Written by TFN Research Desk — covering startups, technology, digital media, and business strategy.
While AWS and Google Cloud raced to build the internet’s compute layer, a company most users have never heard of quietly became the internet’s nervous system.
On November 18, 2025, Cloudflare experienced a major outage lasting nearly six hours. The services that went down alongside it included ChatGPT and Spotify. That detail says more about Cloudflare’s position in the internet’s architecture than any revenue figure could. When a company you have never paid for fails, and it takes ChatGPT with it, that company is no longer an infrastructure vendor. It is infrastructure itself.
Infrastructure Strategy • Case Study • Cloud Security • Developer Tools • Internet Architecture
The company behind the internet you use
Cloudflare sits in front of more than 20% of all websites, is the world’s largest managed DNS service provider, and in Q3 2025, crossed $562 million in quarterly revenue, representing 31% year-over-year growth (Cloudflare Q3 FY2025 SEC Filing, October 2025). The company’s trailing twelve-month revenue as of December 2025 reached $2.01 billion. Its network spans more than 330 cities across 125 countries. None of this was inevitable. It was built through a model that most enterprise software companies have explicitly avoided: giving the most valuable version of the product away for free.
Why this story matters
For Indian founders, Cloudflare’s model is worth studying for two reasons. First, it demonstrates how infrastructure businesses achieve scale through developer adoption rather than enterprise sales cycles, which is the path available to any Indian founder building B2B tools. Second, it shows that the free tier, when architected correctly, is not a customer acquisition cost. It is a competitive intelligence layer that makes the paid product better. The Indian startup ecosystem is producing more infrastructure companies than ever before, from payment rails to logistics APIs. The Cloudflare model is the most instructive template for how to build moats in infrastructure at scale.
Quick facts
| Metric | Detail |
|---|---|
| Founded | 2009 |
| Founders | Matthew Prince, Michelle Zatlyn, Lee Holloway |
| Headquarters | San Francisco, USA |
| Listed | NYSE: NET |
| Q3 2025 revenue | $562 million, up 31% year over year (Cloudflare Q3 FY2025 SEC Filing, October 2025) |
| FY2024 revenue | $1.67 billion (Cloudflare Q4 FY2024 SEC Filing, February 2025) |
| TTM revenue (Dec 2025) | $2.01 billion (DemandSage, January 2026) |
| Websites on Cloudflare | Over 41 million globally (DemandSage, January 2026) |
| Internet traffic share | 20%+ of all global web traffic (Cloudflare Q2 FY2025 SEC Filing, July 2025) |
| Data centres | 330+ cities, 125+ countries (Cloudflare Q3 FY2025 10-Q, October 2025) |
| Enterprise customers ($100k+/yr) | 3,712 as of Q2 2025 (DemandSage, January 2026) |
| Large customers ($1M+/yr) | 173 as of end-2024, up 47% year over year (Cloudflare Q4 FY2024 SEC Filing, February 2025) |
Background
Cloudflare was founded in 2009 by Matthew Prince, Michelle Zatlyn, and Lee Holloway, originally as an email spam-tracking project. The founding insight was that content delivery networks, which speed up websites by caching content close to users, were prohibitively expensive for small websites and developers. The internet was growing fastest at its edges, with millions of small sites, blogs, startups, and developers, but the infrastructure layer had been built for enterprises with large procurement budgets.
Prince’s decision was to offer CDN, DDoS protection, and DNS services for free to small sites and developers. This was not a standard freemium play. It was a structural bet: if you serve enough free traffic, you see enough of the internet’s threat landscape to build security products that no paid-only network could match. The free tier was, from the beginning, an intelligence acquisition mechanism.
Timeline
| Year | Milestone |
|---|---|
| 2009 | Cloudflare founded |
| 2010 | Public launch; free tier for websites introduced |
| 2014 | Cloudflare processes more internet traffic than Twitter, Amazon, Apple, and Bing combined |
| 2017 | Launches Cloudflare Workers, the edge computing platform |
| 2019 | IPO on NYSE at $4.4 billion valuation |
| 2020 | Cloudflare One (Zero Trust platform) launched; $431 million annual revenue |
| 2021 | Processes over 28 million HTTP requests per second at peak |
| 2024 | FY revenue reaches $1.67 billion; 173 customers spending $1M+ annually |
| Q2 2025 | Revenue crosses $2 billion annualised run rate; CEO confirms 20%+ of all websites on network |
| Q3 2025 | Quarterly revenue hits $562 million, 31% growth; RPO grows 43% year over year |
How it happened
Move 1: The free tier as intelligence infrastructure
Cloudflare’s free tier is not marketing. It is a data collection mechanism that makes the paid product better. Every free website on Cloudflare exposes the network to DDoS patterns, bot signatures, and novel attack vectors. By the time a sophisticated attacker targets a paying enterprise customer, Cloudflare has already seen that attack pattern from its free traffic. Free customers expose the company to diverse traffic, threats, and problems, often allowing it to see potential security, performance, and reliability issues at the earliest stage, as the company’s own 10-Q filings describe.
This is the structural advantage that incumbent security companies with enterprise-only customers cannot replicate. A company that only serves paying enterprises sees a narrow slice of the internet’s threat landscape. Cloudflare, serving 41 million websites including millions of free ones, sees everything.
Move 2: The network effect that compounds with scale
Cloudflare negotiates co-location agreements with internet service providers that allow it to place equipment directly in ISP data centres. This drives down bandwidth and co-location expenses. The larger the network, the better the negotiating position. The better the negotiating position, the lower the unit cost of traffic. The lower the unit cost, the more free traffic Cloudflare can afford to serve. The more free traffic it serves, the more ISP agreements it can negotiate from a position of strength. This flywheel has been running for fifteen years.
By 2025, Cloudflare’s network spans 330 cities and over 125 countries. The geographical density means that for most internet users in most countries, the nearest Cloudflare data centre is close enough to serve content faster than any competitor’s network. Speed advantages in infrastructure compounds: a faster network wins more customers, which funds more data centres, which makes the network faster.
Move 3: Expand from CDN to everything at the edge
Cloudflare began as a CDN and security company. Over time, it expanded into DNS, DDoS protection, zero trust security, SASE (Secure Access Service Edge), and most significantly, Cloudflare Workers, a serverless edge computing platform that lets developers run code on Cloudflare’s global network. This expansion followed a consistent pattern: identify a workload that companies need to run close to users, and offer it as a managed service on the existing network.
In Q1 2025, Cloudflare signed the largest contract in its history, a deal exceeding $100 million, driven by its Workers developer platform (Cloudflare Q1 FY2025 SEC Filing, May 2025). CEO Matthew Prince wrote in Q2 2025 that the company is “sitting in front of more than 20% of all websites, with more than half of our dynamic traffic flowing through APIs,” positioning it to power the “agentic web of the future.”
The strategy behind the success
Cloudflare’s strategy is a long-running bet on network density and surface area. By touching more of the internet than any competitor, it learns faster, defends better, and can offer new services at near-zero marginal cost on an existing network. The key discipline is staying on the internet’s infrastructure layer rather than moving up into applications, where competition is harder and differentiation more fragile.
“Great companies innovate and execute, and we continue to deliver on both,” Matthew Prince said in the Q3 2025 shareholder letter. “We’re shipping capabilities at an unmatched pace. This dramatically increases the value we deliver, expands our reach, and builds the rails for the next decade of Internet growth.”
Business model breakdown
Cloudflare generates revenue primarily through subscriptions. The free tier is available to all websites and developers. The Pro, Business, and Enterprise paid tiers add performance, security, and SLA guarantees. Cloudflare Workers and other developer products operate on pay-as-you-go pricing above free usage thresholds. Enterprise customers, now 3,712 spending over $100,000 annually and 173 spending over $1 million annually, are the primary revenue driver.
By the numbers
| Metric | Figure | Why it matters |
|---|---|---|
| Q3 2025 revenue | $562 million, +31% YoY (Cloudflare Q3 FY2025 SEC Filing) | Accelerating growth at $2B scale is rare for infrastructure businesses |
| Websites protected | 41 million+ (DemandSage, January 2026) | Network density makes every new product launch cheaper |
| Global web traffic share | 20%+ (Cloudflare Q2 FY2025 SEC Filing) | The most valuable real-time view of global internet patterns |
| $1M+ customers | 173, up 47% YoY (Cloudflare Q4 FY2024 SEC Filing) | Large customer growth signals enterprise market penetration |
| RPO growth (Q3 2025) | 43% year over year | Forward revenue visibility is expanding faster than current revenue |
| Gross margin (Q3 2025) | 74% GAAP (Cloudflare Q3 FY2025 SEC Filing) | Infrastructure companies at this margin are exceptional |
| International revenue | 50% of total as of Q3 2025 (Cloudflare Q3 FY2025 10-Q) | Genuinely global business, not US-centric growth |
What competitors missed
Akamai, the CDN incumbent, built a world-class enterprise network and charged accordingly. Its revenue in 2024 was approximately $3.9 billion, still larger than Cloudflare’s but growing at a fraction of the pace. The strategic error was treating the internet’s small-site layer as unmonetisable. Cloudflare treated it as the intelligence layer that would make the enterprise product better.
AWS, Google Cloud, and Azure each offer CDN and security services. None of them has replicated Cloudflare’s internet-coverage advantage because they built compute clouds, not network infrastructure clouds. They serve traffic originating from their own data centres. Cloudflare serves traffic from anywhere, to anywhere, as a network intermediary. That positioning is structurally different and much harder to replicate at Cloudflare’s current network density.
Risks and challenges
- A six-hour outage in November 2025 impacted 28% of HTTP traffic and took down ChatGPT, Spotify, and other major services. At 20%+ internet coverage, Cloudflare is a single point of failure risk for the global internet. Regulatory scrutiny of this concentration is an increasing risk.
- GAAP profitability remains elusive. The Q3 2025 GAAP operating loss was $37.5 million, even as non-GAAP operating income reached $85.9 million. The gap reflects stock-based compensation and other charges that are material for investors.
- The AI infrastructure opportunity is real but requires winning against AWS, Google Cloud, and Microsoft Azure, each of which has orders of magnitude more capital to invest in AI compute infrastructure.
- Cloudflare’s growth depends on adding new products to its existing customer base. If the cross-sell motion stalls, the network’s natural rate of new customer growth may not sustain 27–31% annual revenue growth at $2 billion in scale.
What founders can learn
The free tier can be a strategic asset, not just an acquisition tactic. Cloudflare’s free tier is not a marketing cost. It generates intelligence that makes the paid product better. Indian founders building infrastructure or security products should ask: what does serving free customers teach us that we cannot learn from paying customers alone? If the answer is “nothing,” the free tier is a cost. If the answer is “everything about our threat landscape” or “everything about demand patterns,” the free tier is a competitive asset.
Build your network effect around data, not just users. Most network effect frameworks focus on user count: more users make the product more valuable for other users. Cloudflare’s network effect operates through data: more traffic generates more intelligence, which makes the security product better, which attracts more paying customers, which funds more infrastructure, which serves more free traffic. Indian infrastructure founders should map their own version of this loop before assuming that user growth alone is the moat.
Infrastructure expansion is most durable when the new surface shares the existing network. Cloudflare Workers was not a diversification into a new business. It was a new product on the same global network. The incremental cost of offering compute at the edge was near-zero because the infrastructure already existed. Every product Cloudflare has launched, DDoS protection, zero trust, SASE, Workers, runs on the same 330-city network. Indian founders building infrastructure should think carefully about whether their platform expansions are genuinely adjacent to the existing infrastructure or are actually separate businesses requiring separate investment. [INTERNAL LINK: Micro-SaaS sector analysis]
Scale your network before scaling your sales team. Cloudflare’s large enterprise customer growth (47% in $1M+ customers year over year) is happening because the network is already inside most large organisations through developer adoption. Developers used the free tier, introduced it to their companies, and the enterprise sales team converted inbound demand rather than generating outbound demand. This land-and-expand motion is significantly more capital-efficient than traditional enterprise sales, and it starts with having a product that individual developers adopt willingly.
“We are firing on all cylinders, with the right technology, strategy, and team to accelerate the next phase of growth for Cloudflare and for the Internet at-large,” Matthew Prince wrote in the Q2 2025 shareholder letter. What he did not say, but what fifteen years of building makes clear, is that the technology and strategy have always been the same: get in front of as much internet traffic as possible, learn from it, and use that learning to build better products for the customers who pay.
Expert analysis
Cloudflare is now in the most consequential phase of its corporate history. At $2 billion in annual revenue, it has the scale to compete seriously for AI infrastructure workloads, SASE enterprise deployments, and the emerging market for tools that help content creators get paid in an AI-driven internet.
Bull case: The 43% year-over-year RPO (remaining performance obligation) growth in Q3 2025 suggests customers are signing larger, longer deals than ever. If the Workers platform becomes the default runtime for AI agents and applications at the edge, Cloudflare’s network becomes the compute and connectivity layer for the AI internet. That is a market multiple times larger than its current one.
Bear case: The GAAP operating loss persists at a time when public markets are scrutinising technology companies on profitability as well as growth. If the AI infrastructure opportunity requires heavier infrastructure investment than Cloudflare can fund from operations, a dilutive capital raise or margin compression is possible.
Contrarian view: Cloudflare’s most undervalued moat is its human capital. The company has attracted engineers who care about internet architecture at a fundamental level, people who are building for the internet’s next decade rather than optimising for a quarterly sales cycle. That culture produces product velocity that financial metrics do not capture and that competitors built on sales-led models struggle to replicate.
The TFN lens: The Freemium Infrastructure Flywheel
Most freemium models treat the free tier as a user acquisition funnel: attract users for free, convert a percentage to paid. Cloudflare operates a different model. The Freemium Infrastructure Flywheel works as follows: free traffic generates threat intelligence, threat intelligence improves the security product, a better security product attracts paying customers, paying customers fund more data centres, more data centres allow Cloudflare to offer free tier to more websites, which generates more threat intelligence.
The flywheel self-reinforces at every step. No step in the loop requires marketing spend. The product gets better as a direct function of the free traffic it serves. For Indian infrastructure founders, the relevant question is: does your free tier generate intelligence that improves your paid product, or does it merely generate user count? If the former, you have a flywheel. If the latter, you have a cost. [INTERNAL LINK: India unicorn sector analysis]
Future outlook
Cloudflare’s stated ambition is to build the connectivity infrastructure for the “agentic web,” the emerging internet architecture where AI agents make automated decisions and take actions on behalf of users. In Q2 2025, Matthew Prince spoke about Cloudflare’s position to “help invent the new business model for content creators on the AI-driven Internet.” This is a significant strategic expansion beyond CDN and security.
For India, Cloudflare’s trajectory has a direct implication. As Indian startup infrastructure matures, the companies that build network-effect moats through developer adoption and intelligence accumulation will have structural advantages that well-funded but less intelligent competitors cannot overcome. The question is not whether India will produce an infrastructure giant. It is whether that giant will build its moat through Cloudflare’s model, developer-led, data-driven, and free-tier-first, or through the enterprise sales cycle model that Akamai used and that is now showing structural limits.
The bottom line
Cloudflare is the internet’s invisible operating system. It is not a household name because it operates below the surface of every website, app, and API the internet’s users interact with. But its $2 billion in annual revenue, 31% growth rate, and 20%+ coverage of all global web traffic tell the story of an infrastructure business that compounded a single architectural insight, give free users the most valuable version of the product and learn from their traffic, into one of the most defensible positions in enterprise software.
Key takeaways
- Cloudflare serves more than 20% of all global web traffic and over 41 million websites, making it the world’s largest managed DNS provider and a critical piece of global internet infrastructure.
- Q3 2025 revenue was $562 million, up 31% year over year, with trailing twelve-month revenue crossing $2 billion as of December 2025.
- The free tier is not marketing spend. It is a threat intelligence collection mechanism that makes the paid security product continuously better.
- The Freemium Infrastructure Flywheel — free traffic generates intelligence, intelligence improves the product, better products attract paying customers, paying customers fund more infrastructure — is the core compounding mechanism.
- Cloudflare’s enterprise customer growth (173 customers at $1M+ annually, up 47% year over year) is driven by developer adoption, not enterprise sales cycles, which makes expansion structurally more capital-efficient.
- The emerging AI agent internet is Cloudflare’s largest potential market expansion since its 2009 founding.
Conclusion
Cloudflare did not become critical internet infrastructure by winning enterprise sales bids. It became critical infrastructure by being too useful for developers to ignore, too cheap for small websites to pass up, and too intelligent to replace once embedded. The free tier built the network. The network built the intelligence. The intelligence built the enterprise product. The enterprise product built the $2 billion business. That sequence is deliberate and replicable by any infrastructure founder willing to be patient enough to let the flywheel run. For founders in India building the next generation of B2B infrastructure, the Cloudflare model is the most instructive available template. [INTERNAL LINK: Stripe case study]
The Founder Nation take
India is producing infrastructure companies, payment rails, logistics APIs, credit underwriting engines, that are serving hundreds of millions of users. Most of them have not yet thought carefully about whether their free or subsidised tier is generating intelligence that improves the paid product, or merely burning capital to grow a metric. Cloudflare proves that the question matters. The infrastructure companies that survive the next decade of Indian startup consolidation will be the ones whose free tiers are making their paid products demonstrably better, not just filling a customer acquisition funnel. The signal to watch is whether the free user base is generating data that the paid product depends on.
Frequently asked questions
Why does Cloudflare power so much of the internet?
Cloudflare offers free CDN, DNS, and DDoS protection to any website, which attracted tens of millions of sites over fifteen years. By serving that traffic, Cloudflare built a global network of 330 cities and 125 countries that gives it both cost and speed advantages over competitors. The scale creates a data flywheel where more traffic generates more threat intelligence, which improves the security product for paying customers.
How does Cloudflare make money if its core product is free?
Cloudflare’s free tier serves individual developers and small websites. Paid tiers add performance features, SLA guarantees, and advanced security for larger organisations. Enterprise customers, those spending $100,000 or more annually, numbered 3,712 as of Q2 2025. Revenue has grown from under $500 million in 2020 to $2 billion in trailing twelve-month revenue by December 2025 (DemandSage, January 2026).
How much of the internet does Cloudflare handle?
As of mid-2025, Cloudflare sits in front of more than 20% of all websites globally, handles a significant share of all DNS queries, and its CEO has described handling more than half of dynamic web traffic through APIs. The company protects over 41 million websites across its free and paid tiers (DemandSage, January 2026).
Is Cloudflare profitable?
Cloudflare is profitable on a non-GAAP basis. Non-GAAP operating income in Q3 2025 was $85.9 million, representing a 15.3% non-GAAP operating margin. GAAP profitability is affected by stock-based compensation; the company reported a GAAP operating loss of $37.5 million in Q3 2025 (Cloudflare Q3 FY2025 SEC Filing, October 2025).
Who are Cloudflare’s main competitors?
Cloudflare’s primary competitors include Akamai (CDN and security, $3.9 billion in 2024 revenue), AWS CloudFront and Shield, Google Cloud Armor and CDN, and Microsoft Azure CDN. In the newer zero trust and SASE categories, it competes with Zscaler, Palo Alto Networks, and Cisco. Cloudflare’s network coverage advantage is most defensible in CDN and DNS, where its fifteen years of infrastructure investment creates a moat that newer entrants cannot quickly replicate.
What is Cloudflare Workers?
Cloudflare Workers is a serverless edge computing platform that lets developers run code on Cloudflare’s global network rather than on a centralised cloud server. It is significant because it turns Cloudflare from an infrastructure intermediary into a compute platform. In Q1 2025, Cloudflare signed a contract exceeding $100 million driven by its Workers platform, the largest deal in the company’s history (Cloudflare Q1 FY2025 SEC Filing, May 2025).
What can Indian infrastructure founders learn from Cloudflare?
Three lessons apply directly. First, the free tier can be a data collection mechanism rather than just a user acquisition channel. Second, network effects in infrastructure compound through geographic density and data intelligence, not just user count. Third, developer adoption drives enterprise penetration more efficiently than top-down enterprise sales. Indian founders building payment APIs, logistics rails, or credit infrastructure should examine whether their developer-facing products are creating the intelligence layer that makes their enterprise product defensible.
How big is Cloudflare’s network?
As of Q3 2025, Cloudflare operates data centres in more than 330 cities across over 125 countries. International markets represent 50% of total revenue, reflecting genuine global distribution rather than US-centric growth (Cloudflare Q3 FY2025 10-Q, October 2025).
Sources
- Cloudflare, Inc., Q3 FY2025 Shareholder Letter and SEC Filing, October 30, 2025. sec.gov/Archives/edgar/data/0001477333/000147733325000140
- Cloudflare, Inc., Q2 FY2025 Shareholder Letter and SEC Filing, July 31, 2025. sec.gov/Archives/edgar/data/0001477333/000147733325000136
- Cloudflare, Inc., Q1 FY2025 Shareholder Letter and SEC Filing, May 8, 2025. sec.gov/Archives/edgar/data/0001477333/000147733325000081
- Cloudflare, Inc., Q4 FY2024 Shareholder Letter and SEC Filing, February 6, 2025. sec.gov/Archives/edgar/data/0001477333/000147733325000017
- DemandSage, “Cloudflare Statistics (2026): Users, Traffic, Outage History,” January 2026. demandsage.com/cloudflare-statistics
- SQ Magazine, “Cloudflare Statistics 2026: How Big Is It Now?”, December 2025. sqmagazine.co.uk/cloudflare-statistics
© 2026 The Founder Nation. All rights reserved
