Cloudflare WAF

Cloudflare WAF is a web-based firewall deployed at the edge. It includes managed rule sets, API protection, and rate limiting; bot management is not included. The Free plan costs nothing, billed monthly, and includes up to 24 hours of standard log retention and one rate-limiting rule. Pro costs $20 a month, billed annually, with up to 30 days of standard log retention and two rate-limiting rules. Business costs $200 a month, billed annually, with up to six months of standard log retention and five rate-limiting rules. Contract uses custom pricing, billed annually, and lists WAF and enterprise application security features. The listed paid starting price is $20/mo (annual). Cloudflare was founded in 2009 and is headquartered in San Francisco, California, United States. The plans specify different log-retention periods and rule counts, so those limits vary by selection.

Cloudflare WAF offers edge deployment, managed rules, API protection, and tiered rate-limit and retention allowances. Bot management is not included, and paid billing is annual on the listed plans.

It suits teams seeking an edge-deployed web application firewall with managed rule sets, API protection, and rate limiting. The free plan offers a no-cost starting option, while paid plans increase listed retention and rule limits.