← Back to demos
Application Services

One global edge for protecting and accelerating every request.

Security, performance, routing, and compliance controls run close to users before traffic reaches your application.

Request flow

Each request can pass through the right services, close to the end user.

Cloudflare sits in front of applications so teams can translate, protect, accelerate, route, and observe traffic through one control plane.

Cloudflare connectivity cloud Every request passes through the edge — services activate in sequence, close to the user
🌍 Internet
request
CF Edge Foundation
DNS Foundation
Data Local. Foundation
DDoS Security
Bot Mgmt Security
WAF Security
API Shield Security
Page Shield Security
FW for AI Security
CDN Performance
Cache Reserve Performance
Waiting Room Performance
Load Balancing Routing
Argo Routing Routing
▤ Origin
server
Foundation Security Performance Routing
Market recognition

WAF market leader

Cloudflare's WAF helps protect applications and APIs from known and emerging threats at global edge scale.

Forrester Wave WAF report ↗
Compliance posture

Recognizable certifications and programs

Cloudflare provides certifications, reports, and platform controls that help your teams meet security, privacy, and regulatory requirements.

ISO 27001Certified
ISO 27018Certified
ISO 27701Certified
SOC 2Type II
PCI DSS4.0
Global CBPRPrivacy Rules
Global PRPProcessors
EU Cloud Codeof Conduct
Compliance resources ↗
Operational model

One control plane

Policies, routing, caching, security rules, and API-first automation are managed from one Cloudflare account experience.

Get started

Add your domain to Cloudflare

5 minutes at your registrar. Point your nameservers to Cloudflare and your site runs on this edge.

~10 min hands-on No downtime No code changes
▸ DNS Setup Options
  • Full setup — nameservers point to Cloudflare; entire feature set available.
  • Partial (CNAME) — keep existing nameservers; proxy selected hostnames only; narrower feature scope.
▸ Proxy Status
  • Proxied — traffic enters the Cloudflare edge; origin IP hidden; WAF, cache, and security controls run in path.
  • DNS-only — DNS answer returned directly; no edge controls, no proxy protection.
▸ Certificate Management
  • Universal SSL — browser → Cloudflare; free, automatic, publicly trusted.
  • Origin CA + Full strict — Cloudflare → origin; validated end-to-end encryption.
Manage domains example ↗
Choose the demo path

Split the same edge story into security or performance.

🔒

Application Security

DDoS Protection, Security Rules, Bot Management, WAF, Rate Limiting, and API Shield — every layer of defense at the Cloudflare edge.

DDoS•WAF•Bot•API Shield
Explore Security →
⚡

Application Performance

CDN, cache, load balancing, smart routing, and asset transformations — every layer of speed at the Cloudflare edge.

CDN•Cache•Load Balancing•Images
Explore Performance →
Enterprise

Bundles package the edge services together

One commercial bundle Security, performance, and reliability services under a single contract.
Advanced controls Higher limits, custom rules, dedicated support, and SLA guarantees.
One platform No product-by-product assembly — the full edge stack, commercially packaged.
See Enterprise plans ↗