Business Overview: Cloudflare, Inc. (NYSE: NET)

---

Executive Summary

Cloudflare, Inc. operates one of the world's largest global cloud networks, providing security, performance, and developer platform services that sit between virtually every type of internet-facing application and the public internet. Founded in 2009 and headquartered in San Francisco, Cloudflare describes its network as a "unified control plane" for customers, spanning more than 330 cities in over 125 countries.

Cloudflare matters because it has become foundational internet infrastructure at genuine global scale: it ended fiscal 2025 with roughly 332,000 paying customers, 4,298 large customers paying more than $100,000 annualized, and $2.17 billion in annual revenue growing nearly 30% year-over-year — all while still investing heavily (and unprofitably on a GAAP basis) to extend its network into security (SASE/Zero Trust) and AI-infrastructure (Workers AI) adjacencies.

---

1. Core Business Model & How They Work

Cloudflare sells subscription-based access to its global network's security, performance, and developer capabilities, monetizing a tiered mix of free, self-serve, and large contracted enterprise customers who share the same underlying global infrastructure.

[ Global Anycast Network (330+ cities) ] ➡️ [ Security / Performance / Developer Services ] ➡️ [ Free / Pro / Business / Enterprise Tiers ] ➡️ [ Land-and-Expand Upsell ] ➡️ [ Recurring Subscription Revenue ]

Key Operational Drivers

1. "Land and Expand" via a Free Tier: Millions of free users and developers run on Cloudflare's network, creating a large top-of-funnel that the company converts into paying Pro, Business, and Enterprise customers over time — a lower-cost customer acquisition model than typical enterprise software sales.
2. Three Converging Product Pillars: Cloudflare increasingly sells a unified bundle across (a) Application Services (CDN, WAF, bot management, DDoS mitigation, DNS, load balancing), (b) a SASE/Zero Trust platform (Magic WAN, Magic Transit, Magic Firewall, Zero Trust Network Access, Secure Web Gateway, Cloud Email Security), and (c) developer platform services (Workers, Workers AI, R2 Object Storage, D1, Durable Objects, Stream).
3. Single Global Network, Shared Infrastructure: Unlike point-solution vendors, Cloudflare runs one network fabric for CDN, security, and compute, which both lowers its own infrastructure cost per customer and lets it cross-sell additional products onto existing traffic with limited incremental deployment friction.
4. Enterprise Contract Land-and-Expand: Growth in large customers (paying >$100K annualized) from 2,756 in 2023 to 3,497 in 2024 to 4,298 in 2025 reflects a strategy of landing with one product and expanding enterprise accounts into the broader security/SASE/AI portfolio over time.

---

2. Business Segments

Cloudflare operates and reports as a single segment; rather than discrete reporting segments, it organizes its portfolio into three product pillars with no disclosed standalone revenue split.

┌───────────────────────────────────┐
│          Cloudflare, Inc.          │
└─────────────────┬───────────────────┘
                   │
    ┌──────────────┼───────────────────┐
    ▼               ▼                    ▼
┌─────────────┐ ┌───────────────┐ ┌───────────────────┐
│ Application   │ │ SASE / Zero     │ │ Developer Platform  │
│ Services      │ │ Trust Platform  │ │ (Workers, Workers AI,│
│ (CDN, WAF,    │ │ (Magic WAN,     │ │  R2, D1, Durable     │
│  DDoS, DNS)   │ │  ZTNA, SWG)     │ │  Objects, Stream)     │
└─────────────┘ └───────────────┘ └───────────────────┘

• Application Services — the historical core: web application firewall, bot management, DDoS mitigation, API security, SSL/TLS, content delivery (CDN), load balancing, and DNS.
• SASE / Zero Trust Platform — Magic WAN, Magic Transit, Magic Firewall, Zero Trust Network Access, Secure Web Gateway, and Cloud Email Security, competing in the broader secure-access-service-edge market against networking and security incumbents.
• Developer Platform — Cloudflare Workers, Workers AI, R2 Object Storage, D1, Durable Objects, and Stream, positioning Cloudflare as an edge-compute and AI-inference platform, not just a network/security vendor.

---

3. Product Portfolio

---

4. Competitive Landscape

Cloudflare's 10-K does not name specific rivals, describing competitor categories instead, but the real competitive set is well known across its three pillars.

      BREADTH OF PLATFORM (Network + Security + Compute)
                        High
                         ▲
                         │        [CLOUDFLARE]
                         │
            [Akamai] ────┤──── [Zscaler] (Zero Trust)
                         │
  Low ────────────────────────────────────────────► High
     SPECIALIST (single point-solution)      PLATFORM
                         │
            [Fastly] ────┤──── [AWS/GCP/Azure]
                         │     (hyperscaler point services)
                        Low

Competitors by Category

• On-premises network hardware vendors: Legacy router/firewall/SD-WAN appliance makers, which Cloudflare's Magic WAN and Magic Firewall aim to displace with cloud-delivered equivalents.
• Point-solution vendors: CDN specialists (e.g., Akamai, Fastly), DNS providers, email security vendors, and dedicated Zero Trust/SASE vendors (e.g., Zscaler), each of which Cloudflare competes against on a narrower slice of its own bundled platform.
• Public cloud providers (AWS, Google Cloud, Microsoft Azure): Compete with subsets of Cloudflare's services (storage, compute, CDN) and are flagged by Cloudflare as both competitors and potential large-scale new entrants given their existing enterprise relationships and capital resources.
• Large telecommunications partners: Also named as potential future competitive entrants given their networking infrastructure and enterprise reach.

---

5. Strategic Strengths & Risks

Strategic Strengths

• Massive Scale Advantage: A network spanning 330+ cities and 125+ countries, serving 332,000 paying customers, gives Cloudflare traffic visibility and infrastructure density that is extremely costly for a new entrant to replicate.
• Land-and-Expand Motion: Growth in large (>$100K) customers from 2,756 (2023) to 4,298 (2025) shows the free/self-serve funnel converting into durable, expanding enterprise relationships.
• Platform Breadth: Unlike single-point-solution competitors (Akamai, Fastly, Zscaler), Cloudflare can bundle CDN, security, SASE, and developer/AI compute on one network, raising the switching cost of ever consolidating onto a narrower vendor.
• Developer Platform Optionality: Workers AI and R2 give Cloudflare a genuine foothold in AI inference and storage economics, areas where its egress-fee-free positioning directly challenges the hyperscalers' own economics.

Strategic Risks

1. Persistent GAAP Losses: Net loss widened to $(102.3) million in 2025 from $(78.8) million in 2024 (and $(183.9) million in 2023), with an accumulated deficit of $1.2 billion — profitability discipline as growth decelerates will be a continuing test.
2. Hyperscaler Competitive Threat: AWS, Google Cloud, and Microsoft Azure have vastly greater capital resources and could bundle competing CDN, security, or edge-compute services more aggressively into their existing enterprise relationships.
3. Gross Margin Compression: Gross margin slipped from 77.3% (2024) to 74.5% (2025), worth watching as Cloudflare invests in more compute-intensive products like Workers AI.
4. Commoditization Risk in Point Products: Individual products (CDN, DNS, basic WAF) face real pricing pressure from both point-solution specialists and cloud-provider bundling, making the multi-product bundle increasingly central to Cloudflare's differentiation.

---

6. Financial Overview

---

7. Summary Conclusion

Cloudflare has built a rare combination in infrastructure software: a single global network that underpins CDN, security, Zero Trust/SASE, and increasingly AI compute and storage, monetized through a free-tier-to-enterprise land-and-expand motion that keeps delivering ~30% annual revenue growth at a $2+ billion revenue base. Its platform breadth versus narrower point-solution rivals (Akamai, Fastly, Zscaler) and its growing large-customer base are real, demonstrable moat sources.

The company's biggest forward risk is less competitive displacement than financial discipline: GAAP losses widened again in 2025 and gross margin compressed as the company pours investment into compute-intensive products like Workers AI, all while the best-resourced potential competitors in the world — AWS, Google Cloud, and Microsoft Azure — sit one layer up the stack with every incentive to bundle competing capabilities into their own enterprise relationships. Whether Cloudflare's platform bundle converts its scale into durable profitability, or merely into durable growth, is the central question for the business from here.