Cloudflare (NET): AI Traffic and Enterprise Momentum

Thesis

Cloudflare (NET) is one of the more compelling infrastructure growth stories in software because the company is pairing durable top-line momentum with improving enterprise traction, rising free cash flow, and a product stack that sits at the intersection of security, networking, developer tools, and AI-era traffic management. In Q4 2025, revenue rose 34% YoY to $614.5M, large-customer revenue grew 42% YoY, dollar-based net retention reached 120%, and remaining performance obligations climbed 48% YoY to $2.496B. Those are not the numbers of a business losing relevance. They are the numbers of a platform gaining strategic weight.

The bullish case rests on three facts. First, Cloudflare is moving upmarket successfully. It ended 2025 with 4,298 customers paying more than $100,000 annually, up 23% YoY, and 269 customers spending more than $1M, up 55% YoY. Second, the company is monetizing that scale more efficiently. Annual operating cash flow reached $666.9M in 2025, up from $380.4M in 2024, while annual free cash flow improved to $324.3M from $195.4M. Third, management’s 2026 guide still calls for 28% to 29% revenue growth and non-GAAP EPS of $1.11 to $1.12, which shows that the acceleration seen in late 2025 was not treated internally as a one-quarter fluke.

The catch is valuation. At a market cap of about $87.8B, forward P/E sits at 192.3x, EV/revenue at 36.3x, and free cash flow yield at 1.15%. That is rich even for a high-quality software name. Cloudflare also remains GAAP unprofitable on a full-year basis, with a 2025 net loss of $102.3M and operating margin of -9.4% under GAAP. For a balanced, moderate-risk investor, that means the stock is attractive as a business, but less forgiving as a stock when expectations are already running hot. The medium-term setup supports a positive stance, but only with discipline on entry price. Our fair value estimate is $225.

Company Overview

Cloudflare is a global cloud services provider headquartered in San Francisco. The company operates a connectivity cloud platform that combines application security, performance, network services, Zero Trust, and developer products on a single network. Its products span web application firewall, bot management, DDoS mitigation, API security, SSL/TLS, content delivery, load balancing, DNS, SASE, Magic WAN, Magic Transit, Zero Trust access, secure web gateway, data loss prevention, Workers, R2 object storage, AI Gateway, Vectorize, D1, Queues, and related edge developer services.

The business model blends self-serve adoption, contracted enterprise sales, usage-based monetization, and a large free-user funnel. That combination matters. It gives Cloudflare a low-friction way to acquire developers and smaller customers, then a land-and-expand path into larger enterprise accounts that want to consolidate vendors. Management has spent the last two years reshaping the company from a product-led growth engine into a stronger enterprise sales organization, and Q4 2025 results suggest that effort is paying off.

Scale is now meaningful. Full-year 2025 revenue reached $2.168B, up 30% YoY from $1.670B in 2024. The company had about 332,000 paying customers at year-end 2025, including nearly 37,000 net additions in Q4 alone. Large customers represented 73% of Q4 revenue, up from 69% a year earlier. Geographically, the U.S. accounted for 49% of Q4 revenue, EMEA 27%, and APAC 16%, with APAC growing fastest at 50% YoY.

Business Segment Deep Dive

Cloudflare reports as a single reportable segment, so the cleanest way to understand the business is by product family and customer motion rather than by accounting segments. The company’s own framing centers on application services, Zero Trust and network services, and the Workers-led developer platform. Each matters, but they are increasingly reinforcing one another rather than operating as separate silos.

Application and security services remain the foundation. These include CDN, DDoS protection, WAF, bot management, API security, DNS, load balancing, and related products that sit in front of customer traffic. This layer benefits from Cloudflare’s broad network footprint and from the simple fact that more internet traffic creates more need for protection, routing, and performance optimization. Management said more than 20% of the web sits behind Cloudflare’s network, which gives the company unusual visibility and distribution.

Zero Trust and network services are the enterprise wedge. Products such as secure web gateway, Zero Trust network access, CASB, DLP, email security, Magic WAN, and Magic Firewall position Cloudflare against larger security and networking incumbents. Management highlighted a U.S. government entity that signed a 2.5-year $2.2M Zero Trust contract covering access, gateway, DLP, CASB, and email security. That deal size is not huge by itself, but it shows Cloudflare can win in high-compliance environments where buyers usually move slowly and trust is expensive.

The developer platform is the growth kicker. Management said Workers delivered another quarter of outsized growth, and the company exited 2025 with more than 4.5M human developers active on the platform. In Q4, management also tied record additions of paying customers partly to free-tier users graduating into small paid accounts, particularly for developer products. That is a useful signal because it shows the funnel is not just broad, but monetizing.

Enterprise traction is becoming more concentrated in larger, more strategic deployments. Cloudflare signed an $85M two-year pool-of-funds contract with a leading AI company for its full platform and 100% traffic allocation, a $45M two-year pool-of-funds contract with a Fortune 500 technology company, and its largest annual contract value deal ever at $42.5M per year. Those wins suggest the platform story is moving from marketing line to budget line.

Flagship Product Analysis

Cloudflare Workers is the flagship product to watch because it expands the company beyond protecting and accelerating applications into helping customers build and run them. Workers lets developers execute code across Cloudflare’s global network, and management increasingly describes it as central to the company’s AI and agentic internet thesis.

The product is gaining relevance for two reasons. First, it fits modern application architecture. Developers can deploy logic at the edge, reduce latency, and integrate services like storage, databases, queues, and AI tooling without stitching together a patchwork of vendors. Second, it gives Cloudflare a direct seat in application creation rather than only traffic inspection. That changes the revenue mix over time and can deepen switching costs.

Management’s customer examples give the strongest evidence. One leading AI company signed a one-year $5.4M contract for the Workers developer platform and application services in what management described as a build-versus-buy decision against hyperscalers. A major international consumer goods company chose Cloudflare’s Workers platform and application services over discounted incumbent offers because it could customize edge traffic and replace multiple legacy vendors. A U.S. media company signed a three-year $3.1M contract for AI crawl control, application services, and Workers, then migrated large internet properties into production in two weeks.

That quote from CEO Matthew Prince captures why Workers matters. If AI lowers the cost of software creation, then the infrastructure layer that hosts, secures, routes, and governs that software becomes more valuable. Workers is Cloudflare’s way to monetize that shift from both ends: the apps being built and the traffic those apps generate.

Innovation & Competitive Advantage

Cloudflare’s competitive edge comes from architecture, breadth, and neutrality. The network spans 330+ cities in 125+ countries and interconnects with 13,000+ networks. That scale is hard to replicate and gives the company a structural advantage in latency, traffic visibility, and service delivery. In infrastructure, scale is not a slogan. It is physics with a sales team attached.

Breadth is the second advantage. Cloudflare competes in CDN, DDoS protection, WAF, Zero Trust, SASE, developer tools, and AI infrastructure services, but the real pitch is consolidation. Customers can replace multiple point products with one platform. Management repeatedly cited wins where Cloudflare displaced legacy incumbents or beat hyperscalers because buyers wanted a unified stack, simpler operations, and faster deployment.

Neutrality is the third advantage. In Q4, management said a leading AI company selected Cloudflare over major hyperscalers not just for rapid innovation and a unified stack, but for strategic neutrality. That point matters more in the AI era. If a customer does not want its infrastructure provider competing with it in adjacent layers, an independent platform becomes more attractive.

Innovation cadence also looks strong. In March 2025, Cloudflare introduced Cloudflare for AI, expanded its Cloudforce One threat intelligence offering with a real-time events platform, advanced its quantum-safe Zero Trust solution, and launched integrated Security Posture Management. In January 2026, it acquired Human Native to strengthen its content offering to AI companies. These moves support the idea that Cloudflare is trying to define new control layers around AI traffic, content access, and application security rather than simply defend legacy categories.

That is ambitious language, but it is anchored to a real asset base. Weekly requests generated by AI agents more than doubled across the Cloudflare network in January, according to management. If that trend persists, Cloudflare’s installed position could become a powerful distribution advantage for AI-era products.

Operations & Supply Chain

Cloudflare’s operations are built around owning and managing a distributed network rather than depending entirely on third-party cloud capacity. That model gives it more control over performance and economics, but it also requires ongoing capital investment in servers, network infrastructure, and capacity expansion.

In Q4 2025, network CapEx represented 13% of revenue, and management guided to 12% to 15% of revenue for full-year 2026. Annual capital expenditures rose to $342.6M in 2025 from $185.0M in 2024, while operating cash flow increased to $666.9M from $380.4M. That is a healthy trade. The company is spending more, but it is also generating meaningfully more cash to support that spending.

There is some short-term pressure in the model. Q4 gross margin was 74.9%, down 270 basis points YoY, and management said paid customer traffic increased significantly, resulting in the highest allocation of network expenses to cost of goods sold versus sales and marketing ever. In plain English, more monetized traffic is good for revenue, but it can temporarily make the cost line look heavier. That is not ideal, but it is a better problem than idle infrastructure.

Headcount rose 21% YoY to about 5,200 employees at the end of Q4. Sales productivity increased YoY for the eighth consecutive quarter, and net sales capacity grew at the fastest pace since 2022. That combination matters because it suggests Cloudflare is not just adding people, but getting better output from them.

Market Analysis

Cloudflare operates across several large and growing markets tied to enterprise software, security, edge computing, and AI infrastructure. Company materials estimate total TAM at $181B in 2025 and $231B by 2028. Gartner’s proxy for enterprise application software points to a $722B market by 2029, while Forrester expects security, databases, and AI platforms to be among the fastest-growing software categories.

The market backdrop is favorable for Cloudflare’s architecture. McKinsey says AI-driven infrastructure demand could lift data center capacity demand by 19% to 22% annually from 2023 to 2030. Gartner predicts 40% of enterprise applications will feature task-specific AI agents by the end of 2026, up from less than 5% in 2025. More applications, more agents, and more machine-generated traffic all support demand for distributed networking, security enforcement, and programmable edge compute.

The industry is also moving toward platform consolidation. Forrester said the SASE market has shifted from partnerships to all-in-one platforms, with more than 20 vendors offering integrated capabilities. That trend favors Cloudflare’s bundle-first positioning. Buyers want fewer consoles, fewer vendors, and fewer integration headaches. Vendor sprawl is expensive, and security teams are tired of pretending otherwise.

Cloudflare’s Q4 numbers show it is taking share in that environment. Revenue accelerated for the third consecutive quarter to 34% YoY, new ACV grew nearly 50% YoY, and large-customer revenue reached 73% of quarterly revenue. Those are strong signs that market demand is not just theoretical TAM theater, but converting into contracts.

Customer Profile

Cloudflare serves a wide range of customers across technology, healthcare, financial services, retail, industrial, non-profit, and government. The mix spans developers, SMBs, mid-market companies, and large enterprises. That breadth reduces dependence on any single vertical, but the most important shift is toward larger accounts.

At year-end 2025, Cloudflare had approximately 332,000 paying customers, up 40% YoY. It also had 4,298 customers paying more than $100,000 annually, up 23% YoY, and 269 customers spending more than $1M, up 55% YoY. Large customers contributed 69% of full-year 2025 revenue, up from 67% in 2024 and 64% in 2023. That progression shows the customer base is maturing in the right direction.

The company also reported that 36% of the Fortune 500 were paying customers as of June 30, 2025. That does not mean Cloudflare has saturated the enterprise market, but it does show the brand is already inside a large share of important accounts. Once a platform is in the building, expansion becomes a sales execution question rather than a cold-start awareness problem.

Customer behavior supports the land-and-expand thesis. Dollar-based net retention reached 120% in Q4, up 9 points YoY. Revenue from large customers grew 42% YoY, faster than companywide growth. That implies existing customers are buying more, not merely renewing. In software, that is the closest thing to hearing the engine run clean.

Competitive Landscape

Cloudflare competes against a mixed field of security vendors, CDN and edge specialists, and hyperscalers. In Zero Trust and SASE, relevant public peers include Zscaler (ZS), Palo Alto Networks (PANW), Fortinet (FTNT), Cisco (CSCO), and Akamai (AKAM). In application delivery and edge services, Akamai and Fastly (FSLY) are natural reference points. Hyperscalers such as Amazon, Microsoft, and Google are persistent strategic competitors because they can bundle adjacent services into broader cloud contracts.

Cloudflare’s strength versus point-product vendors is platform breadth. Its strength versus hyperscalers is neutrality and edge-native design. Its weakness versus both is that many rivals have either larger enterprise sales forces, broader installed enterprise relationships, or deeper balance sheets. That means Cloudflare has to keep winning on product quality, deployment speed, and consolidation value rather than brute-force distribution.

Management’s recent wins suggest that strategy is working. The company cited deals where it beat incumbents despite discounts, won build-versus-buy decisions against hyperscalers, and replaced fragmented legacy architectures. Those anecdotes are not enough on their own, but they line up with the hard metrics: 42% large-customer revenue growth, 48% RPO growth, and record $1M-plus customer additions in 2025.

The valuation challenge in competitive context is that Cloudflare is priced more like a category leader in waiting than a company still proving GAAP profitability. That can be justified if execution stays sharp, but it leaves less room for operational stumbles than many peers enjoy.

Macro & Geopolitical Landscape

Macro conditions are a mixed bag for Cloudflare. On one hand, security, compliance, and network resilience remain budget priorities even in slower spending environments. McKinsey highlighted security as a critical concern in cloud and edge computing, and Gartner expects continued enterprise software growth despite an uncertain business environment. That supports baseline demand for Cloudflare’s core products.

On the other hand, enterprise sales cycles can still lengthen when budgets tighten. Cloudflare’s move upmarket makes it more exposed to procurement scrutiny, larger deal approvals, and vendor consolidation reviews. The company specifically identifies execution risk around attracting and retaining large customers and expanding products sold to paying customers. That risk is manageable, but it is real.

Geopolitically, Cloudflare’s global network is an asset and a source of complexity. The company operates internationally and faces foreign currency exposure, particularly to the British pound, euro, and Singapore dollar, though the 10-K said a hypothetical 10% move in the U.S. dollar would not have had a material impact on consolidated financials in 2025. Data sovereignty is a more durable issue. Rising regulation around where data sits and how traffic is handled can favor distributed architectures like Cloudflare’s, but it also raises compliance costs and operational demands.

Interest rate exposure looks limited on the convertible notes because they do not carry regularly scheduled interest payments, according to the 10-K. The company had no borrowings outstanding under its revolving credit facility at year-end 2025. That reduces one common macro headache. Inflation was also described as not material to the business in 2025, though management noted it could pressure costs if it becomes more persistent.

Balance Sheet Health

Income Statement Strength

Estimates Outlook

Valuation Assessment

Target Prices & Recommendation

Closing

Cloudflare is building something rare: a platform that is relevant to security teams, network teams, developers, and increasingly AI builders at the same time. The company’s Q4 2025 results showed accelerating growth, stronger enterprise execution, rising large-customer concentration, and improving cash generation. Those are the right ingredients for a durable medium-term winner.

The caution is not about whether Cloudflare matters. It clearly does. The caution is about how much of that future is already reflected in the stock. With EV/revenue at 36.3x, forward P/E at 192.3x, and free cash flow yield at 1.15%, investors are paying up for a business that still reports full-year GAAP losses. That does not break the thesis, but it does narrow the margin for error.

For moderate-risk investors, Cloudflare (NET) remains a high-conviction company and a more selective stock. The business deserves respect. The entry price deserves discipline. With our fair value estimate of $225, the right stance is Hold, leaning constructive on weakness rather than aggressive at any price.