Secure Web Accelerator Plan Comparison

Secure Web Accelerator Basic

Secure Web Accelerator Plus

Secure Web Accelerator Premium

Performance

CDN

Globally load balanced content delivery network (CDN)

Basic Plus Premium

Caching

Automatic static content caching

Basic Plus Premium

Cache purge

BasicInstant PlusInstant PremiumInstant

Minimum edge cache expire TTL

Basic2 hours Plus1 hour Premium30 minutes

Client maximum upload size

Basic100 MB Plus100 MB Premium200 MB

Railgun™ origin network optimizer

Basic

Plus

Premium

Custom Cache Keys

Basic

Plus

PremiumBypass Cache on Cookie only

Optimizations

Asynchronous Javascript Loading Rocket Loader™

Basic Plus Premium

Image optimization with Polish™

Basic

Plus Premium

Mobile optimization with Mirage™

Basic

Plus Premium

Image manipulation with Image Resizing

Basic

Plus

PremiumUp to 100K images served per month included.

Up-to-date Protocols

IPv6 compatibility and gateway

Basic Plus Premium

HTTP/2 and SPDY

Basic Plus Premium

WebSockets

Basic Plus Premium

Customizations

Page rules

Basic

Plus20 Premium50

RESTful API

Basic

Plus Premium

AMP (Accelerated Mobile Pages)

Accelerated Mobile Links

Basic

Plus Premium

Security

DDoS Protection

Unmetered mitigation of volumetric DDoS

Basic Plus Premium

Advanced DDoS support

Basic

Plus

Premium24/7/365 uptime

SSL / TLS

Universal SSL/TLS 1.2 & 1.3 Encryption

Basic Plus Premium

Certificate type

BasicCloudflare-issued PlusCloudflare-issued PremiumCloudflare-issued or custom

Opportunistic Encryption

Basic Plus Premium

Automatic HTTPS Rewrites

Basic Plus Premium

TLS Optimization

Basic Plus Premium

Activation time

BasicUp to 24 hours PlusInstant PremiumInstant

Browser support

BasicMost modern browsers PlusAll browsers PremiumAll browsers

Web Application Firewall (WAF)

Web application firewall (WAF)

Basic

Plus Premium

Cloudflare WAF Managed Ruleset

Basic Plus Premium

OWASP ModSecurity Core Rule Set

Basic

Plus Premium

Custom WAF rules

Basic

Plus

PremiumUp to 25

Firewall Rules

Number of rules

Basic

Plus20 Premium100

Regular Expressions (regex)

Basic

Plus

Premium

Threat Blocking & Privacy

Deploy collective intelligence to identify new threats

Basic Plus Premium

Reputation-based threat protection

Basic Plus Premium

Comment spam protection

Basic Plus Premium

Content scraping protection

Basic Plus Premium

Block or Challenge Visitors

BasicBlock or challenge by IP address or AS number. Challenge by country code. PlusBlock or challenge by IP address or AS number. Challenge by country code. PremiumBlock or challenge by IP address or AS number. Challenge by country code.

User Agent Blocking

Basic

Plus50 Premium250

Zone Lockdown

Basic

Plus3 Premium10

Access Control

Multi-User Access

Basic

Plus Premium

Single Sign On support

Basic

Plus Premium

Compliance

PCI DSS 3.2 Compliance

Basic

Plus

Premium

Reliability

DNS

DNSSEC

Basic Plus Premium

Global Anycast DNS

Basic Plus Premium

Easy DNS management

Basic Plus Premium

Wildcard DNS support

Basic Plus Premium

Client interface API

Basic

Plus Premium

Custom Nameservers

Basic

Plus

Premium

Availability

Always Online™

BasicCrawled weekly PlusCrawled every 3 days PremiumCrawled daily

Insights

Analytics

Time Range

Basic

Plus15 Minute Scope Premium15 Minute Scope

Bandwidth Saved

Basic

Plus Premium

Threats Mitigated & Sources

Basic

Plus Premium

Website Requests

Basic

Plus Premium

Operational Metrics

Basic

Plus Premium

Audit Logs

Basic

Plus Premium

DNS Analytics

Historical Data

Basic

PlusUp to 24 hours PremiumUp to 7 days

Dimension Filter

Basic

PlusResponse Code, Data Center PremiumResponse Code, Data Center, Query Type, Day of Week

Metric Filter

Basic

PlusQuery Count, Response Time Average PremiumQuery Count, Response Time Average, Response Time Median, Response Time (90th & 99th Percentile)

Geographic Visualization

Basic

Plus Premium

Support

Technical Support

Basic101domain support available Monday - Friday 5am to 7pm PT (San Diego) PlusCloudflare email only 24/7/365 support with median response time of 2 hours. Cloudflare support login
--
101domain support available Monday - Friday 5am to 7pm PT (San Diego). PremiumCloudflare chat and email 24/7/365 support with a median response time of 15 minutes. Cloudflare support login
--
101domain support available Monday - Friday 5am to 7pm PT (San Diego).

Service Level Agreement

Basic

Plus

Premium100%

Do you want to learn more?

Take your performance and security further with one of our Secure Web Accelerator plans powered by Cloudflare

Click here for more

Performance

CDN

Globally load balanced content delivery network (CDN) Our 194 data centers located across the globe provide visitors with location-based access to your website, while removing latency and improving performance.

Caching

Automatic static content caching Cloudflare saves you CPU resources and bandwidth by serving your static content directly from our global data centers.

Cache purge Purge the entire Cloudflare cache or just a single file without waiting.

Minimum edge cache expire TTL Cloudflare respects all existing headers, unless you choose to overwrite them. The minimum edge cache expire TTL sets the refetch time for when Cloudflare checks the origin server for a new resource.

Client maximum upload size The amount of data visitors can upload to your website in a single request.

Custom Cache Keys Custom Cache Keys allow caching to be extended to something more specific than just the URL, this allows you to extend caching beyond just static files.

Optimizations

Asynchronous Javascript Loading Rocket Loader™ Automatically optimizes your pages to minimize the number of network connections and ensure even third party resources won't slow down page rendering.

Image optimization with Polish™ Polish applies "lossless" or optional "lossy" image optimization to reduce your image sizes by 35% on average.

Mobile optimization with Mirage™ Mirage automatically optimizes image loading through virtualized and lazyloaded images. It detects the browser type of a visitor and optimizes performance for the particular device, improving the performance of images on a mobile connection.

Image manipulation with Image Resizing Resize images for a variety of device types and connections from a single-source image master. Images can be manipulated by dimensions, compression ratios, and format (WebP conversion where supported). Included with Business and Enterprise plans (with limits).

Up-to-date Protocols

IPv6 compatibility and gateway Support both IPv4 and IPv6 connections to your site without a single change to your existing infrastructure.

HTTP/2 and SPDY HTTP/2 is the latest update to the HTTP protocol. HTTP/2 brings advancements in efficiency, security, and speed, particularly on high-latency and mobile connections. Cloudflare provides automatic HTTP/2 and SPDY coverage for your visitors.

WebSockets A WebSocket is a persistent full-duplex protocol which provides low latency client-server communication without the overhead of HTTP.

Customizations

Page rules Set up forwarding, extend or exclude caching, require SSL connections, and generally exercise fine-grained control over how Cloudflare interacts with your site on a page-by-page basis.

RESTful API Cloudflare's API exposes the entire Cloudflare infrastructure via a standardized programmatic interface. Using Cloudflare's API, you can do just about anything you can do on cloudflare.com via the customer dashboard.

AMP (Accelerated Mobile Pages)

Accelerated Mobile Links Cloudflare’s Accelerated Mobile Links, powered by AMP, loads AMP-enabled external links inside of a viewing window, within the same tab, at least 3 times faster than normal mobile pages.

Security

DDoS Protection

Unmetered mitigation of volumetric DDoS Cloudflare’s unmetered mitigation of DDoS stops illegitimate volumetric traffic at the Cloudflare edge. All Cloudflare plans include unmetered mitigation without fear of being dropped.

Advanced DDoS support Backed by a full SLA, our DDoS experts will keep you online 24/7/365 no matter the size, type, or duration of the attack

SSL / TLS

Universal SSL/TLS 1.2 & 1.3 Encryption Cloudflare is compatible with your existing SSL configuration. If you do not currently use SSL, Cloudflare can provide you with SSL capabilities — no configuration required.

Certificate type Choose between Cloudflare-issued wildcard SSL certificates (issued automatically) and your own dedicated SSL certificate (upload to our network; supports EV certificates).

Opportunistic Encryption Opportunistic Encryption provides HTTP-only domains that can't upgrade to HTTPS, due to mixed content or other legacy issues, with the benefits of encryption and web optimization features.

TLS Optimization Cloudflare optimizes your websites SSL connection to ensure a fast HTTPS experience for your visitors.

Activation time SSL on all paid plans activate instantly. SSL on free plans take up to 24 hours for activation.

Browser support Universal SSL on the Free plan works with most modern browsers and on paid plans with all browsers.

Web Application Firewall (WAF)

Cloudflare WAF Managed Ruleset Cloudflare-managed ruleset protecting against highest severity vulnerabilities.

OWASP ModSecurity Core Rule Set Includes OWASP ModSecurity Core Rule Set automatically to protect you against the Top 10 vulnerabilities identified by the Open Web Application Security Project (OWASP).

Custom WAF rules Import your own rules and write custom ones; global update will take effect in less than 30 seconds.

Firewall Rules

Number of rules

Regular Expressions (regex) Regular Expressions (regex), sometimes called a pattern, is an expression used to specify a set of strings. Like wildcards, but more powerful, regex gives you the ability to pattern-match text strings occuring in supported fields to target specific traffic.

Threat Blocking & Privacy

Deploy collective intelligence to identify new threats Cloudflare gets smarter about security threats as more sites join. Protection from attacks on one site is extended to the entire Cloudflare community within seconds.

Reputation-based threat protection Block known malicious threats from accessing your site. Security levels are customizable site by site.

Comment spam protection Stop spammers from posting to your website.

Content scraping protection Protect all of your content including text, images and email addresses from web scrapers with Cloudflare's ScrapeShield™ service.

Block or Challenge Visitors Fully block or challenge visitors by country, IP address, or AS number. Outside of the Enterprise plan, you can only 'Challenge' visitors by two letter country code, which means a human visitor could still enter the site by passing the captcha.

Zone Lockdown Zone Lockdown allows for the whitelisting of specific IP addresses and IP ranges, whereby all other IPs are effectively blacklisted. This supports specific subdomains and URLs and is useful to protect an administrative area from non-specified IP addresses.

Access Control

Multi-User Access Invite others to manage the account as an Administrator. Invited Administrators have full control over the account except for managing members and changing billing information. Visit the ‘Members’ tab, in the new Account area within the Cloudflare dashboard to get started.

Single Sign On support The Cloudflare dashboard now supports Single Sign On (SSO) for ease of centralized identity and access management. Cloudflare Account Owners will be able to setup and define who can access their Cloudflare accounts with the same Identity Provider (IdP) they currently use.

Compliance

PCI DSS 3.2 Compliance Bring your business into compliance with the latest PCI DSS 3.2 standards by enabling Cloudflare's web application firewall (WAF) and Modern TLS Only mode.

Reliability

DNS

DNSSEC DNSSEC ensures that a website’s traffic is safely directed to the correct servers, so that a connection to a website is not intercepted by a man-in-the-middle.

Global Anycast DNS Fast responsive times globally and nearinstant updates.

Easy DNS management Cloudflare offers a simple and intuitive DNS management interface.

Wildcard DNS support Cloudflare supports wildcard DNS at all plan levels. For Enterprise plans, Cloudflare will full proxy wildcards providing security and performance for these subdomains.

Client interface API Cloudflare offers a simple and intuitive DNS management interface.

Custom Nameservers Custom nameservers allow you to create your own, unique nameservers in place of your assigned Cloudflare nameservers.

Availability

Always Online™ Keeps the static portions of your site online even if your origin server goes down.

Insights

Analytics

Time Range The Cloudflare analytics dashboard provides the ability to magnify your data by time range scopes of 1 hour, 15 minutes, or 1 minute, depending on your plan type.

Bandwidth Saved Cloudflare saves you bandwidth by serving cached versions of your content from our data centers. This means that only a small number of requests actually go back to your origin server. The more content served by our edge servers, the more bandwidth you save.

Threats Mitigated & Sources Total Threats Stopped measures the number of "suspicious" and "bad" requests that were aimed at your website. In addition, you can view top threat origins by country and threat type.

Operational Metrics Cloudflare measures and reports on operational metrics such as traffic served over SSL, fewer servers needed, and unique visitors.

Audit Logs View and download the most recent changes made within your account via UI or API.

DNS Analytics

Historical Data View the history of your DNS queries by up to a certain amount of time.

Dimension Filter Filter DNS query data by a variety of dimensions, according to plan type.

Metric Filter Filter DNS query data by a variety of metrics, according to plan type.

Geographic Visualization See where queries for valid and invalid DNS queries are coming from.

Support

Technical Support All customers receive standard 101domain support. Cloudflare 24/7/365 technical support options available at varying levels based on plan type.

Service Level Agreement In the rare event of downtime, customers receive a service credit against the monthly fee, in proportion to the respective disruption and affected customer ratio.

Do you want to learn more?

Globally load balanced content delivery network (CDN)

Automatic static content caching

Cache purge

Minimum edge cache expire TTL

Client maximum upload size

Custom Cache Keys

Asynchronous Javascript Loading Rocket Loader™

Image optimization with Polish™

Mobile optimization with Mirage™

Image manipulation with Image Resizing

IPv6 compatibility and gateway

HTTP/2 and SPDY

WebSockets

Page rules

RESTful API

Accelerated Mobile Links

Unmetered mitigation of volumetric DDoS

Advanced DDoS support

Universal SSL/TLS 1.2 & 1.3 Encryption

Certificate type

Opportunistic Encryption

TLS Optimization

Activation time

Browser support

Cloudflare WAF Managed Ruleset

OWASP ModSecurity Core Rule Set

Custom WAF rules

Regular Expressions (regex)

Deploy collective intelligence to identify new threats

Reputation-based threat protection

Comment spam protection

Content scraping protection

Block or Challenge Visitors

Zone Lockdown

Multi-User Access

Single Sign On support

PCI DSS 3.2 Compliance

DNSSEC

Global Anycast DNS

Easy DNS management

Wildcard DNS support

Client interface API

Custom Nameservers

Always Online™

Time Range

Bandwidth Saved

Threats Mitigated & Sources

Operational Metrics

Audit Logs

Historical Data

Dimension Filter

Metric Filter

Geographic Visualization

Technical Support

Service Level Agreement