Cloudflare Statistics 2026: Network Size, Market Share, and Revenue

Cloudflare proxies 23.4% of all websites and 83.5% of all sites with a known reverse proxy. The figures come from W3Techs’s June 2026 site survey. The San Francisco company sits in front of more of the public web than any other vendor, runs a network spanning 337 cities across 8 regions and 100+ countries, and pulled in $639.8 million in Q1 2026 revenue alone. A customer cohort mix shift: large customers ($100,000+ ARR) now drive 73% of Cloudflare’s total revenue (up from 63% in 2022), a quieter signal than headline growth.

The numbers below cover Cloudflare’s network footprint, revenue, and paying customer cohorts, DDoS and threat mitigation telemetry, the new pay-per-crawl economics for AI crawler traffic, and workforce data through Q1 2026. Every figure traces to a primary-source disclosure: Cloudflare press releases, the company’s network page, W3Techs, and the inaugural Cloudflare Threat Report.

Key Takeaways

• Cloudflare proxies 23.4% of all websites globally and 83.5% of the websites that run any known reverse proxy, per W3Techs’s June 2026 survey.
• The network spans 337 cities across 8 regions and 100+ countries, with 13,000+ network interconnections.
• Per Cloudflare’s Q1 2026 IR press release, Q1 revenue hit $639.8 million, a 34% year-over-year increase, with GAAP gross margin at 71.2%.
• Cloudflare ended 2025 with 332,466 paying customers and 4,298 large customers spending over $100,000 per year, driving 73% of total revenue.
• Per Cloudflare’s 2026 Threat Report, the network blocks an average of 230 billion threats per day with visibility into roughly 20% of all global internet traffic.
• Cloudflare mitigated 47.1 million DDoS attacks in 2025, a 121% year-over-year jump, including a record 31.4 Tbps assault in December 2025, per Cloudflare Radar.
• Pay-per-crawl economics: Cloudflare’s June 18, 2026, HTTP 402 launch already fires more than 1 billion Payment Required responses per day to AI crawlers, per the Cloudflare blog announcement.
• Over 1 million developers build on Cloudflare Workers per Forrester, the company’s edge compute platform.
• Customer cohort mix shift: large customers ($100,000+ ARR) now drive 73% of revenue, up from 63% in 2022, per Cloudflare’s Q4 2025 investor slides.

Editor’s Choice

• Per the Cloudflare FY2025 IR press release, full-year 2025 revenue: $2.167 billion, up 30% year-over-year.
• FY2026 revenue guidance: $2.785 billion to $2.795 billion (about 28 to 29% growth).
• Q1 2026 free cash flow: $84.1 million, or 13% of revenue.
• Paying customer growth: 40% year-over-year through year-end 2025.
• Largest single customer contract booked: $42.5 million per year in Q4 2025, with large customers (over $100,000 annualized) driving 73% of total revenue (up from 63% in 2022).
• Employee headcount: 5,156 at the end of 2025.
• Cash, cash equivalents, and available-for-sale securities: $4,163.9 million as of March 31, 2026.

Cloudflare Web Traffic and Market Share

• Cloudflare is used by 23.4% of all websites tracked by W3Techs, making it the single largest reverse-proxy vendor by a wide margin.
• Inside the reverse-proxy category specifically, Cloudflare’s share is 83.5% of sites whose reverse proxy is identifiable.
• Wikipedia’s January 2026 snapshot, citing W3Techs, recorded approximately 21.3% of all websites on the Internet running Cloudflare, illustrating roughly two percentage points of share gain in five months.
• The company services roughly 20% of all global internet traffic in terms of visibility, a figure Cloudflare uses to anchor its 2026 Threat Report sample frame.
• Cloudflare’s reach extends across streaming, commerce, and SaaS, with paid services delivered to 162,086 customers at the end of Q4 2022 before doubling to the 2025 cohort below.
• The gap between Cloudflare’s 23.4% site share and its near-monopoly inside the reverse-proxy category points to remaining headroom: every site that adopts any proxy in the future is a likely Cloudflare prospect.

By the numbers: Per W3Techs’s June 2026 survey, Cloudflare serves 23.4% of all websites and 83.5% of those running any identifiable reverse proxy, while Cloudflare’s own 2026 Threat Report says the network has visibility into roughly 20% of global internet traffic. That asymmetry frames the remaining addressable market.

Cloudflare Global Network Footprint

• The Cloudflare anycast network covers 337 cities across 8 regions and 100+ countries as of June 2026.
• North America hosts 55 cities, while Latin America & the Caribbean carry 66 to 67 cities.
• Europe accounts for 57 cities, Asia for 60 cities, and Mainland China for 35 cities.
• Africa has 32 cities, the Middle East has 19 cities, and Oceania has 13 cities.
• The network carries 13,000+ network interconnections with peering partners and ISPs, with 95% of the world’s internet-connected population within 50 milliseconds of a Cloudflare PoP.
• For Cloudflare’s headline scale comparison, see Google search statistics on the dominant search rail that Cloudflare’s network helps deliver.

Don’t chase tech news. We track it for you.

One weekly briefing with the launches, AI developments, and breaches that matter. No filler.

Email address

Subscribe Now

Read by pros at Fortinet, TSMC, Barclays, and Deloitte.

Recent Developments

• June 18, 2026: Pay Per Crawl launch. Cloudflare moved its Pay Per Crawl feature into private beta on June 18, 2026, giving publishers an HTTP 402-based mechanism to charge AI crawlers per request. Publishers are now sending more than one billion HTTP 402 Payment Required responses to AI crawlers every day across the Cloudflare network.
• April 2026: Agents Week. Cloudflare used Agents Week 2026 to consolidate the AI Crawl Control surface across every plan tier, following the August 2025 general availability of AI Crawl Control.
• March 3, 2026, Inaugural Threat Report. Cloudflare published its first Threat Report on March 3, 2026, reporting that 94% of login attempts on protected sites originate from bots rather than humans.
• February 19, 2026: Stack Overflow partnership. Stack Overflow published a joint case study with Cloudflare on February 19, 2026, adopting the Pay Per Crawl model to monetize crawler access to its developer Q&A archive.
• February 2026: FY2025 results. Cloudflare reported full-year 2025 revenue of $2,167.9 million, up 30% year-over-year, and issued FY2026 guidance of $2,785.0 to $2,795.0 million.
• December 2025: Record DDoS event. A single botnet pushed 31.4 terabits per second of traffic in December 2025, the largest publicly disclosed DDoS attack on record.

Cloudflare Revenue and Financial Performance

• Q1 2026 revenue reached $639.8 million, representing an increase of 34% year-over-year.
• Full-year 2025 total revenue came in at $2,167.9 million, up 30% year-over-year, with Q4 2025 alone delivering $614.5 million.
• FY2026 guidance ranges from $2,785.0 to $2,795.0 million in revenue and $378.0 to $382.0 million in non-GAAP operating income.
• Q1 2026 GAAP gross margin was 71.2%, down from 75.9% in Q1 2025 as the company invested in compute capacity.
• Non-GAAP operating margin held at 11.4% in Q1 2026, versus 11.7% in Q1 2025.
• Q1 2026 free cash flow was $84.1 million, or 13% of revenue, up from $52.9 million, or 11% in Q1 2025.

Key finding: Cloudflare’s GAAP gross margin compressed by 4.7 percentage points between Q1 2025 and Q1 2026 (from 75.9% to 71.2%), even as revenue grew 34%. Per the Q1 2026 IR press release, the company continued investing in compute capacity for AI workloads, which carries a different cost profile than traditional CDN traffic.

Cloudflare Paying Customer Growth

• Cloudflare ended 2025 with 332,466 paying customers, up 40% year-over-year.
• Large customers (those spending over $100,000 in annualized revenue) totaled 4,298 at the end of Q4 2025, representing 23% year-over-year growth.
• That large-customer cohort drove 73% of total revenue, up from 63% in 2022.
• Cloudflare closed 2024 with 173 customers that spend more than $1 million with Cloudflare per year, a small but disproportionately important wedge.
• Q4 2025 also saw the largest annual contract value deal in company history at $42.5 million per year.

Source: Cloudflare Q4 2025 investor presentation slides (February 2026)

Cloudflare Workers and Developer Platform Statistics

• Over 1 million developers build on the Cloudflare Workers platform, Cloudflare’s serverless edge compute environment.
• Forrester named Cloudflare Workers a Leader in Edge Development Platforms in Q4 2023 in its Wave evaluation.
• Workers run on Cloudflare’s full anycast network, with compute available in every data center city, meaning each of the 337 PoPs hosts the runtime.
• The platform uses V8 isolates instead of containers, delivering sub-millisecond cold starts, the core architectural choice that separates Workers from AWS Lambda’s container model.
• Workers’ developer base, paired with the network’s geographic reach, gives Cloudflare an unusual position: a single product that competes simultaneously with AWS Lambda, Akamai EdgeWorkers, and Fastly Compute@Edge.

DDoS Mitigation and Threat Statistics

• Cloudflare mitigated 47.1 million DDoS attacks in 2025 alone, a 121% year-over-year increase.
• The network blocks 230 billion threats per day on average, drawing on visibility into roughly 20% of global internet traffic.
• A single record-breaking attack peaked at 31.4 terabits per second in December 2025, lasting 35 seconds and generating 14.1 billion packets per second.
• The attack came from the Aisuru-Kimwolf botnet, which operates an estimated 1 to 4 million infected devices globally.
• Bot traffic now accounts for 94% of login attempts on Cloudflare-protected sites, per the 2026 Threat Report.
• The volume of automated bot traffic continues to outpace human activity on every login surface Cloudflare monitors.
• The DDoS arms race framing sits inside a broader cybersecurity statistics pattern.

Source: Cloudflare 2026 Threat Report (March 3, 2026)

Key finding: Cloudflare’s first annual Threat Report, published March 3, 2026, recorded 47.1 million DDoS mitigations across 2025, a 121% jump year-over-year. The largest publicly disclosed attack, attributed to the Aisuru-Kimwolf botnet, peaked at 31.4 Tbps and 14.1 billion packets per second over a 35-second window. Cloudflare shared the telemetry via Cloudflare Radar.

Cloudflare Workforce and Employee Count

• Total Cloudflare headcount reached 5,156 employees at the end of 2025.
• Headcount grew by approximately 16% year-over-year through Q3 2025, when the company reported roughly 4,800 employees.
• The company was founded on July 26, 2009, by Matthew Prince, Lee Holloway, and Michelle Zatlyn.
• Cloudflare went public on September 13, 2019, under the NYSE ticker NET at a $15 IPO price.
• The company is headquartered in San Francisco, California, with additional offices in London and Singapore.

Cloudflare Internet Traffic Share and Radar Data

• Cloudflare’s own internal telemetry covers roughly 20% of all global internet traffic, the sample frame for its threat reporting.
• The company’s Radar service publishes near-real-time traffic rankings across Cloudflare’s PoP footprint, a global network that spans 8 regions.
• Network-wide, 95% of the world’s internet-connected population sits within 50 milliseconds of a Cloudflare data center, with most users inside 20 milliseconds.
• Cloudflare’s 2025 financial disclosures recorded total assets of $6.036 billion and total equity of $1.459 billion as of fiscal year-end 2025.

Source: Cloudflare 10-K filed February 2026, Cloudflare Q1 2026 IR press release

How big is Cloudflare?

Cloudflare’s most recent full-year revenue (FY2025) was $2,167.9 million, up 30% year-over-year. Its network touches 23.4% of all websites and 95% of the world’s internet-connected population within 50 milliseconds. It runs from 337 cities across 100+ countries and employs 5,156 employees. The company’s 4,298 large customers (over $100,000 annualized revenue) drive 73% of revenue, and its FY2026 revenue guidance ranges from $2,785.0 to $2,795.0 million.

What percentage of websites use Cloudflare?

Per W3Techs’s June 2026 site survey, Cloudflare is used by 23.4% of all websites and 83.5% of all the websites whose reverse proxy service we know. That share climbed from approximately 21.3% of all websites on the Internet in January 2026, a roughly two-percentage-point gain in five months. Among the top 10 million sites ranked by Tranco (the W3Techs sample frame), no other reverse-proxy vendor approaches Cloudflare’s footprint.

Conclusion

Cloudflare’s numbers describe a company that has grown beyond a CDN: 23.4% of all websites, 4,298 large customers contributing 73% of total revenue, 230 billion threats per day blocked, and over 1 million developers building on Workers. The headline gross-margin compression, from 75.9% to 71.2% year-over-year, reflects deliberate investment in compute capacity for an AI-shaped traffic mix the company is already monetizing through Pay Per Crawl.

The next year will test whether Cloudflare can keep a large customer share concentration (73% of revenue) compounding without payback risk while the HTTP 402 economics scale. With the network sending more than one billion HTTP 402 Payment Required responses to AI crawlers every day and FY2026 revenue guidance of $2,785.0 to $2,795.0 million, the company has more upside than downside on both surfaces.