Executive Summary

Cloudflare, Inc. has evolved significantly from its origins as a Content Delivery Network (CDN) and Distributed Denial of Service (DDoS) mitigation provider into what it now terms a “connectivity cloud”.¹ This strategic transformation has positioned the company at the critical intersection of networking, cybersecurity, and the emerging paradigms of edge computing and serverless development. The company’s mission to “help build a better Internet” is underpinned by one of the world’s largest and most interconnected networks, which serves as the foundation for a deeply integrated suite of products spanning application services, enterprise security, and a developer platform.²

The core investment thesis for Cloudflare is built on a compelling, yet tense, duality. On one hand, the company is targeting a massive and expanding Total Addressable Market (TAM) composed of the multi-hundred-billion-dollar CDN, cybersecurity, and edge computing sectors. Its technological moat, built on a global network effect, rapid innovation cycle, and a position of cloud neutrality, is formidable. Key growth vectors, including the enterprise shift to Zero Trust security architectures and the burgeoning adoption of its developer platform, Cloudflare Workers, have been validated by recent landmark customer wins, including its largest-ever contract at over $100 million.⁴

On the other hand, this opportunity is met with intense, multi-front competition from established CDN incumbents like Akamai, pure-play security leaders like Zscaler, and, most notably, the hyperscale cloud providers—Amazon Web Services (AWS), Microsoft Azure, and Google Cloud—whose scale and resources represent a profound long-term threat. This competitive pressure, combined with the execution risk inherent in its ambitious upmarket sales strategy, is set against the backdrop of a perennially high valuation multiple. The stock trades at a significant premium to nearly all its peers, pricing in a high degree of future success and leaving little room for error.

This report will dissect these dynamics, analyzing Cloudflare’s synergistic business model, its position within powerful secular technology trends, its financial trajectory toward sustainable profitability, and the key risks that could impede its progress. The central question for investors is whether Cloudflare’s unique architecture and innovation engine can sustain its premium growth and valuation, allowing it to carve out a permanent position as a fourth, neutral hyperscaler, or if it will ultimately be squeezed by the giants it seeks to compete with and complement.

Metric	Value (Q1 2025 unless noted)	Source
Revenue	$479.1 million	4
Revenue YoY Growth	27%	4
Non-GAAP Gross Margin	77.1%	4
GAAP Operating Margin	-11.1%	4
Non-GAAP Operating Margin	11.7%	4
Free Cash Flow (FCF)	$52.9 million	4
FCF Margin	11.0%	4
Large Customers (>$100k ARR)	3,527	5
Large Customer YoY Growth	23%	5
Dollar-Based Net Retention (DBNRR)	111%	6
Enterprise Value (LTM) / Sales	36.7x (as of July 2025)	7

I. Company & Business Model Analysis

The Evolution from CDN to Connectivity Cloud

Founded in 2009, Cloudflare began with a focused mission to make websites faster and safer through a global Content Delivery Network (CDN) and robust DDoS protection.² This initial offering allowed the company to build a vast, strategically located global network. However, the company’s long-term vision extended far beyond these foundational services. Over the past decade, Cloudflare has executed a deliberate strategy of leveraging its network infrastructure to layer on a diverse portfolio of higher-value, software-defined services. This journey has transformed the company from a provider of what could be considered a commoditizing service into a “leading connectivity cloud company” offering a unified platform for security, performance, and programmability.¹

This evolution is the cornerstone of the company’s value proposition and its investment narrative. The initial CDN and security services created a massive, intelligent network. The subsequent development of enterprise security and developer platforms serves to monetize that network at significantly higher margins and with greater customer stickiness. This strategic pivot has dramatically expanded Cloudflare’s TAM and fortified its competitive moat, moving it from a point solution provider to a comprehensive infrastructure platform.

Core Business Segments: A Synergistic Platform

Cloudflare’s product suite is organized into three primary pillars that are deeply integrated, allowing customers to adopt one service and seamlessly expand their usage across the platform. This creates a powerful cross-selling and up-selling motion.³

Network & Application Services

This is the foundational layer of Cloudflare’s offerings, designed to secure and accelerate traditional Internet properties like websites, applications, and APIs. It represents the company’s original value proposition and remains a critical entry point for many customers. Key products include ³:

• Performance: Content Delivery (CDN), intelligent Argo Smart Routing, Load Balancing, and what is considered one of the fastest DNS services available.
• Security: A comprehensive suite including a Web Application Firewall (WAF), unmetered DDoS Mitigation, Bot Management, API Gateway security, and SSL/TLS encryption. These tools protect against a wide range of cyber threats, from common vulnerabilities to sophisticated, large-scale attacks.

SASE Platform (Cloudflare One)

Cloudflare One is the company’s Secure Access Service Edge (SASE) platform, a strategic push into the core of enterprise networking and security budgets. This segment combines network-as-a-service capabilities with a Zero Trust security model, aiming to replace legacy corporate networks built around traditional firewalls and VPNs.³ The traction in this high-value market is a critical growth driver, underscored by the company’s announcement in Q1 2025 that it had signed its “longest-term SASE contract to date”.⁴ The platform includes:

• Network Services: Products like Magic WAN, Magic Transit, and Magic Firewall allow enterprises to connect and secure their entire corporate network, from data centers and branch offices to cloud environments, using Cloudflare’s global backbone.
• Zero Trust Security: This suite provides identity-based security for the modern workforce. Products like Cloudflare Access (application access), Cloudflare Gateway (secure web gateway), Remote Browser Isolation, and Data Loss Prevention enforce security policies for every user and device, regardless of location.

Developer Platform

Arguably the most strategic and highest-potential segment, Cloudflare’s developer platform aims to establish the company as a major player in the future of application development. By allowing developers to build and deploy code directly on its global edge network, Cloudflare is positioning itself as a compelling alternative to the traditional public clouds for a new class of latency-sensitive, globally distributed applications.⁸ The platform’s potential was dramatically validated in Q1 2025 when Cloudflare announced its largest contract in history—a deal exceeding $100 million—driven specifically by its

Cloudflare Workers developer platform.⁴ Key components include:

• Compute: Cloudflare Workers provides a serverless environment for running code with near-zero cold starts.
• Storage: R2 Object Storage offers a zero-egress-fee alternative to services like AWS S3, while D1 is an edge-native SQL database.
• Developer Tools: A suite of products like Cloudflare Pages (for deploying websites), Cloudflare Stream (for video), and various AI-focused tools that simplify building and scaling applications on the edge.

Revenue Model and Customer Dynamics

Cloudflare’s business is built on a recurring revenue model, primarily from subscriptions to its products and support services. For enterprise clients, contracts typically span one to three years and are billed monthly or annually.³ The company employs a highly effective “land-and-expand” customer acquisition model. This strategy often begins by attracting users to its generous free or low-cost Pro and Business plans. Once on the platform, these customers can be systematically upsold to higher-tier plans and additional products as their needs grow more complex.

The success of this model is evident in the steadily increasing revenue contribution from its largest customers. In the first quarter of 2025, customers with annualized revenue greater than $100,000 contributed 69% of total revenue, up from 67% in the prior-year period, demonstrating effective expansion within the existing base.⁵

A unique and powerful aspect of this model is the flywheel effect of the free tier. The millions of free customers are not just a marketing channel; they are a vital source of intelligence. The immense volume and diversity of traffic flowing from these users provide Cloudflare with unparalleled visibility into global Internet patterns and emerging cyber threats.³ This data is the lifeblood of its machine learning models, which continuously improves the efficacy of its security products for all customers, both free and paying. This creates a self-reinforcing cycle: more users lead to better threat intelligence, which leads to a better product, which in turn attracts more users. This data-driven network effect is a core competitive advantage that is exceptionally difficult and expensive for competitors to replicate. The infrastructure built to serve this traffic also provided the foundation for innovation, as the company realized its programmable network could be a platform for developers, leading directly to the creation of Cloudflare Workers. This ability to turn its own infrastructure into a commercial product, refined through internal use, creates a rapid and efficient innovation loop that distinguishes it from many competitors.

II. Macro-Environment & Industry Dynamics

Cloudflare operates at the confluence of several of the largest and most powerful secular trends in technology. Its growth is not tied to a single market but is instead propelled by the expansion of multiple, interconnected domains. This multi-market exposure provides a vast runway for growth but also exposes the company to a complex and varied set of industry forces.

Total Addressable Market (TAM) Analysis

Cloudflare’s TAM is best understood not as a single figure but as a composite of several large, high-growth markets that its integrated platform addresses. By bundling solutions for performance, security, and programmability, the company competes for IT budget across multiple traditional silos.

Market Segment	Market Size (Latest Year)	Projected Market Size (Forecast Year)	Projected CAGR	Primary Drivers	Source
Content Delivery Network (CDN)	$25.56B (2024)	$132.32B (2032)	23.3%	Video Streaming, E-commerce, Gaming	12
Cybersecurity (Total)	$193.0B (2024)	$240.0B (2026)	~12.5%	Rising Threats, Regulation, Cloud Adoption	13
Cloud Security	$9.0B (2024)	$22.6B (2028)	25.9%	Hybrid Cloud Complexity, CSPM/CWPP	14
Edge Computing	$60.0B (2024)	$110.6B (2029)	13.0%	IoT, AI/ML, Low-Latency Applications	15
API Security	$823M (2022)	$4.9B (2030)	~32.0%	API Proliferation, Cloud & Mobile Apps	16

The data illustrates that Cloudflare is targeting several distinct, multi-billion-dollar markets, each with double-digit growth rates. The fastest-growing segments—Cloud Security, API Security, and Edge Computing—align directly with Cloudflare’s most strategic product initiatives: the Cloudflare One SASE platform and the Cloudflare Workers developer platform. This alignment suggests that the company is well-positioned to capture growth from the most dynamic parts of the infrastructure software landscape.

Key Secular Tailwinds

Several profound shifts in technology architecture and business operations are creating sustained demand for Cloudflare’s services.

• The Inevitable Shift to Zero Trust: The traditional security model, which relied on a strong perimeter (a “moat and castle”), is obsolete in an era of remote work, cloud applications, and sophisticated threats. The industry is undergoing a fundamental architectural migration to Zero Trust, a model that assumes no user or device is inherently trustworthy and requires continuous verification.¹⁸ This shift is no longer optional; it is being mandated by governments and embedded into the core platforms of hyperscalers like AWS and Azure.¹⁸ Cloudflare One is purpose-built to facilitate this transition, making it a primary beneficiary of this multi-year, enterprise-wide security refresh cycle.
• The Gravitational Pull to the Edge: The proliferation of Internet of Things (IoT) devices, the rise of AI/ML workloads, and the demand for real-time applications are creating an untenable strain on centralized cloud infrastructure. The laws of physics dictate that latency is a barrier to performance. To overcome this, computation is moving from centralized data centers to the network “edge,” closer to end-users and devices.¹⁵ Cloudflare’s global network, with points of presence in over 300 cities, is a natural platform for this new computing paradigm.²⁰ Its Workers platform is designed to capture these edge-native workloads, a trend that management expects to accelerate with the advent of autonomous AI agents.¹⁰
• The Ascendancy of the Developer: The global developer population is expanding rapidly, and developers are increasingly influential in technology purchasing decisions.²¹ Modern applications are built using a constellation of third-party APIs and services, and developers gravitate toward platforms that offer superior performance, ease of use, and productivity gains.²² Cloudflare’s strategic focus on developer experience with its Workers platform, predictable pricing, and extensive documentation is a direct attempt to win the mindshare of this critical constituency, creating a grassroots adoption motion that can penetrate organizations from the bottom up.

The Regulatory Gauntlet: Data Localization & Privacy

The global regulatory landscape is becoming increasingly fragmented, with a growing number of countries implementing strict data localization and sovereignty laws, such as the EU’s General Data Protection Regulation (GDPR).²⁴ These regulations mandate that data pertaining to a nation’s citizens must be stored and processed within its borders, creating significant operational and financial burdens for multinational corporations.²⁵

At first glance, this trend appears to be a headwind. It can force companies to duplicate expensive infrastructure, leading to fragmented data environments and a 30-60% increase in IT spending in some regions.²⁵ However, this regulatory complexity creates a powerful demand catalyst for Cloudflare’s platform. Instead of building disparate infrastructure, a global enterprise can use Cloudflare’s single, unified network and simply configure policies at the edge using tools like the

Cloudflare Data Localization Suite.³ This allows them to ensure, for example, that all data from European users is handled exclusively within Cloudflare’s European data centers, thereby satisfying regulatory requirements without sacrificing the benefits of a unified global architecture. This capability transforms a regulatory burden for customers into a compelling competitive advantage for Cloudflare, elevating its offering from a simple IT tool to a strategic solution for global risk management and compliance.

III. Competitive Landscape & Positioning

Cloudflare’s competitive environment is uniquely complex. Because its platform spans performance, security, and developer tools, it does not have a single set of rivals. Instead, it fights a “three-front war” against different categories of competitors, each with distinct strengths and weaknesses.

The Three-Front War

1. Direct CDN & Edge Competitors: This is Cloudflare’s traditional battleground. Key players include Akamai, Fastly, and the native CDN offerings from the hyperscalers (Amazon CloudFront, Azure CDN, Google Cloud CDN).²⁷ Competition here is focused on network performance, reliability, and increasingly, price.
2. Security Specialists: As Cloudflare pushes its Cloudflare One platform, it increasingly competes with established cybersecurity leaders like Zscaler, CrowdStrike, Palo Alto Networks, and Okta.²⁹ This battle is for the enterprise Chief Information Security Officer’s (CISO) budget and centers on the effectiveness of Zero Trust and SASE solutions.
3. Cloud Infrastructure Hyperscalers: AWS, Microsoft Azure, and Google Cloud represent the most significant long-term competitive threat, but also a strategic opportunity.⁸ Cloudflare competes directly with their edge compute services (e.g., AWS Lambda@Edge) and security offerings (e.g., AWS WAF). Simultaneously, it positions itself as a neutral, multi-cloud “fabric” that can sit in front of any and all of these clouds, protecting customers from vendor lock-in.

Head-to-Head Analysis & Market Share

• CDN Market Share: The data on CDN market share presents a bifurcated picture. Based on the sheer number of websites served, W3Techs data shows Cloudflare with a commanding 80.7% market share among known reverse proxy services.²⁷ This dominance is largely attributable to its massive and popular free tier, which has attracted millions of smaller sites.³³ However, when looking at revenue or traffic from the largest enterprises, the picture changes. Akamai has historically been the leader in this segment, with a much larger share of the top 1,000 or 10,000 websites.²⁷ This highlights a key dynamic: Cloudflare has unparalleled breadth, while incumbents like Akamai have historically had greater depth in the highest-spending enterprise accounts.
• vs. Zscaler (SASE/Zero Trust): Zscaler is a pure-play leader in Zero Trust security, often considered the gold standard for enterprise-grade secure web gateways. Zscaler is typically viewed as a premium, feature-rich solution, whereas Cloudflare competes with a more integrated, platform-based approach that leverages its existing global network.³⁰ User reviews suggest Cloudflare’s strengths lie in its combined CDN/DDoS protection and its ease of deployment, while Zscaler is favored for its dedicated VPN replacement and deep zero-trust feature set.³⁰
• vs. CrowdStrike (Security): The relationship with CrowdStrike is more complementary than competitive. CrowdStrike is a leader in endpoint security (Endpoint Protection Platforms and Endpoint Detection and Response), focusing on protecting the device itself.²⁹ Cloudflare focuses on protecting the network and applications. The two platforms can be integrated, where security signals from a CrowdStrike-protected device (e.g., its security posture) are used by Cloudflare to make dynamic, risk-based access decisions for a user. This partnership creates a more robust, end-to-end Zero Trust solution for mutual customers.³⁴
• vs. Hyperscaler Edge (AWS Lambda@Edge): When comparing Cloudflare Workers to AWS Lambda@Edge, a key competitor in the serverless edge compute space, several trade-offs emerge. Cloudflare Workers are widely praised for their performance, particularly their near-zero cold start times, which are a result of using a more lightweight V8 isolate architecture instead of full virtual machines.⁸ This, combined with a simple, predictable pricing model that notably excludes egress fees, makes Workers highly cost-effective for high-frequency, low-complexity tasks like API authentication or A/B testing.⁸ In contrast, AWS Lambda@Edge offers broader language support (Node.js, Python, Java, etc.) and benefits from deep, native integration with the vast ecosystem of over 200 other AWS services. This makes it a more suitable choice for complex workloads that are already deeply embedded within the AWS environment.⁸

Cloudflare’s Competitive Moat

Despite the intense competition, Cloudflare has cultivated several durable competitive advantages:

1. Massive, Interconnected Global Network: The physical and logical scale of Cloudflare’s network is a significant barrier to entry. Spanning over 300 cities and directly interconnecting with over 12,000 other networks, it provides the foundation for superior performance, resilience, and security intelligence.²⁰ Replicating this infrastructure would require immense capital and years of effort.
2. Integrated Platform and Unified Control Plane: The ability for a customer to manage performance (CDN), security (WAF, Zero Trust), and development (Workers) from a single dashboard is a powerful differentiator. It reduces complexity, lowers the total cost of ownership compared to managing multiple point solutions, and creates high switching costs once a customer has integrated multiple products.³
3. Network Effect and Innovation Flywheel: As detailed previously, the data flowing through its network creates a self-improving system for its security products. This virtuous cycle of data-driven improvement is a unique architectural advantage.
4. Cloud Neutrality: By remaining independent and compatible with all major cloud providers, Cloudflare positions itself as an essential, neutral layer for the increasingly multi-cloud world. This appeals to enterprises seeking to avoid vendor lock-in with a single hyperscaler and to maintain consistent security and performance policies across their entire hybrid IT environment.⁸

IV. Financial Performance Deep Dive

Cloudflare’s financial profile is characteristic of a high-growth technology company that is successfully navigating the transition towards sustainable profitability. The company has demonstrated a consistent ability to grow its top line at a rapid pace while showing increasing operating leverage and positive free cash flow generation.

Deconstructing Revenue Growth

Cloudflare has maintained an impressive growth trajectory for several years. In the first quarter of 2025, the company reported total revenue of $479.1 million, representing a robust 27% year-over-year increase.⁴ This performance is part of a multi-year pattern of strong growth, with full-year revenue climbing from $975 million in 2022 to $1.67 billion in 2024.³⁸

The company’s revenue base is becoming increasingly global. While the United States remains its largest market, its contribution to total revenue has been gradually decreasing, from 52.9% in FY 2022 to 50.9% in FY 2024. During the same period, the EMEA (Europe, Middle East, and Africa) region grew from 26.5% to 27.9% of total revenue. This shift indicates a successful international expansion strategy, with regions outside the US growing at a faster clip than the core domestic market.⁴⁰

Geographic Region	Revenue FY 2022 ($M)	Revenue FY 2023 ($M)	Revenue FY 2024 ($M)	% of Total Revenue (FY 2024)	YoY Growth (2023-2024)
United States	$515.72	$678.18	$849.50	50.88%	25.26%
EMEA	$258.29	$356.57	$466.50	27.94%	30.83%
Asia Pacific	$133.35	$168.83	$223.23	13.37%	32.23%
Other	$67.88	$93.17	$130.39	7.81%	39.96%
Total	$975.24	$1,296.75	$1,669.62	100.00%	28.75%
Source: 40

The Engine of Growth: Customer Metrics Analysis

The primary engine of Cloudflare’s growth is its ability to attract and expand its base of high-value enterprise customers. The number of large customers—those contributing over $100,000 in annualized revenue—grew 23% year-over-year to 3,527 in Q1 2025.⁵ Even more indicative of the success of its upmarket push is the growth in its largest customers. In Q4 2024, the number of customers paying over $1 million per year grew by an impressive 47% year-over-year to 173.⁴²

A key metric for software-as-a-service (SaaS) companies is the Dollar-Based Net Retention Rate (DBNRR), which measures revenue growth from existing customers. Cloudflare reported a DBNRR of 111% in Q1 2025, which was flat compared to the previous quarter.⁶ While a rate above 100% indicates healthy expansion, this figure has trended down from historical highs.

However, interpreting this DBNRR figure in isolation may be misleading. A closer look reveals a potential decoupling between this metric and the company’s true enterprise momentum. Historically, the “land-and-expand” model involved landing small initial deals and growing them over time, a dynamic perfectly captured by DBNRR. The company’s recent go-to-market success, however, reflects a shift towards a “land-and-platform” strategy. Cloudflare is now signing massive, multi-year, multi-product contracts from the outset, such as the $20 million deal with a Fortune 100 tech company and the record-breaking $100 million Workers deal.⁴ These large initial contracts have inherently less room for percentage-based expansion in the first 12 months compared to smaller deals. This suggests that DBNRR may be becoming a lagging indicator of enterprise health. More telling metrics are now the growth in net new Annual Contract Value (ACV), which management noted hit a three-year high in Q1 2025, and the rapid growth in the cohort of customers paying over $1 million annually.⁴

The Path to Profitability

Cloudflare has demonstrated a clear and consistent path toward sustained profitability.

• Gross Margins: The company’s business model is inherently high-margin. Non-GAAP gross margin was 77.1% in Q1 2025, comfortably above its long-term target range of 75-77%.⁴ This reflects the software-like nature of its services delivered over a fixed-cost network.
• Operating Leverage: Cloudflare is effectively scaling its operations. Non-GAAP income from operations has shown significant improvement, reaching $56.0 million, or an 11.7% margin, in Q1 2025.⁴ This trend of expanding operating margins indicates that revenues are growing faster than operating expenses, a hallmark of a scalable and financially healthy business model.
• GAAP vs. Non-GAAP: It is crucial to note that the company remains unprofitable on a GAAP basis, reporting a GAAP operating loss of $53.2 million in Q1 2025.⁴ The primary reconciling item is stock-based compensation, a significant non-cash expense common among high-growth technology companies used to attract and retain talent.

Cash Flow Dynamics and Balance Sheet Strength

A significant milestone in Cloudflare’s financial maturation is its consistent generation of positive free cash flow (FCF). In Q1 2025, the company generated $52.9 million in FCF, representing a healthy 11% of revenue.⁴ This ability to self-fund its operations and growth investments provides significant financial flexibility and reduces reliance on external capital markets.

The company maintains a strong balance sheet, with $1.91 billion in cash, cash equivalents, and available-for-sale securities as of March 31, 2025.⁴ Further bolstering its financial position, Cloudflare has been opportunistic in its financing strategy, recently announcing a private offering of $1.75 billion in 0% convertible senior notes due in 2030.⁴⁵ This provides a large tranche of low-cost capital that can be deployed to accelerate its strategic initiatives.

V. Growth Strategy & Capital Allocation

Cloudflare’s growth strategy is centered on a virtuous cycle of relentless innovation and an evolving go-to-market (GTM) motion designed to capture increasingly larger enterprise customers. Its capital allocation framework reflects these priorities, with the vast majority of resources being reinvested back into the business to fuel product development and sales expansion.

Innovation as a Strategy: R&D Investment

Research and development is the primary engine of Cloudflare’s growth and TAM expansion. The company consistently invests a significant portion of its revenue back into R&D, with the expense running at approximately 25-27% of revenue in recent quarters.⁴⁶ While this level of spending is a near-term drag on GAAP profitability, it is the fundamental driver of the company’s long-term competitive differentiation.

The output of this investment is a high velocity of product innovation. The company’s changelog, “What’s New” page, and frequent “Innovation Week” announcements reveal a constant stream of new features, products, and platform enhancements.⁴⁷ This rapid development cycle, enabled by the company’s own programmable platform, is a core part of its strategy to out-maneuver larger, potentially slower-moving competitors.

Go-to-Market (GTM) Evolution

A key strategic shift for Cloudflare has been the deliberate and focused effort to move “upmarket” and win large enterprise accounts. The most significant move in this direction was the hiring of Mark Anderson, a seasoned enterprise sales leader, as President of Revenue.³⁶ The impact of this leadership change has been tangible and swift. The company has reported five consecutive quarters of double-digit year-over-year increases in sales productivity and has significantly ramped up the hiring of enterprise-focused account executives.³⁶ This improved GTM execution is directly correlated with the record-breaking large customer wins and net new ACV growth seen in recent quarters.

In addition to its direct sales force, Cloudflare is expanding its channel partner strategy. The company is actively building alliances with Global System Integrators (GSIs) like NTT and Kyndryl, which have deep relationships and broad reach within the world’s largest enterprises. These partnerships allow Cloudflare to leverage the GSI’s sales and service delivery capabilities to penetrate new accounts and markets more effectively.⁵⁰

Capital Allocation Framework

Cloudflare’s capital allocation strategy is straightforward and growth-oriented.

• Primary Use of Capital: The company’s top priority is reinvesting capital back into the business. This is bifurcated between R&D to fuel product innovation and Sales & Marketing (S&M) to expand the GTM engine.
• Sales & Marketing Efficiency: There is clear evidence of increasing efficiency in S&M spending. The S&M expense as a percentage of revenue declined to 38.3% in Q1 2025, down from 41.4% in the prior-year quarter.⁴⁴ When viewed alongside the simultaneous increase in sales force productivity, this suggests highly effective and disciplined capital deployment in the GTM function.
• Acquisition Strategy: Cloudflare’s approach to M&A has been one of small, strategic, “tuck-in” acquisitions. The company has historically acquired smaller firms to gain specific technology or engineering talent that can be integrated into its platform, such as the purchases of Area 1 Security for email security and Kivera for cloud security posture management.⁴⁸ This disciplined approach is designed to supplement, rather than replace, its organic R&D efforts.
• Shareholder Returns: As a high-growth company in a capital-intensive phase, Cloudflare does not pay a dividend and has not announced any share buyback programs. All available capital is being reinvested to capture the large market opportunity ahead.⁵²

VI. Valuation Framework

Cloudflare’s valuation is a central point of debate for investors. The company consistently trades at a significant premium to its peers across multiple sectors, reflecting the market’s high expectations for sustained, long-term growth. This premium valuation presents both the potential for significant returns if the company executes on its vision and the risk of a substantial correction if growth falters.

Relative Valuation: A Persistent Premium

On nearly every relative valuation metric, Cloudflare appears expensive. As of mid-2025, the company’s Enterprise Value to Trailing Twelve Month (EV/TTM) Sales multiple stood at approximately 36.7x.⁷ This multiple is substantially higher than those of its direct competitors and other high-growth software companies.

The Price-to-Free-Cash-Flow (P/FCF) multiple is also exceptionally high, at over 350x.⁵² This reflects the fact that Cloudflare has only recently become FCF positive, and the current level of cash flow is small relative to its large enterprise value. The multiple indicates that investors are pricing the stock based on a dramatic expansion of free cash flow in the years to come.

The following table provides context for Cloudflare’s valuation by comparing it to key competitors in the CDN, security, and high-growth infrastructure software spaces.

Company	Ticker	Market Cap	EV/TTM Sales	TTM Rev. Growth	TTM Gross Margin
Cloudflare, Inc.	NET	$65.8B	36.80x	26.5%	75.9%
Peer Group: CDN / Infrastructure
Akamai Technologies	AKAM	~$15B	3.7x	~7%	~60%
Fastly, Inc.	FSLY	~$1.0B	1.72x	~17%	53.2%
Peer Group: Security / SASE
Zscaler, Inc.	ZS	~$27B	16.6x	~35%	~78%
CrowdStrike Holdings	CRWD	$117.3B	28.21x	~33%	~75%
Peer Group: High-Growth Infra. SaaS
Snowflake Inc.	SNOW	$70.7B	18.35x	~33%	~67%
Datadog, Inc.	DDOG	$48.1B	17.70x	~26%	79.3%
Valuation and Market Cap data as of mid-July 2025. Financial data based on latest available reporting. Sources: 7

The comparison illustrates that while Cloudflare’s valuation multiple is at the top of the range, its combination of high revenue growth and strong gross margins is also best-in-class. The market is rewarding the company for its efficient, high-margin business model and its potential to continue growing at a rapid pace. The premium over security peers like Zscaler and CrowdStrike, and infrastructure peers like Snowflake and Datadog, suggests that investors may be pricing in a larger and more durable long-term opportunity, potentially viewing Cloudflare as a unique, foundational platform for the internet.

Intrinsic Valuation Scenario Analysis

Given that Cloudflare is not yet profitable on a GAAP basis and is in a high-growth phase, a traditional Discounted Cash Flow (DCF) analysis is highly sensitive to long-term assumptions. Rather than producing a single, potentially misleading price target, it is more instructive to consider a range of scenarios based on different assumptions about the company’s future.

• The Bull Case: This scenario assumes Cloudflare successfully executes its platform strategy. Revenue growth is sustained at 25% or higher for the next five to seven years, driven by strong adoption of the Cloudflare One and Developer Platform offerings. The company achieves significant operating leverage, with non-GAAP operating margins expanding towards 25-30%. A durable competitive moat allows for a high terminal growth rate. In this scenario, the intrinsic value would likely be significantly above the current price.
• The Base Case: This scenario assumes a more moderate outcome. Revenue growth gradually decelerates from its current rate into the mid-to-high teens over the next five years. The company successfully penetrates the enterprise market but faces persistent competition that tempers growth and pricing power. Non-GAAP operating margins expand to the company’s long-term target of around 20%. In this scenario, the intrinsic value may be closer to the current market price, suggesting the market is currently pricing in this outcome.
• The Bear Case: This scenario assumes that competitive threats materialize more strongly than expected. Aggressive bundling and pricing from hyperscalers commoditize the edge computing market, while pure-play security vendors defend their turf successfully. This pressure stalls Cloudflare’s upmarket momentum, causing revenue growth to slow to below 15% within the next three years. Margin expansion stalls as the company is forced to compete more aggressively on price. In this scenario, the intrinsic value would be significantly below the current price, as the high valuation multiple would no longer be justifiable.

VII. Risk Assessment

An investment in Cloudflare carries a number of significant risks, commensurate with its high growth potential and valuation. These risks, disclosed in detail in the company’s regulatory filings, can be categorized into competitive, execution, and regulatory/valuation risks.³

Competitive and Technological Risks

• The Hyperscaler Threat: The most significant long-term risk is competition from the cloud infrastructure giants: AWS, Azure, and GCP. These companies possess immense scale, vast capital resources, and deep existing customer relationships. Their ability to develop and bundle competing edge compute, security, and performance services at a low or even zero incremental cost could severely pressure Cloudflare’s pricing power and market share over time.
• Intensifying Pricing Pressure: The markets for CDN and certain security products are highly competitive. As these markets mature, there is a risk of commoditization, where competitors may engage in aggressive or predatory pricing to win customers, which could erode Cloudflare’s gross margins and profitability.
• Technology Disruption: The internet infrastructure landscape is characterized by rapid and continuous innovation. There is a risk that a new network architecture or disruptive technology could emerge that renders Cloudflare’s edge-based model less efficient or obsolete, challenging its core value proposition.

Execution and Macroeconomic Risks

• Go-to-Market Execution Risk: The company’s growth strategy is heavily dependent on its ability to successfully move upmarket and win large enterprise customers. This requires a sophisticated and highly effective sales force. Any failure to hire, train, and retain a high-performing enterprise sales team could cause growth to decelerate and jeopardize the investment thesis.
• Macroeconomic Sensitivity: While many of Cloudflare’s services are mission-critical, corporate IT budgets are not entirely immune to broader economic conditions. A significant global economic downturn could lead to longer sales cycles, reduced customer spending, delayed projects, and higher customer churn, impacting revenue and profitability.
• Large Deal Dependency: As the company relies more on large, multi-million-dollar enterprise contracts, its quarterly results may become more volatile and difficult to predict. The delay or loss of a small number of significant deals in a given quarter could have a material impact on reported results and investor sentiment.

Regulatory and Valuation Risks

• Data Sovereignty and Content Moderation: Cloudflare operates in a complex and evolving global regulatory environment. Increasing laws around data localization and intermediary liability for content hosted by its customers could impose significant compliance costs, operational challenges, and potential legal risks.
• Valuation Risk: As detailed previously, Cloudflare’s stock trades at a very high valuation multiple. This premium prices in a high degree of future growth and near-perfect execution. The stock is therefore highly sensitive to any changes in growth expectations or broader market sentiment. Any perceived slowdown in growth or a market-wide contraction in valuation multiples could lead to a significant and rapid decline in the stock price.

VIII. Management & Governance

The quality and alignment of a company’s leadership team are critical factors in its long-term success, particularly for an innovation-driven company like Cloudflare.

Leadership Assessment

Cloudflare benefits from being a founder-led company, with co-founders Matthew Prince (CEO) and Michelle Zatlyn (President & COO) remaining at the helm since its inception in 2009.² This provides a consistency of vision and a deep, intrinsic understanding of the company’s technology and culture.

CEO Matthew Prince possesses a unique and highly relevant background, holding degrees in Computer Science, a Juris Doctor (JD) from the University of Chicago, and an MBA from Harvard Business School.⁵⁶ This interdisciplinary expertise in technology, law, and business is exceptionally well-suited to navigating the complex strategic, technical, and regulatory challenges that Cloudflare faces. Interviews and public statements suggest a leader with a deep technical grasp, a long-term perspective focused on innovation, and a clear vision for the company’s role in the internet’s future.⁵⁸

The executive team has been strategically strengthened in recent years with key hires aimed at addressing specific operational priorities. The recruitment of Mark Anderson as President of Revenue was a clear move to bolster the company’s enterprise GTM capabilities, while the hiring of a new Chief Security Officer in 2023 underscores a focus on maturing the company’s internal security posture.³

Corporate Governance and Shareholder Alignment

While the leadership team is strong, the company’s governance structure presents a significant point of consideration for public investors.

• Dual-Class Share Structure: Cloudflare utilizes a dual-class share structure, a common practice among founder-led technology companies but one that raises governance concerns.³ The Class B common stock, held primarily by founders, executives, and early investors, is entitled to 10 votes per share, compared to one vote per share for the publicly traded Class A common stock. This structure effectively concentrates voting control in the hands of insiders, significantly limiting the ability of public shareholders to influence corporate matters, including the election of directors.
• Insider Ownership and Trading: The company’s co-founders and key executives maintain significant ownership stakes. At the same time, they have established Rule 10b5-1 trading plans, which allow for regular, pre-scheduled sales of their stock holdings.³ While such plans are standard practice for executives to achieve personal liquidity and diversification, the optics of consistent insider selling can be interpreted in two ways. A bearish view might see it as a lack of confidence in significant further upside, while a more neutral view would consider it prudent personal financial planning. Investors should monitor the company’s annual proxy statements for updated details on executive ownership and compensation to assess alignment with public shareholders.⁶⁰

IX. Investment Thesis & Key Indicators to Monitor

The investment case for Cloudflare is a high-stakes proposition, with compelling arguments on both sides. The future trajectory of the company will depend on its ability to execute on its ambitious vision while navigating a formidable competitive landscape.

The Bull Case: The Fourth Hyperscaler & The Internet’s Control Plane

The bull thesis posits that Cloudflare is successfully executing a platform strategy to become a new, neutral pillar of internet infrastructure, standing alongside the three dominant public clouds: AWS, Azure, and GCP. Proponents believe that Cloudflare’s deeply integrated platform, powerful network effects, and relentless innovation velocity will enable it to capture a significant share of the massive and converging markets for security, networking, and edge computing. The recent string of large enterprise wins, particularly the landmark deals for its SASE and Developer platforms, are viewed as powerful early validation points of this thesis. In this view, Cloudflare is not just a collection of products but is becoming the indispensable, programmable control plane for the internet itself.

The Bear Case: A Niche Player Squeezed by Giants

The counter-thesis argues that Cloudflare’s ambitious three-front war is ultimately unwinnable and that the company risks being stretched too thin. Bears believe that its core CDN business faces inevitable commoditization, its security offerings will be outflanked by the deep focus of pure-play specialists like Zscaler, and its nascent developer platform will ultimately be unable to compete with the sheer scale, capital, and ecosystem advantages of the hyperscalers. The stock’s extremely high valuation is seen as a major vulnerability, leaving absolutely no room for error. In this scenario, any stumbles in execution or intensification of competitive pressure will lead to a dramatic and painful re-rating of the stock, relegating Cloudflare to a niche player rather than a foundational platform.

Key Performance Indicators (KPIs) for Thesis Validation

To validate which of these theses is playing out over time, investors should closely monitor the following key performance indicators:

• Large Customer Growth (>$1 Million ARR): This is arguably the single most important metric for tracking true enterprise adoption and the success of the upmarket GTM strategy. Sustained high growth in this cohort is essential for the bull case.
• Developer Platform Momentum: Monitor for announcements of additional large, multi-million-dollar contracts driven by the Cloudflare Workers platform. The ability to replicate the recent >$100 million deal is a critical validation point for the “fourth hyperscaler” narrative.
• Free Cash Flow (FCF) Margin Expansion: Continued, steady expansion of the FCF margin is crucial for proving the long-term profitability and scalability of the business model. A stall or reversal in this trend would be a significant red flag.
• Dollar-Based Net Retention (DBNRR): While its importance may be evolving, a significant decline in DBNRR below the 110% level could signal broader weakness or increased churn in the customer base. Stabilization or a gradual uptick would be a positive sign of platform stickiness.
• International Revenue Growth: Track the growth rates in the EMEA and APAC regions. Continued acceleration relative to the US market is necessary to demonstrate that the global expansion strategy is bearing fruit and diversifying the revenue base.
• Gross Margin Stability: Any significant or sustained erosion of non-GAAP gross margins below the company’s 75-77% target range could indicate rising competitive pricing pressure or a negative shift in product mix toward lower-margin services.

Works cited

1. Cloudflare Announces Date of Investor Day 2025, accessed July 30, 2025, https://www.cloudflare.com/press-releases/2024/cloudflare-announces-date-of-investor-day-2025/
2. NET Investor Relations – Cloudflare Inc – Alpha Spread, accessed July 30, 2025, https://www.alphaspread.com/security/nyse/net/investor-relations
3. cloud-20231231 – SEC.gov, accessed July 30, 2025, https://www.sec.gov/Archives/edgar/data/1477333/000147733324000013/cloud-20231231.htm
4. Cloudflare Announces First Quarter 2025 Financial Results, accessed July 30, 2025, https://www.businesswire.com/news/home/20250508555536/en/Cloudflare-Announces-First-Quarter-2025-Financial-Results
5. Earnings call transcript: Cloudflare Q1 2025 reports revenue growth, stock surges, accessed July 30, 2025, https://www.investing.com/news/transcripts/earnings-call-transcript-cloudflare-q1-2025-reports-revenue-growth-stock-surges-93CH-4034964
6. Cloudflare, Inc. (NET) Q1 2025 Earnings Call Transcript | Seeking Alpha, accessed July 30, 2025, https://seekingalpha.com/article/4784048-cloudflare-inc-net-q1-2025-earnings-call-transcript
7. EV / Revenue For Cloudflare Inc (NET) – Finbox, accessed July 30, 2025, https://finbox.com/NYSE:NET/explorer/ev_to_revenue_ltm/
8. Choosing AWS Vs. Cloudflare: Which One Do You Need? – CloudZero, accessed July 30, 2025, https://www.cloudzero.com/blog/aws-vs-cloudflare/
9. Edge Computing Showdown: Comparing Cloudflare, AWS, and GCP for the Future of Your Business | by Ashok Pundit | Medium, accessed July 30, 2025, https://medium.com/@ashokpundit/edge-computing-showdown-comparing-cloudflare-aws-and-gcp-for-the-future-of-your-business-4c702fa1720e
10. CLOUDFLARE INC Earnings Call Transcript FY25 Q1 – stockinsights.ai, accessed July 30, 2025, https://www.stockinsights.ai/us/NET/earnings-transcript/fy25-q1-3ba1
11. Investor Presentation – Cloudflare, Inc. – Investor Relations, accessed July 30, 2025, https://cloudflare2019ipo.q4web.com/files/doc_financials/2024/q4/Q4-2024-Investor-Presentation.pdf
12. Content Delivery Network [CDN] Market Size, Share, 2032, accessed July 30, 2025, https://www.fortunebusinessinsights.com/content-delivery-network-market-105949
13. Gartner Forecasts Worldwide End-User Spending on Information Security to Total $213 Billion in 2025 – NCNONLINE, accessed July 30, 2025, https://www.ncnonline.net/gartner-forecasts-worldwide-end-user-spending-on-information-security-to-total-213-billion-in-2025/
14. Top 10 fastest-growing segments from Gartner’s latest information …, accessed July 30, 2025, https://softwarestrategiesblog.com/2025/01/02/top-10-fastest-growing-segments-from-gartners-latest-information-security-forecast-q4-2024/
15. Edge Computing Market Size, Share | Trends Analysis [Latest], accessed July 30, 2025, https://www.marketsandmarkets.com/Market-Reports/edge-computing-market-133384090.html
16. Application Programming Interface (API) Security Market Size – Research and Markets, accessed July 30, 2025, https://www.researchandmarkets.com/report/application-program-interface
17. Application Programming Interface (API) Security Market Size, Share …, accessed July 30, 2025, https://www.researchandmarkets.com/reports/5869125/application-programming-interface-api-security
18. Zero Trust Security: The Business Benefits And Advantages – Forrester, accessed July 30, 2025, https://www.forrester.com/zero-trust/
19. Industrial Edge Market Size, Share and Trends, 2025 To 2030 – MarketsandMarkets, accessed July 30, 2025, https://www.marketsandmarkets.com/Market-Reports/industrial-edge-market-195348761.html
20. Cloudflare’s global network grows to 300 cities and ever closer to end users with connections to 12,000 networks, accessed July 30, 2025, https://blog.cloudflare.com/cloudflare-connected-in-over-300-cities/
21. Developer Research – SlashData, accessed July 30, 2025, https://www.slashdata.co/blog/categories/developer-research-2
22. Developer Ecosystem Insights | Tech Market Research | SlashData, accessed July 30, 2025, https://www.slashdata.co/research/developer-ecosystem-insights
23. Developer Program Benchmarking | SlashData Technology Market Research, accessed July 30, 2025, https://www.slashdata.co/research/developer-program-benchmarking
24. The Role of Data Localization Laws – Mondial Software, accessed July 30, 2025, https://mondialsoftware.com/ensuring-compliance-in-the-cloud-the-role-of-data-localization-laws/
25. Does Data Localization Guarantee Privacy? Rethinking Security in a …, accessed July 30, 2025, https://www.datadynamicsinc.com/blog-does-data-localization-alone-guarantee-privacy-the-unspoken-challenges/
26. What is Data Localization | Pros & Cons – Imperva, accessed July 30, 2025, https://www.imperva.com/learn/data-security/data-localization/
27. Cloudflare vs. Fastly vs. Akamai usage statistics, July 2025 – W3Techs, accessed July 30, 2025, https://w3techs.com/technologies/comparison/cn-akamai,cn-cloudflare,cn-fastly
28. Who is the Largest CDN Provider? Use Cases & Performance – IO River, accessed July 30, 2025, https://www.ioriver.io/questions/who-is-the-largest-cdn-provider
29. Zscaler vs. Crowdstrike: 4 Key Differences and How to Choose – Cynet, accessed July 30, 2025, https://www.cynet.com/endpoint-security/zscaler-vs-crowdstrike-4-key-differences-and-how-to-choose/
30. Cloudflare vs Zscaler Zero Trust Exchange Platform (2025) – PeerSpot, accessed July 30, 2025, https://www.peerspot.com/products/comparisons/cloudflare_vs_zscaler-zero-trust-exchange-platform
31. What’s the Difference Between AWS vs. Azure vs. Google Cloud? – Coursera, accessed July 30, 2025, https://www.coursera.org/articles/aws-vs-azure-vs-google-cloud
32. What differences have you seen in types of companies hosting on AWS vs Azure vs Google Cloud? : r/ExperiencedDevs – Reddit, accessed July 30, 2025, https://www.reddit.com/r/ExperiencedDevs/comments/1ga0lej/what_differences_have_you_seen_in_types_of/
33. Monopolistic Control of the CDN Market – Hacker News, accessed July 30, 2025, https://news.ycombinator.com/item?id=34698483
34. Enhancing Zero Trust Network Access with Zscaler and CrowdStrike – Rheintec, accessed July 30, 2025, https://rheintec.io/en/it-security-blog/enhancing-zero-trust-network-access-with-zscaler-and-crowdstrike
35. A roadmap to Zero Trust with Cloudflare and CrowdStrike, accessed July 30, 2025, https://www.crowdstrike.com/en-us/resources/crowdcasts/roadmap-zero-trust-cloudflare/
36. Cloudflare (NET) Q4 2024 Earnings Call Transcript | The Motley Fool, accessed July 30, 2025, https://www.fool.com/earnings/call-transcripts/2025/02/07/cloudflare-net-q4-2024-earnings-call-transcript/
37. Streamline overseas expansion with the Cloudflare Global Network, accessed July 30, 2025, https://www.cloudflare.com/static/99178ffe7c3fcfcf63aa1b5a69a3a184/China_global_white_paper.pdf
38. NET SEC Filings – Cloudflare, Inc.- Annual Report, Proxy Statement, Prospectus – Fintel, accessed July 30, 2025, https://fintel.io/sfs/us/net
39. Cloudflare Company Profile, Statistics and Facts | Bullfincher, accessed July 30, 2025, https://bullfincher.io/companies/cloudflare/overview
40. Cloudflare Revenue Breakdown By Region – Bullfincher, accessed July 30, 2025, https://bullfincher.io/companies/cloudflare/revenue-by-geography
41. Cloudflare Stats for 2025: How Many Websites Use Cloudflare? – Backlinko, accessed July 30, 2025, https://backlinko.com/cloudflare-users
42. Cloudflare Announces Fourth Quarter and Fiscal Year 2024 Financial Results, accessed July 30, 2025, https://www.cloudflare.com/press-releases/2025/cloudflare-announces-fourth-quarter-and-fiscal-year-2024-financial-results/
43. Cloudflare (NET) Earnings Dates, Call Summary & Reports …, accessed July 30, 2025, https://www.tipranks.com/stocks/net/earnings
44. Cloudflare Improves Sales Execution: Will Margin Gain Continue? – Nasdaq, accessed July 30, 2025, https://www.nasdaq.com/articles/cloudflare-improves-sales-execution-will-margin-gain-continue
45. Press Releases – Cloudflare, accessed July 30, 2025, https://www.cloudflare.com/press-releases/
46. R&D Expenses For Cloudflare Inc (NET) – Finbox, accessed July 30, 2025, https://finbox.com/NYSE:NET/explorer/rd_exp/
47. Changelogs | Cloudflare Docs, accessed July 30, 2025, https://developers.cloudflare.com/changelog/
48. What’s New at Cloudflare | Cloudflare, accessed July 30, 2025, https://www.cloudflare.com/whats-new/
49. Security Week 2025 – Updates and Announcements – Cloudflare, accessed July 30, 2025, https://www.cloudflare.com/security-week-2025/updates/
50. Shaping the future: Cloudflare’s service partner strategy, accessed July 30, 2025, https://blog.cloudflare.com/shaping-the-future-cloudflares-service-partner-strategy/
51. Cloudflare – Wikipedia, accessed July 30, 2025, https://en.wikipedia.org/wiki/Cloudflare
52. Cloudflare (NET) Stock Statistics & Valuation Metrics – TipRanks.com, accessed July 30, 2025, https://www.tipranks.com/stocks/net/statistics
53. NET (Cloudflare) EV-to-Revenue – GuruFocus, accessed July 30, 2025, https://www.gurufocus.com/term/enterprise-value-to-revenue/NET
54. Cloudflare (NET) Competitors Analysis – Financhill, accessed July 30, 2025, https://financhill.com/stocks/nyse/net/competitors
55. Cloudflare, Inc. (NET) Stock Competitors & Similar Stocks Comparison | Seeking Alpha, accessed July 30, 2025, https://seekingalpha.com/symbol/NET/peers/comparison
56. Matthew Prince – The World Economic Forum, accessed July 30, 2025, https://www.weforum.org/people/matthew-prince/
57. Matthew Prince – Wikipedia, accessed July 30, 2025, https://en.wikipedia.org/wiki/Matthew_Prince
58. Redefining the Internet: Matthew Prince’s Story of True Innovation | Hawke Media, accessed July 30, 2025, https://hawkemedia.com/insights/hawketalk-matthew-prince-cloudflare/
59. Cloudflare (NET) 10K Form and SEC Filings 2025 – MarketBeat, accessed July 30, 2025, https://www.marketbeat.com/stocks/NYSE/NET/sec-filings/
60. Cloudflare (NET) AGM 2025 – Full Coverage – YouTube, accessed July 30, 2025, https://www.youtube.com/watch?v=kD6o7tX-VKY
61. Cloudflare, Inc. NPS 2025 – ProxyVote.com, accessed July 30, 2025, https://materials.proxyvote.com/Approved/18915M/20250410/NOMNP_604436/INDEX.HTML?page=1
62. cloud-20250418 – SEC.gov, accessed July 30, 2025, https://www.sec.gov/Archives/edgar/data/1477333/000147733325000065/cloud-20250418.htm