Cloudflare shows one price per plan, with no separate intro or renewal price. Workers Paid costs a minimum of $5 a month per account and includes 10 million requests and 30 million CPU milliseconds a month; more costs $0.30 per million requests and $0.02 per million CPU milliseconds. Workers Free allows 100,000 requests a day. The Pro website plan, which also raises Pages build limits, is $25/mo billed monthly or $20/mo billed yearly, and Business is $250 or $200. The terms say fees exclude taxes, and the billing policy says sales tax is charged based on your address.
Web hosting review
Cloudflare
Cloudflare runs static sites and full-stack apps on Workers and Pages across its global network, with usage billed on top of a $5 Workers Paid plan. Its site clearly explains prices, refund and renewal rules, database restore points, where storage can be kept and its public status page. Support response times below Enterprise, a company registration number, malware scanning on self-serve plans and how to take deployed site files with you were harder to pin down from the website alone.
- Website
- cloudflare.com
- You sign with
- Cloudflare, Inc., USA
- Founded · based
- 2009 · San Francisco, California, USA
All ten signals at a glance
5 clear × 10 + 5 partly clear × 5 + 0 not seen × 0 = 75 / 100
Price over time
No intro price, so nothing jumps at renewal
Cloudflare shows one monthly price per plan, with no intro discount and no renewal price. Workers Paid is a $5 monthly minimum per account, with usage beyond the included amounts billed on top. Pro and Business are website plans that also raise Pages build limits, and they cost less per month when billed yearly. Monthly prices on monthly billing, in US dollars, from cloudflare.com/plans and the Workers pricing docs on 21 Oct 2026. The terms say fees exclude taxes.
Key pages, in brief
Our summary of each page. Open the link to see the original.- 10 million requests a month included
- 30 million CPU ms a month included
- Static asset requests free
- Restore to any minute in that window
- 7 days on Workers Free
- No extra cost to restore
- Workers and Pages listed separately
- Incident days shown for 30 and 90 days
- Incident history with dates and status
What we found
Each finding links to the Cloudflare page it came from. Prices are the US-dollar prices on cloudflare.com and its developer docs; the terms say fees exclude taxes.
The self-serve subscription agreement says you sign with Cloudflare, Inc., 101 Townsend St., San Francisco, under California law. The Our Story page says Cloudflare was founded in 2009 and lists San Francisco as its headquarters. The privacy policy names affiliates with addresses, including Cloudflare Netherlands B.V. in Amsterdam, Cloudflare Germany GmbH in Munich and Cloudflare, Ltd. in London. We didn't see a company registration number on the pages we read.
A public status page tracks 131 services and sites, with Workers, Pages, Workers KV and Workers Builds listed separately under Developer Services. For each service it shows how many days had incidents in the last 30 and 90 days. The history page lists past incidents and data centre maintenance with dates and status, such as a resolved Zero Trust connectivity incident on 20 Oct 2026, with older entries behind a Load more button. The Business plan has a 100% uptime SLA with service credits; the plans page lists no SLA for Free and Pro, and the SLA page doesn't say whether it covers Workers or Pages.
Free plans get the community forum and Discord, plus support cases for billing, account and registrar issues only. Pro adds support cases from the dashboard, Business adds live chat, and Enterprise adds emergency phone support. Response times are stated only for Enterprise, from 1 hour for urgent cases on the Premium SLA to 48 hours for normal cases on the Standard SLA; the page says no SLAs are offered to Free and pay-as-you-go customers. We didn't see support hours, or which channels come with Workers Paid. Support is in English.
The self-serve agreement says fees are non-refundable, so we didn't see a money-back period. Subscriptions renew automatically for the same term at the then-current price unless you cancel in the dashboard before the next billing date. Cancellation takes effect at the end of the billing period with no refund for unused time, and the billing policy lists accidental purchases and unused services as non-refundable. Cloudflare must give at least 30 days' notice of price changes. Upgrades are prorated, and downgrades take effect at the end of the period.
D1 databases have Time Travel, always on, which restores a database to any minute in the last 30 days on Workers Paid or 7 days on Free. Restores are self-service through Wrangler and cost nothing extra, and you can also export a database to a .sql file. You can roll a Worker back to any of its 100 most recent versions, and a Pages project to any successful production deployment, from the dashboard. Rollbacks don't change data in KV, D1 or other connected storage. We didn't see backups for Workers KV or R2 on the pages we read.
Universal SSL certificates are free on all plans and are issued and renewed automatically, covering the root domain and first-level subdomains. Two-factor login works with security keys, an authenticator app or email codes, with one-time backup codes, and super admins can require it for all members. The plans page lists unmetered DDoS protection on every plan. Malware scanning of uploaded files is offered only as a paid add-on on the Enterprise plan, and we didn't see malware scanning on self-serve plans.
The network page lists 348 data centre cities, 57 of them in Europe, including Amsterdam, Frankfurt, London and Paris; other pages say 335+ cities. Workers run across this network, while R2 buckets and D1 databases can be locked to an EU, US or FedRAMP jurisdiction, or given a location hint such as Western Europe, when you create them. The self-serve agreement incorporates a data processing addendum that covers the GDPR, using EU standard contractual clauses and the EU-U.S. Data Privacy Framework. The privacy policy says Cloudflare mainly stores information in the US and the European Economic Area.
Workers Free allows 100,000 requests a day with 10 ms of CPU time per request; Workers Paid includes 10 million requests a month, with up to 5 minutes of CPU time per request (30 seconds by default). Each Worker gets 128 MB of memory on both plans, and Paid raises the limit from 100 to 500 Workers per account. Pages allows 500 builds a month on Free, 5,000 on Pro and 20,000 on Business, and Workers Builds include 3,000 or 6,000 build minutes. The Pages product page says all plans come with "unlimited sites, seats, requests, and bandwidth"; the limits page caps projects at 100 per account, and static asset requests are called free and unlimited without a number.
You can export a D1 database to a .sql file with Wrangler, and copy R2 objects with S3 tools such as rclone. Domains on Cloudflare Registrar can be unlocked in the dashboard and moved with an auth code, outside the 60-day ICANN waiting periods; we didn't see a transfer fee, and the registrar page says prices aren't marked up. The account deletion guide says deletion is permanent and only mentions downloading invoices first. We didn't see a way to download a deployed Pages site or Worker, or how long content is kept after an account closes.
What you get per plan
Workers limits come from the limits and pricing docs; build and restore figures come from the Workers Builds and D1 docs. Pages build limits depend on the website plan instead: 500 builds a month on Free, 5,000 on Pro and 20,000 on Business. Bars compare each row against the largest plan.
| Limit | Workers Free | Workers Paid |
|---|---|---|
| Requests | 100,000 a day | 10 million a month included, then $0.30 per million |
| CPU time per request | 10 ms | 30 s by default, up to 5 min |
| Memory per Worker | 128 MB | 128 MB |
| Workers per account | 100 | 500 |
| Static asset files per Worker | 20,000 | 100,000 |
| Build minutes per month | 3,000 | 6,000 |
| D1 restore window | 7 days | 30 days |
Tech stack
Best for static sites and JavaScript frameworks
Hosts are built for different kinds of sites. Here is what Cloudflare says it runs, and on which plans. Tech fit is separate from the signal score.
Static sites
Best fitThe Pages guides cover static site generators such as Hugo, Jekyll, Eleventy, Gatsby, Docusaurus, MkDocs and Zola. On Workers, requests to static assets are free and unlimited, and storing assets costs nothing extra. The docs now recommend starting new projects on Workers rather than Pages.
Plans: All plans, from FreeNode.js & JavaScript frameworks
Best fitFramework guides cover Next.js, Astro, Nuxt, SvelteKit, React Router, TanStack Start, Angular and Hono. Workers run a subset of Node.js APIs, such as Buffer, Crypto, HTTP and Streams, rather than the full Node.js runtime; it's on by default from the 2026-08-04 compatibility date.
Plans: All plans, from FreePython
SupportedPython Workers can use packages such as FastAPI, LangChain and Pydantic, and there are guides for FastAPI and Flask. They need the python_workers compatibility flag, and the page we read doesn't state the Python version.
Plans: All plans, from FreeDocker containers
SupportedContainers run container images built from a Dockerfile, started on demand from a Worker. Instance types range from lite (1/16 vCPU, 256 MiB) to standard-4 (4 vCPUs, 12 GiB, 20 GB disk).
Plans: Workers PaidRust
SupportedThe Workers product page lists Rust next to JavaScript, TypeScript and Python, with templates to start from.
Plans: All plans, from FreeWordPress & PHP
Not offeredWe didn't see WordPress hosting or a PHP runtime on the pages we read. The framework guides and language pages don't mention them.
Plans: Not offeredSales practices
Worth a closer look
We check five common sales practices and note them next to the score, without changing it. Two need a pass through checkout, which this scan didn't do. We'll add them on the next recheck.
- Noticed"Unlimited" without a stated limit. The Pages product page says all plans come with "unlimited sites, seats, requests, and bandwidth". The limits page caps projects at 100 per account, while static asset requests are called free and unlimited without a number.
- Not checked yetAdd-ons ticked for you at checkout. This scan didn't go through checkout. The billing policy lists accidental purchases as non-refundable.
- Not checked yetPrices that change at the payment step. The terms say fees exclude taxes, and the billing policy says sales tax is charged based on your address. We didn't check the final checkout total.
- Not noticedCountdown timers that reset. No timers or sale banners on the pages we read. The homepage banner points to the Connect 2026 event.
- Not noticedReviews with no source. Customer quotes on the homepage, plans and product pages are credited to named people at Shopify, Intercom and Leagued. Headline figures such as "20% of the Internet" don't cite a source.
Questions to ask Cloudflare
Each partly clear or unseen signal leaves a question that the website didn't answer for us. Cloudflare's support can probably answer them before you buy.
- Who runs itWhat is Cloudflare, Inc.'s company registration number?
- Reachable supportWhat support channels and response times come with Workers Paid, Pro and Business?
- Security basicsDo you scan Workers, Pages sites or uploaded files for malware on self-serve plans?
- Real specsWhat limits apply to the "unlimited" requests and bandwidth on Pages and static assets?
- Easy exitCan I download a deployed Pages site or Worker, and how long is content kept after I close my account?
Pages we read
43 pages · all read 21 Oct 2026- cloudflare.com
- cloudflare.com/plans
- cloudflare.com/plans/developer-platform
- cloudflare.com · Pages product page
- cloudflare.com · Workers product page
- cloudflare.com/about-overview
- cloudflare.com/our-story
- cloudflare.com/network
- cloudflare.com/products/registrar
- cloudflare.com/terms (self-serve subscription agreement)
- cloudflare.com/privacypolicy
- cloudflare.com · customer DPA
- cloudflare.com/business-sla
- cloudflarestatus.com
- cloudflarestatus.com/history
- cloudflarestatus.com/services
- docs · Workers pricing
- docs · Workers limits
- docs · Pages limits
- docs · Workers Builds limits and pricing
- docs · static assets billing and limitations
- docs · contacting Cloudflare support
- docs · billing policy
- docs · cancel subscriptions
- docs · two-factor login
- docs · Universal SSL
- docs · malicious uploads detection
- docs · D1 Time Travel
- docs · D1 import and export
- docs · Worker rollbacks
- docs · Pages rollbacks
- docs · Pages preview deployments
- docs · R2 data location
- docs · D1 data location
- docs · R2 with rclone
- docs · transfer out from Cloudflare Registrar
- docs · delete your account
- docs · Workers framework guides
- docs · Pages framework guides
- docs · Node.js compatibility
- docs · Python Workers
- docs · Containers
- docs · Containers limits
This report covers what Cloudflare publishes, as read by an AI. It can miss things or misread a page. We didn't host a test site, so it says nothing about real speed or how helpful support feels.