Cloudflare, Inc. Due Diligence

Run due diligence on Cloudflare, Inc.: check incident history and compliance and get alerts when suppliers or ownership change.

United States · owned by Independent (United States) · cloudflare.com · 58 vendors

Cloudflare, Inc. is a global cloud services provider that offers a broad range of services to businesses of all sizes and in all geographies. The company’s network serves as a scalable, unified control plane to deliver security, performance, and reliability for on-premises, hybrid, cloud, and SaaS applications.

Resilience scores

Disruption prediction

Cloudflare, Inc.: 3 critical incidents expected in the next three months, based on its recorded incident history.

Forecast estimates are rounded up to whole numbers.

No active incident reported (its status page, as of 2026-11-09 23:55 UTC)

28 of Cloudflare, Inc.'s 58 vendors have incident tracking.

Technology vendors

Services catalogue

58 services in catalogue across 9 categories; runs on 58 sub-vendors.

Insights

Last updated 2026-09-13 · revision 45

58 direct vendors, 322 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Compliance

12 in-scope frameworks identified; showing 3.

SOC 2 (source) — Evidence found

Evidence: https://www.cloudflare.com/trust-hub/compliance-resources/, https://dash.cloudflare.com/?to=/:account/compliance-docs, https://developers.cloudflare.com/fundamentals/reference/policies-compliances/compliance-docs/, https://www.cloudflare.com/trust-hub/

HIPAA (source) — Evidence found

Evidence: https://www.cloudflare.com/trust-hub/compliance-resources/, https://developers.cloudflare.com/fundamentals/reference/policies-compliances/compliance-docs/, https://www.cloudflare.com/trust-hub/

PCI DSS (source) — Evidence found

Evidence: https://www.cloudflare.com/trust-hub/compliance-resources/, https://www.cloudflare.com/plans/, https://dash.cloudflare.com/?to=/:account/compliance-docs, https://developers.cloudflare.com/fundamentals/reference/policies-compliances/compliance-docs/

Financials

Three-year financials

Financial Resilience Score: 7/10

Cloudflare demonstrates strong financial resilience driven by durable high-growth revenue (~30% YoY at $1.5B+ scale), high GAAP gross margins of approximately 75-78%, and a healthy balance sheet with roughly $1.8B in cash and marketable securities at end-FY2024. The company has been free cash flow positive since 2022 (~$167M FCF in FY2024) and non-GAAP operating profitable since FY2022, indicating underlying business model viability. However, the company continues to post GAAP operating and net losses, primarily due to stock-based compensation expenses of $300-400M annually, which creates structural shareholder dilution. The diversified customer base (42% of Fortune 500 as paying customers, 4,400+ large customers with >$100K ARR) and strong dollar-based net retention of 110-115% mitigate concentration risk. Convertible notes due 2026/2030 are well-covered by current cash reserves. Competitive intensity from hyperscalers (AWS, Azure, GCP), CDN incumbents (Akamai, Fastly), and security players (Zscaler, Palo Alto) represents an ongoing risk, as does rising capital intensity from AI infrastructure buildout. Overall, Cloudflare's financial position is solid for a growth-stage infrastructure company, though GAAP profitability remains elusive.

Key strengths: Seven consecutive years of ~30%+ revenue growth, High GAAP gross margins of ~75-78%, Strong balance sheet with ~$1.8B cash and marketable securities, Free cash flow positive since 2022 (~$167M FCF in FY2024), Diversified customer base: 42% of Fortune 500 as paying customers, Strong dollar-based net retention of 110-115%, 4,400+ large customers (>$100K ARR), Non-GAAP operating profitable since FY2022

Risk factors: Persistent GAAP operating and net losses, High stock-based compensation ($300-400M annually) causing dilution, Intense competition from hyperscalers and security incumbents, Macro sensitivity for SMB/Pay-as-you-go segments, Rising capital intensity from AI inference infrastructure buildout, Geopolitical/regulatory exposure as global network operator, Dual-class share structure limits shareholder influence

Revenue by geography

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report