Cloudflare Pricing 2026: Plans, Hidden Costs & Decision Matrix

Cloudflare raised its Business plan price to $250/month in late 2025 and quietly restructured add-on billing for Workers, R2, and Stream. If your last pricing review was twelve months ago, your cost model is wrong. This updated breakdown of Cloudflare pricing in 2026 covers every tier, surfaces the add-on charges that do not appear on the main pricing page, and gives you a workload-profile decision matrix so you can match plan to architecture instead of guessing. If you are evaluating alternatives, the per-TB math at the end will save you a procurement cycle.

Cloudflare Pricing Plans in 2026: What Each Tier Actually Includes

Cloudflare still ships four public tiers. The sticker prices for Free and Pro have not changed since 2022, but the feature gates have shifted materially as of Q1 2026.

The Business tier jump from the legacy $200/mo to $250/mo (effective for new subscriptions from November 2025) is confirmed on the Cloudflare dashboard signup flow as of May 2026. Existing customers on annual contracts locked in prior pricing through their renewal date.

Cloudflare Cost Beyond the Plan: Add-Ons That Change the Math

The sticker price of a Cloudflare plan is rarely the final invoice. Three categories of add-ons routinely double or triple the effective cost for production workloads.

Workers and Workers KV

The Workers Paid plan is $5/month base plus $0.50 per million requests beyond the first 10 million. Workers KV reads cost $0.50 per million; writes cost $5.00 per million. For a service handling 100 million requests/month, that is approximately $50/month in compute alone before KV operations. At 500 million, expect $250/month. These charges apply regardless of your plan tier.

R2 Object Storage

R2 has zero egress fees, which is its primary selling point. Storage is $0.015/GB/month. Class A operations (writes) run $4.50 per million; Class B (reads) run $0.36 per million. A 10 TB bucket with moderate read traffic costs roughly $150/month in storage plus $15–40/month in operations. This is competitive with S3 when you factor in the zero-egress model, but it is not free.

Bot Management, Rate Limiting, and Advanced Certificates

Advanced Bot Management is Enterprise-only and priced into the custom contract. Rate Limiting (legacy) billed at $0.05 per 10K good requests on Pro and Business. Dedicated SSL certificates with custom hostnames cost $10/month per certificate pack on Business. These are the line items that surprise teams after the first invoice.

Cloudflare Enterprise Pricing: What the Custom Quote Actually Looks Like

Cloudflare does not publish enterprise pricing, which makes benchmarking difficult. Based on publicly disclosed contract structures and procurement data shared in engineering communities as of early 2026, here is a realistic range:

• Base platform fee: $5,000–$8,000/month for a single-product bundle (CDN + WAF + DDoS). Multi-product bundles (adding Zero Trust, Gateway, or CASB) push this to $12,000–$25,000/month.
• Bandwidth commits: Enterprise contracts typically require a bandwidth floor. Overages are negotiated per-GB, usually in the $0.02–$0.05 range depending on geography mix.
• Advanced Bot Management: Often quoted at $3,000–$10,000/month depending on request volume.
• Contract length: Annual minimum. Multi-year commits unlock 15–25% discounts.

The total cost for a mid-market enterprise running five zones with bot management, Workers at scale, and Zero Trust frequently lands between $15,000 and $40,000/month. That is not unusual for the feature set, but it is worth modeling precisely before signing.

Workload-Profile Decision Matrix: Which Cloudflare Plan Fits Your Architecture

Plan selection should follow workload characteristics, not company size. The matrix below maps five common architecture profiles to the minimum viable Cloudflare tier as of 2026.

The gap between Business and Enterprise is where most procurement teams stall. If your requirements include Logpush to your own SIEM, network-priority routing, or Advanced Bot Management, there is no workaround: you need Enterprise. Those features are hard-gated, not soft-gated.

Bandwidth-Heavy Workloads: Where Cloudflare Pricing Gets Complicated

Cloudflare markets "unmetered bandwidth" on all self-serve plans. That is technically accurate for HTTP/S traffic served from cache. But there are caveats that matter at scale. Serving non-cacheable or non-web traffic (large file downloads, video chunks via non-Stream origins) at high volume on a $20/mo Pro plan will eventually trigger a terms-of-service review. Cloudflare's section 2.8 of the Self-Serve Subscription Agreement still restricts use of the CDN as a primary delivery mechanism for non-HTML content on Free, Pro, and Business plans unless you use a Cloudflare-specific product (Stream, Images, R2).

For teams delivering 25 TB or more per month of media or software binaries, the practical choice is Enterprise with a bandwidth commit or a dedicated delivery provider. On the dedicated-provider side, BlazingCDN offers volume-based pricing starting at $4/TB ($0.004/GB) for up to 25 TB, scaling down to $2/TB at 2 PB+ commitments. It delivers fault tolerance and uptime comparable to CloudFront while keeping per-GB cost 40–70% lower than hyperscaler CDN pricing, which is why media companies (Sony among its clients) and software distributors use it for high-egress delivery.

FAQ

How much does Cloudflare cost for a small business website in 2026?

For a single-zone site with moderate traffic, the Pro plan at $20/month covers WAF, image optimization, and analytics. If you need custom SSL or an uptime SLA, the Business plan at $250/month is the minimum. Factor in Workers ($5/mo base) if you run any edge logic.

What is Cloudflare enterprise pricing in 2026?

Enterprise contracts start at approximately $5,000/month for a single-product CDN/security bundle. Multi-product bundles including Zero Trust, Bot Management, and data localization commonly range from $15,000 to $40,000/month depending on zone count, bandwidth commit, and feature scope. Annual contracts are mandatory.

Is Cloudflare really free for unlimited bandwidth?

Yes, for HTTP/S-cached web traffic. However, section 2.8 of the self-serve agreement restricts serving disproportionate volumes of non-HTML content (video, large binaries) without using Cloudflare's dedicated products. High-bandwidth non-web workloads should plan for Enterprise or an alternative delivery provider.

How much does Cloudflare Workers cost for 100 million requests per month?

The Workers Paid plan includes 10 million requests for $5/month. The next 90 million requests at $0.50 per million adds $45. Total: approximately $50/month in compute, excluding KV, Durable Objects, or D1 charges.

What changed in Cloudflare pricing between 2025 and 2026?

The Business plan increased from $200/mo to $250/mo for new subscriptions (November 2025). R2 pricing remained stable. Workers pricing structure is unchanged, but Durable Objects added a new billing dimension for WebSocket connections in Q1 2026. Enterprise quotes have trended 10–15% higher due to expanded Zero Trust bundling.

Does Cloudflare charge for DDoS protection?

Unmetered DDoS mitigation is included on every plan, including Free. Advanced DDoS analytics and alerting are available on Business and Enterprise. Network-layer custom rules for DDoS filtering require Enterprise.

Run Your Own Cost Model This Week

Pull your last 90 days of origin egress, cache-hit ratios, and Workers invocations from your current provider dashboard. Map them against the tier table and add-on rates above. If your blended cost per TB on Cloudflare Enterprise exceeds $40, you are either over-provisioned on features or under-leveraging cache, and either problem is worth a two-hour investigation. If bandwidth is your dominant cost driver and your workload is delivery-heavy rather than security-heavy, benchmark a dedicated CDN alongside Cloudflare. The pricing spread at 100 TB+ is large enough to fund an entire additional layer of redundancy.