Cloudflare Services
Advanced Certificate Manager (ACM)
Certificates on your terms.
Go beyond the standard shared certificate. Advanced Certificate Manager gives your site custom-issued SSL. You choose the certificate authority, the validity period and exactly which hostnames are covered, including wildcards.
What it gives you
Wildcard & SAN coverage
Cover a domain and every subdomain, or list specific hostnames, on a single managed certificate.
Choose CA & validation
Pick the issuing authority, and validate over DNS or HTTP to fit your compliance needs.
We renew before expiry
Renewals and re-validation are handled as a managed service.
Argo Smart Routing
Skip the traffic jams of the public internet.
Argo Smart Routing sends your visitors’ requests across Cloudflare’s private backbone using live network intelligence, steering around congestion and outages instead of taking the default public path. Load times get snappier and more consistent, especially for a global audience.
What it gives you
Intelligent path selection
Real-time routing picks the fastest route to your origin, updated continuously as the internet changes.
Faster, steadier delivery
Cuts round-trip time on dynamic, uncacheable requests where a CDN alone can’t help.
Origin offload
Tiered caching means fewer trips back to your server, so it stays responsive under load.
Cloudflare Business (managed)
For the sites
that cannot go down.
Business adds advanced security that stands up to determined attacks, a 100% uptime guarantee on Cloudflare’s network, and priority routing that keeps visitors moving under load.
How the plans compare
Cloudflare’s real plan tiers. Yours is highlighted.
| Feature | FreeDIY baseline | ProManaged | BusinessYour plan |
|---|---|---|---|
| Global CDN & edge caching | |||
| Free SSL / HTTPS | |||
| Unmetered DDoS mitigation | |||
| Image & mobile optimisation | |||
| Web Application Firewall | Basic | Managed rules | Custom rules |
| Page rules | 3 | 20 | 50 |
| Traffic & threat analytics | Basic | Enhanced | Advanced |
| Upload your own SSL certificate | |||
| 100% uptime SLA | |||
| Priority support routing | |||
| Configured & managed by our team |
These are standard Cloudflare plan features. Setup, monitoring and tuning are included in the managed service.
Advanced security
Tighter WAF rulesets and mitigation that holds up against more determined, targeted attacks, not just the common ones.
Priority routing
Your traffic gets preferential paths across Cloudflare’s network, so visitors keep moving even under heavy load.
Custom SSL & policies
Bring your own certificates and enforce stricter security policies to match your compliance requirements.
100% uptime guarantee
Backed by Cloudflare’s network SLA. That matters for stores and membership sites where downtime means lost revenue.
What we handle for you
A fully managed service. You never touch a dashboard.
- Onboarding & DNS cutover. We migrate your zone with zero downtime.
- WAF tuning. Rules tightened to your app, false-positives triaged.
- Cache & speed. Image optimisation and mobile-first delivery.
- Threat monitoring. We watch the analytics so you don’t have to.
Cloudflare Pro (managed)
Serious speed and security.
Without touching a setting.
Give your website a real speed and security upgrade. Images are optimised, pages load faster on mobile, and a smart Web Application Firewall blocks common attacks before they reach your server. Richer traffic and threat analytics show you exactly what Cloudflare is stopping.
How the plans compare
Cloudflare’s real plan tiers. Yours is highlighted.
| Feature | FreeDIY baseline | ProYour plan | BusinessManaged |
|---|---|---|---|
| Global CDN & edge caching | |||
| Free SSL / HTTPS | |||
| Unmetered DDoS mitigation | |||
| Image & mobile optimisation | |||
| Web Application Firewall | Basic | Managed rules | Custom rules |
| Page rules | 3 | 20 | 50 |
| Traffic & threat analytics | Basic | Enhanced | Advanced |
| Upload your own SSL certificate | |||
| 100% uptime SLA | |||
| Priority support routing | |||
| Configured & managed by our team |
These are standard Cloudflare plan features. Setup, monitoring and tuning are included in the managed service.
What you get
Faster on every device
Automatic image optimisation and edge caching cut load times.
Web Application Firewall
A smart WAF blocks common exploit attempts such as SQLi, XSS and bots before they ever reach your origin.
Richer analytics
See real traffic and threat data: what’s being blocked, where visitors come from, and how fast pages deliver.
We run it for you
We handle onboarding, then keep the settings tuned as your traffic changes.
Ideal for
- Growing business sites that have outgrown the free plan.
- Active blogs with real, spiky traffic.
- Small online shops that need speed and a security floor.
Domain Registration (at cost)
Domains at wholesale, no markup.
Register and transfer domains through Cloudflare Registrar at genuine at-cost pricing. WHOIS privacy is included free, DNS is instant on Cloudflare, and there are no surprise renewal hikes.
What it gives you
Wholesale pricing
Pay the registry’s cost with no reseller margin added. Renewals cost the same as registration.
Privacy included
WHOIS redaction is on by default at no extra charge, keeping your details off public records.
Instant Cloudflare DNS
Domains resolve on Cloudflare’s fast, resilient DNS from the moment they’re registered.
Images
Store, resize and optimise every image.
Cloudflare Images stores your originals and serves optimised variants on the fly, in the right dimensions and format for each device. No build step and no second CDN to pay for.
What it gives you
One original, many variants
Define sizes once; the right crop and resolution are generated on demand.
Automatic optimisation
Modern formats and compression are applied automatically for lean, fast delivery.
Served from the edge
Images cache and deliver from Cloudflare’s network for snappy loads everywhere.
Load Balancing
Stay online, even when a server doesn’t.
Spread traffic across multiple origin servers with continuous health checks and automatic failover. You can also route by geography or latency to put users on the closest pool.
What it gives you
Health-checked pools
Origins are monitored constantly; unhealthy servers are pulled from rotation automatically.
Instant failover
Traffic reroutes to a healthy origin the moment a problem is detected.
Geo & latency steering
Send visitors to the nearest or fastest pool for lower latency and regional resilience.
R2 Object Storage
Object storage with no egress bill.
R2 is S3-compatible object storage for your assets, backups and media. Point your existing S3 tooling at it and keep your data close to Cloudflare’s network.
What it gives you
S3-compatible API
Use the tools and SDKs you already have. R2 speaks the S3 API.
No egress fees
Pay for storage and operations, not for bandwidth out.
Close to the edge
Objects sit next to Cloudflare’s network for fast, cache-friendly delivery.
Stream (video)
Upload a video. We handle the rest.
Cloudflare Stream ingests your video, encodes it into adaptive-bitrate renditions, stores it and delivers it worldwide through a clean, embeddable player. It replaces a transcoding pipeline and the storage buckets that go with it.
What it gives you
Upload & auto-encode
Every upload is transcoded into multiple qualities automatically for adaptive streaming.
Adaptive player
A responsive player adjusts quality to each viewer’s bandwidth for buffer-free playback.
Delivered everywhere
Video streams from Cloudflare’s global network, close to your audience.
Workers Paid
Run your code at the edge, worldwide.
Cloudflare Workers execute your JavaScript or WebAssembly in every Cloudflare location, milliseconds from your users. The Paid plan lifts the free limits with far more included requests and CPU time. It suits APIs, redirects, auth, A/B logic and request transforms, with no server to manage.
What it gives you
Serverless, globally
Every request is served at the edge, with no round-trip to your origin.
Room to scale
Millions of included requests and generous CPU time, with predictable overage pricing.
Deploy in seconds
Ship logic to the whole network in one step; roll back just as fast.
Zero Trust Access (per seat)
Protect internal apps without a VPN.
Cloudflare Access puts an identity check in front of your internal tools and dashboards. Users sign in with your existing identity provider, and policies enforce who and what device may connect. Licensed simply, per seat.
What it gives you
Identity-aware access
Every request to a protected app is authenticated against your IdP and policies.
MFA & device posture
Require multi-factor and healthy devices before access is granted.
Simple per-seat licensing
Add and remove users as your team changes; pay for the seats you use.