Overview
Cloudflare One is the zero trust and SASE platform of Cloudflare, the content delivery and network security company. Its Access component replaces VPN connections with identity-aware access to internal applications, while the device client, application connector and Gateway filtering extend it into a full secure service edge[4]. Cloudflare positions the platform explicitly as a VPN replacement.
The pricing is unusually open for a SASE vendor. The Free plan is permanent for teams under 50 users and includes the application connector, device client, ZTNA, digital experience monitoring and network flow monitoring, with basic CASB and limited data loss prevention profiles[4]. Pay-as-you-go costs US$7 per user per month billed annually with no user limit; contract plans add longer log retention, up to 250 network locations and full DLP and CASB as add-ons[4].
All plans include clientless browser-based SSH and VNC, an application launcher, service tokens, internal DNS, mTLS and Terraform automation[4]. The documented limitations sit in support and retention: the free plan relies on community forums and keeps logs for up to 24 hours, and pay-as-you-go keeps them for up to 30 days with chat and ticket support only. Cloudflare One is not designed to provide dedicated exit IPs by country the way a gateway VPN does, so teams needing that feature should check the contract options.
Cloudflare One (Zero Trust) features
- Free plan with CDN, SSL and DDoS protection
- Data centres in 348 cities
- Instant purge and Cache Rules
- Workers serverless edge compute
- Cache Reserve persistent cache
- Argo Smart Routing add-on
- At-cost pricing with no markup
- 430+ TLDs
Cloudflare One (Zero Trust) pricing
Free: US$0. Pro: US$20/month billed annually or US$25 monthly. Business: US$200/month annually or US$250 monthly. Enterprise: quote-based. Add-ons include Smart Shield + Argo from US$5/month, Load Balancing from US$5/month and Advanced Certificate Manager from US$10/month.
Cloudflare One (Zero Trust) strengths and limitations
Strengths
- Free plan includes CDN, SSL and unmetered DDoS protection
- Large network with 13,000+ interconnections
- Flat plan pricing rather than per-GB billing on Pro and Business
- Broad platform: DNS, WAF, Workers, Stream, Images
- No markup on registration or renewal
- Free DNSSEC and privacy
Limitations
- Full proxy model requires moving DNS or proxying the whole hostname
- Argo, Load Balancing and other routing features cost extra on all plans
- Enterprise features and contractual support require a quote
- No email hosting or website builder bundled
- Registry lock limited to Enterprise
- Best suited to Cloudflare users
Appears in
- Best Business VPN in 2026 #2
- Largest SaaS Companies (2026) #20
- Top 44 Cloud Service Providers: 2026 Edition #13
- Best CDN Providers in 2026 #1
- Best Domain Registrars in 2026 #1
Cloudflare One (Zero Trust) alternatives and competitors
Alternatives to Cloudflare One (Zero Trust): companies ranked in the same lists.
Amazon Lex
Zscaler
Gcore
Microsoft Azure AI Speech
Google Cloud Conversational Agents (Dialogflow CX)- Alibaba Cloud
IONOS- Fastly
Akamai Cloud
Nebius Group- E2E Networks
- Tencent Cloud
Is this your company?
Update the description, logo, image and link through the submission form. Editors review every change.
