single patent or switching cost. The network spans hundreds of cities, peers with thousands of networks, and handles enough traffic to generate broad security intelligence. The same infrastructure supports multiple products, so a new service can be distributed globally without building a separate regional footprint. Customers gain one policy layer and one vendor relationship; Cloudflare gains more traffic, more threat signals, and more opportunities to cross-sell.

These qualitative ratings reflect the resources described in Cloudflare's FY2025 filing, not a third-party scoring model. Network scale is the strongest resource because replicating local presence, peering, capacity, software, and operational expertise would require years of investment. Product breadth is strategically important because it can reduce procurement complexity and total cost of ownership. The free tier adds distribution and learning, although it also imposes network costs and can expose the company to abuse, litigation, or reputational damage from users who do not pay.

Is the moat durable enough to support pricing power?

Pricing power therefore depends on measurable outcomes: lower latency, fewer security tools, simpler operations, reduced egress or appliance costs, and faster developer deployment. The moat weakens when customers can substitute a public cloud's bundled services, deploy a specialist point product with superior depth, or use multi-vendor architectures to avoid concentration. Cloudflare must keep product quality high across a widening portfolio while preserving the reliability expected from critical infrastructure.

Who are Cloudflare's main competitors?

Cloudflare competes across several overlapping markets, so no single rival defines the entire comparison set. In delivery and edge services, Akamai and Fastly are relevant. In Zero Trust and security service edge, Zscaler, Palo Alto Networks, Cisco, Netskope, and other security platforms compete for enterprise budgets. In cloud infrastructure and developer services, Amazon Web Services, Microsoft Azure, and Google Cloud can bundle compute, storage, networking, and security. Traditional hardware vendors remain alternatives for customers that prefer on-premises or hybrid architectures.

Where is Cloudflare differentiated, and where is it vulnerable?

The FY2025 Form 10-K emphasizes product breadth, performance, scalability, ease of use, geographic coverage, support, programmability, independence, and trust as competitive factors. For a strategy analysis, this resembles a high-rivalry market with strong substitutes and powerful buyers. Cloudflare's response is differentiation through integration and network economics rather than reliance on a single feature.

Which KPIs best explain Cloudflare's performance?

Revenue growth alone does not show whether Cloudflare is deepening enterprise relationships or merely adding small accounts. The most informative operating indicators are large-customer count, dollar-based net retention, remaining performance obligations, regional mix, gross margin, and free cash flow. Together they connect sales execution, customer expansion, contracted demand, infrastructure cost, and cash conversion.

How geographically diversified is revenue?

The most important combination is large-customer growth plus retention. At FY2025 year-end, Cloudflare had 4,298 large customers and dollar-based net retention of 120%; Q1 2026 increased the customer count to 4,416 while retention moderated to 118%. A falling retention rate would suggest weaker cross-selling or optimization, while a rising large-customer count with stable retention would support the connectivity-cloud thesis. RPO adds visibility but should not be treated as cash: timing, contract modifications, and customer consumption still affect recognition.

How strong are profitability, cash flow, and the balance sheet?

Cloudflare combines a liquid balance sheet and positive free cash flow with continuing GAAP losses, substantial stock-based compensation, and convertible debt. For FY2025, revenue was $2.168 billion, up 30%, while GAAP gross profit was $1.615 billion and GAAP operating loss was $207.2 million. Non-GAAP operating income was $303.9 million, or 14% of revenue. Operating cash flow was $603.1 million, and free cash flow was $260.6 million, or 12% of revenue.

What does cash conversion reveal?

The balance sheet is not the principal constraint today; the more important question is earnings quality. Stock compensation is noncash in the period but economically real because it transfers ownership to employees. At the same time, infrastructure spending is necessary to maintain performance and support AI workloads. A credible path to durable value creation therefore requires both GAAP operating leverage and continued free cash flow after network investment, not simply a widening non-GAAP margin.

Who controls Cloudflare and why does governance matter?

Cloudflare has a dual-class structure. Class A shares carry one vote per share, while Class B shares carry ten votes and are concentrated with the co-founders. According to the 2026 proxy statement, Matthew Prince beneficially controlled 39.0% of total voting power as of April 30, 2026, and Michelle Zatlyn controlled 13.4%. Together, those figures imply majority voting influence even though their economic ownership is much lower than their voting control.

What changed in the 2026 governance vote?

The 2026 proxy statement proposed a nonvoting Class C share structure and a founder exchange mechanism intended to preserve founder voting influence while allowing economic diversification. Stockholders approved the proposals on June 30, 2026, as reported in an official Form 8-K. The filing conditioned certain changes on the Class C split becoming effective, so approval should not be confused with confirmation that every implementation step had occurred by the filing date.

For investors, the governance trade-off is clear. Founder control can protect long-horizon network investment from short-term pressure, but it reduces the ability of outside shareholders to change strategy, leadership, or capital allocation. The board's independence and committee oversight matter, yet the voting structure remains the dominant governance fact.

What opportunities and risks could change the story?

Cloudflare's opportunity is to convert a large technical footprint into a larger share of enterprise spending. Its risks arise from the same breadth: more workloads create more revenue potential, but also more capital requirements, competition, regulation, and operational consequences. The strongest analysis therefore pairs each growth vector with the metric or failure mode that could invalidate it.

Which risks are most financially material?

• Gross-margin pressure: Q1 2026 gross margin fell to 71.2% as third-party technology, colocation, bandwidth, depreciation, and employee costs grew. AI and storage may increase revenue while remaining more infrastructure-intensive than mature software products.
• Execution after restructuring: a reduction of approximately 1,100 employees can improve efficiency, but it can also disrupt sales coverage, support, engineering, and culture during a period of ambitious product expansion.
• Reliability concentration: customers route critical traffic through Cloudflare. A prolonged outage, software defect, or security breach could trigger credits, litigation, customer losses, and reputational damage.
• Competitive bundling: hyperscalers and security suites can use existing cloud commitments, channels, and broader product bundles to make standalone comparisons difficult.
• Regulatory and geographic exposure: privacy, data-transfer, content, encryption, and cybersecurity rules differ across jurisdictions. Cloudflare's China offering also depends on a local network partner, creating operational and geopolitical dependency.

What is the key takeaway for a DCF analysis?

Cloudflare is a high-growth connectivity platform with a rare combination of global network scale, cybersecurity relevance, developer reach, and recurring enterprise revenue. The central valuation question is not whether demand for internet security, networking, and AI infrastructure will grow; it is how much of that demand Cloudflare can monetize while converting growth into durable GAAP profit and free cash flow.

Which variables drive intrinsic value?

For students and researchers, Cloudflare is a useful case study in platform strategy: a company can turn one infrastructure asset into several adjacent markets, but each adjacency changes the cost structure and competitive set. For investors, the most disciplined approach is to connect operating KPIs to cash-flow assumptions. Strong traffic growth or product announcements matter only when they improve contracted demand, customer expansion, margins, and per-share cash generation over time.