Web hosting review

Cloudflare

Cloudflare runs static sites and full-stack apps on Workers and Pages across its global network, with usage billed on top of a $5 Workers Paid plan. Its site clearly explains prices, refund and renewal rules, database restore points, where storage can be kept and its public status page. Support response times below Enterprise, a company registration number, malware scanning on self-serve plans and how to take deployed site files with you were harder to pin down from the website alone.

You sign with
Cloudflare, Inc., USA
Founded · based
2009 · San Francisco, California, USA

All ten signals at a glance

5 clear × 10 + 5 partly clear × 5 + 0 not seen × 0 = 75 / 100

Price over time

No intro price, so nothing jumps at renewal

Cloudflare shows one monthly price per plan, with no intro discount and no renewal price. Workers Paid is a $5 monthly minimum per account, with usage beyond the included amounts billed on top. Pro and Business are website plans that also raise Pages build limits, and they cost less per month when billed yearly. Monthly prices on monthly billing, in US dollars, from cloudflare.com/plans and the Workers pricing docs on 21 Oct 2026. The terms say fees exclude taxes.

Price per month, before and after renewalSame price throughout
Workers Paid
$5.00
same
Pro
$25.00
same
Business
$250.00
same
$0$100$200$300

What we found

Each finding links to the Cloudflare page it came from. Prices are the US-dollar prices on cloudflare.com and its developer docs; the terms say fees exclude taxes.

An AI read Cloudflare's public pages to write these findings. When something is partly clear or not seen, it may be explained on a page we didn't read, or our scan may have missed it.
Price

Honest pricing

Clear · 10 pts

Cloudflare shows one price per plan, with no separate intro or renewal price. Workers Paid costs a minimum of $5 a month per account and includes 10 million requests and 30 million CPU milliseconds a month; more costs $0.30 per million requests and $0.02 per million CPU milliseconds. Workers Free allows 100,000 requests a day. The Pro website plan, which also raises Pages build limits, is $25/mo billed monthly or $20/mo billed yearly, and Business is $250 or $200. The terms say fees exclude taxes, and the billing policy says sales tax is charged based on your address.

People

Who runs it

Partly clear · 5 pts

The self-serve subscription agreement says you sign with Cloudflare, Inc., 101 Townsend St., San Francisco, under California law. The Our Story page says Cloudflare was founded in 2009 and lists San Francisco as its headquarters. The privacy policy names affiliates with addresses, including Cloudflare Netherlands B.V. in Amsterdam, Cloudflare Germany GmbH in Munich and Cloudflare, Ltd. in London. We didn't see a company registration number on the pages we read.

Problems

Uptime in public

Clear · 10 pts

A public status page tracks 131 services and sites, with Workers, Pages, Workers KV and Workers Builds listed separately under Developer Services. For each service it shows how many days had incidents in the last 30 and 90 days. The history page lists past incidents and data centre maintenance with dates and status, such as a resolved Zero Trust connectivity incident on 20 Oct 2026, with older entries behind a Load more button. The Business plan has a 100% uptime SLA with service credits; the plans page lists no SLA for Free and Pro, and the SLA page doesn't say whether it covers Workers or Pages.

People

Reachable support

Partly clear · 5 pts

Free plans get the community forum and Discord, plus support cases for billing, account and registrar issues only. Pro adds support cases from the dashboard, Business adds live chat, and Enterprise adds emergency phone support. Response times are stated only for Enterprise, from 1 hour for urgent cases on the Premium SLA to 48 hours for normal cases on the Standard SLA; the page says no SLAs are offered to Free and pay-as-you-go customers. We didn't see support hours, or which channels come with Workers Paid. Support is in English.

Price

Fair terms

Clear · 10 pts

The self-serve agreement says fees are non-refundable, so we didn't see a money-back period. Subscriptions renew automatically for the same term at the then-current price unless you cancel in the dashboard before the next billing date. Cancellation takes effect at the end of the billing period with no refund for unused time, and the billing policy lists accidental purchases and unused services as non-refundable. Cloudflare must give at least 30 days' notice of price changes. Upgrades are prorated, and downgrades take effect at the end of the period.

Data

Backups you can use

Clear · 10 pts

D1 databases have Time Travel, always on, which restores a database to any minute in the last 30 days on Workers Paid or 7 days on Free. Restores are self-service through Wrangler and cost nothing extra, and you can also export a database to a .sql file. You can roll a Worker back to any of its 100 most recent versions, and a Pages project to any successful production deployment, from the dashboard. Rollbacks don't change data in KV, D1 or other connected storage. We didn't see backups for Workers KV or R2 on the pages we read.

Data

Security basics

Partly clear · 5 pts

Universal SSL certificates are free on all plans and are issued and renewed automatically, covering the root domain and first-level subdomains. Two-factor login works with security keys, an authenticator app or email codes, with one-time backup codes, and super admins can require it for all members. The plans page lists unmetered DDoS protection on every plan. Malware scanning of uploaded files is offered only as a paid add-on on the Enterprise plan, and we didn't see malware scanning on self-serve plans.

Data

Data location

Clear · 10 pts

The network page lists 348 data centre cities, 57 of them in Europe, including Amsterdam, Frankfurt, London and Paris; other pages say 335+ cities. Workers run across this network, while R2 buckets and D1 databases can be locked to an EU, US or FedRAMP jurisdiction, or given a location hint such as Western Europe, when you create them. The self-serve agreement incorporates a data processing addendum that covers the GDPR, using EU standard contractual clauses and the EU-U.S. Data Privacy Framework. The privacy policy says Cloudflare mainly stores information in the US and the European Economic Area.

EuropeNetherlands: AmsterdamGermany: Berlin, FrankfurtUnited Kingdom: LondonFrance: ParisBelgium: BrusselsSpain: MadridPortugal: LisbonItaly: Milan, RomeAustria: ViennaSweden: StockholmFinland: HelsinkiPoland: WarsawSwitzerland: Zürich
Network, other regionsNorth America: 54 citiesLatin America & Caribbean: 64 citiesAsia: 71 cities, plus 36 in mainland ChinaAfrica: 33 citiesMiddle East: 19 citiesOceania: 14 cities
Storage you can choose (R2, D1)Jurisdiction: EU, US or FedRAMPLocation hint: Western or Eastern Europe, Western or Eastern North America, Asia-Pacific, Oceania
Product

Real specs

Partly clear · 5 pts

Workers Free allows 100,000 requests a day with 10 ms of CPU time per request; Workers Paid includes 10 million requests a month, with up to 5 minutes of CPU time per request (30 seconds by default). Each Worker gets 128 MB of memory on both plans, and Paid raises the limit from 100 to 500 Workers per account. Pages allows 500 builds a month on Free, 5,000 on Pro and 20,000 on Business, and Workers Builds include 3,000 or 6,000 build minutes. The Pages product page says all plans come with "unlimited sites, seats, requests, and bandwidth"; the limits page caps projects at 100 per account, and static asset requests are called free and unlimited without a number.

Product

Easy exit

Partly clear · 5 pts

You can export a D1 database to a .sql file with Wrangler, and copy R2 objects with S3 tools such as rclone. Domains on Cloudflare Registrar can be unlocked in the dashboard and moved with an auth code, outside the 60-day ICANN waiting periods; we didn't see a transfer fee, and the registrar page says prices aren't marked up. The account deletion guide says deletion is permanent and only mentions downloading invoices first. We didn't see a way to download a deployed Pages site or Worker, or how long content is kept after an account closes.

What you get per plan

Workers limits come from the limits and pricing docs; build and restore figures come from the Workers Builds and D1 docs. Pages build limits depend on the website plan instead: 500 builds a month on Free, 5,000 on Pro and 20,000 on Business. Bars compare each row against the largest plan.

LimitWorkers FreeWorkers Paid
Requests100,000 a day10 million a month included, then $0.30 per million
CPU time per request10 ms30 s by default, up to 5 min
Memory per Worker
128 MB
128 MB
Workers per account
100
500
Static asset files per Worker
20,000
100,000
Build minutes per month
3,000
6,000
D1 restore window
7 days
30 days

Tech stack

Best for static sites and JavaScript frameworks

Hosts are built for different kinds of sites. Here is what Cloudflare says it runs, and on which plans. Tech fit is separate from the signal score.

Best fit: tools built for it on regular plansSupported: runs on some plans, with limitsVPS plans: you set it up yourself on a serverNot offered: look at another host

Static sites

Best fit

The Pages guides cover static site generators such as Hugo, Jekyll, Eleventy, Gatsby, Docusaurus, MkDocs and Zola. On Workers, requests to static assets are free and unlimited, and storing assets costs nothing extra. The docs now recommend starting new projects on Workers rather than Pages.

Plans: All plans, from Free

Node.js & JavaScript frameworks

Best fit

Framework guides cover Next.js, Astro, Nuxt, SvelteKit, React Router, TanStack Start, Angular and Hono. Workers run a subset of Node.js APIs, such as Buffer, Crypto, HTTP and Streams, rather than the full Node.js runtime; it's on by default from the 2026-08-04 compatibility date.

Plans: All plans, from Free

Python

Supported

Python Workers can use packages such as FastAPI, LangChain and Pydantic, and there are guides for FastAPI and Flask. They need the python_workers compatibility flag, and the page we read doesn't state the Python version.

Plans: All plans, from Free

Docker containers

Supported

Containers run container images built from a Dockerfile, started on demand from a Worker. Instance types range from lite (1/16 vCPU, 256 MiB) to standard-4 (4 vCPUs, 12 GiB, 20 GB disk).

Plans: Workers Paid

Rust

Supported

The Workers product page lists Rust next to JavaScript, TypeScript and Python, with templates to start from.

Plans: All plans, from Free

WordPress & PHP

Not offered

We didn't see WordPress hosting or a PHP runtime on the pages we read. The framework guides and language pages don't mention them.

Plans: Not offered

Sales practices

Worth a closer look

We check five common sales practices and note them next to the score, without changing it. Two need a pass through checkout, which this scan didn't do. We'll add them on the next recheck.

  • Noticed
    "Unlimited" without a stated limit. The Pages product page says all plans come with "unlimited sites, seats, requests, and bandwidth". The limits page caps projects at 100 per account, while static asset requests are called free and unlimited without a number.
  • Not checked yet
    Add-ons ticked for you at checkout. This scan didn't go through checkout. The billing policy lists accidental purchases as non-refundable.
  • Not checked yet
    Prices that change at the payment step. The terms say fees exclude taxes, and the billing policy says sales tax is charged based on your address. We didn't check the final checkout total.
  • Not noticed
    Countdown timers that reset. No timers or sale banners on the pages we read. The homepage banner points to the Connect 2026 event.
  • Not noticed
    Reviews with no source. Customer quotes on the homepage, plans and product pages are credited to named people at Shopify, Intercom and Leagued. Headline figures such as "20% of the Internet" don't cite a source.

Questions to ask Cloudflare

Each partly clear or unseen signal leaves a question that the website didn't answer for us. Cloudflare's support can probably answer them before you buy.

  • Who runs itWhat is Cloudflare, Inc.'s company registration number?
  • Reachable supportWhat support channels and response times come with Workers Paid, Pro and Business?
  • Security basicsDo you scan Workers, Pages sites or uploaded files for malware on self-serve plans?
  • Real specsWhat limits apply to the "unlimited" requests and bandwidth on Pages and static assets?
  • Easy exitCan I download a deployed Pages site or Worker, and how long is content kept after I close my account?