Cloudflare Gateway

Spec sheet

What it does

Cloudflare Gateway is a cloud-native secure web gateway that filters DNS, HTTP and network traffic for office and remote users.Read 14 Oct 2026 · cloudflare.com

Integrations

Cloudflare One documentation lists identity-provider integrations including Google, Google Workspace, GitHub, Microsoft Entra ID, Okta, OneLogin, PingOne, Keycloak and custom SAML or OIDC providers.Read 14 Oct 2026 · developers.cloudflare.com

Headquarters

Cloudflare lists its headquarters at 101 Townsend Street, San Francisco, California.Read 14 Oct 2026 · cloudflare.com

API example

The HTTP-filtering guide documents POST requests to the /accounts/{account_id}/gateway/rules endpoint for creating Gateway policies.Read 14 Oct 2026 · developers.cloudflare.com

Application policies

Gateway policies can target named applications and application types, including AI applications, instead of requiring separate hostname rules.Read 14 Oct 2026 · developers.cloudflare.com

Client open-source code

Cloudflare's connector brief says the WARP client uses a custom WireGuard implementation and that its relatively short code base is open source and auditable.Read 14 Oct 2026 · cloudflare.com

Client platforms

The Cloudflare One Client is distributed for Windows, macOS, Linux, iOS and Android; ChromeOS devices manufactured after 2019 use the Android app.Read 14 Oct 2026 · developers.cloudflare.com

Company founded

Cloudflare was founded in 2009 by Matthew Prince, Michelle Zatlyn and Lee Holloway.Read 14 Oct 2026 · cloudflare.com

Company legal name

Cloudflare, Inc. is the legal company name shown in Cloudflare and Crunchbase materials.Read 14 Oct 2026 · crunchbase.com

Company size

LinkedIn lists Cloudflare as a public computer and network security company with 1,001–5,000 employees.Read 14 Oct 2026 · linkedin.com

Data loss prevention

When combined with Cloudflare DLP profiles, Gateway operates as a forward proxy that can inspect and block sensitive data uploads to unapproved applications.Read 14 Oct 2026 · cloudflare.com

DNS filtering

Administrators can create DNS policies using predefined security and content categories to control domain access.Read 14 Oct 2026 · cloudflare.com

Documentation depth

Cloudflare One documentation covers implementation guides, reference architecture, account limits, troubleshooting, API and Terraform, changelogs and client deployment.Read 14 Oct 2026 · developers.cloudflare.com

Endpoint integrations

Supported service-provider integrations include CrowdStrike, Kolide, Microsoft Endpoint Manager, SentinelOne, Tanium, Uptycs and Workspace ONE.Read 14 Oct 2026 · developers.cloudflare.com

Guest Wi-Fi

Gateway policies can be applied to guest Wi-Fi and branch networks to enforce acceptable-use rules and block threats.Read 14 Oct 2026 · cloudflare.com

HTTP filtering

HTTP policies inspect complete URLs and request content, allowing page-level blocking and inspection of uploads.Read 14 Oct 2026 · developers.cloudflare.com

Limit: complexity

TrustRadius and G2 reviewers report that the extensive feature set, configuration and changing interface can make navigation and setup unintuitive.Read 14 Oct 2026 · trustradius.com

Limit: false positives

Capterra reviewers describe bot and security controls that sometimes flag legitimate users or create false positives.Read 14 Oct 2026 · capterra.com

Limit: mobile reliability

Google Play and Apple reviewers report battery drain, connection loops, enrollment problems and difficulty toggling the VPN in some situations.Read 14 Oct 2026 · apps.apple.com

Limit: support

GetApp reviewers include complaints that customer support can be slow or fail to respond quickly during problems.Read 14 Oct 2026 · getapp.com

Linux requirements

The current Linux client supports RHEL 9/10, Debian 12/13, Fedora 43/44 and Ubuntu 22.04/24.04/26.04 on AMD64 or ARM64, with at least 3 vCPUs and 1 GB RAM without a desktop.Read 14 Oct 2026 · developers.cloudflare.com

Mobile requirements

The One Agent documentation lists iOS 15+ and Android 5.0+ requirements.Read 14 Oct 2026 · developers.cloudflare.com

Network filtering

Gateway can filter network traffic through the Cloudflare One Client in traffic and DNS modes.Read 14 Oct 2026 · developers.cloudflare.com

Performance design

Cloudflare says Gateway uses single-pass inspection without traffic backhauling to reduce browsing latency.Read 14 Oct 2026 · cloudflare.com

Praise: performance and integration

TrustRadius reviewers repeatedly cite DDoS and WAF protection, caching that reduces latency, rapid deployment and measurable cost savings.Read 14 Oct 2026 · trustradius.com

Praise: security and value

GetApp reviewers repeatedly praise automatic DDoS mitigation, minimal setup and enterprise-grade protection available at little or no cost.Read 14 Oct 2026 · getapp.com

Public API

Zero Trust configuration, including Gateway rules, can be managed through Cloudflare's REST API with scoped API tokens.Read 14 Oct 2026 · developers.cloudflare.com

Rating on Apple App Store

3.8 out of 5 from 102 ratings for Cloudflare One Agent.Read 14 Oct 2026 · apps.apple.com

Rating on G2

4.5 out of 5 from 928 reviews for Cloudflare, Inc.'s product portfolio; Cloudflare One (SASE) has 104 reviews.Read 14 Oct 2026 · g2.com

Rating on Gartner Peer Insights

4.5 out of 5 from 223 reviews for Cloudflare in the IT security comparison page.Read 14 Oct 2026 · gartner.com

Rating on GetApp

4.7 out of 5 from 527 verified reviews for Cloudflare.Read 14 Oct 2026 · getapp.com

Rating on Google Play

4.1 out of 5 from about 2.03K reviews for Cloudflare One Agent.Read 14 Oct 2026 · play.google.com

Rating on Trustpilot

1.4 out of 5 from 1,316 reviews for Cloudflare.Read 14 Oct 2026 · trustpilot.com

Security compliance

Cloudflare's Trust Hub lists ISO 27001, ISO 27701, PCI DSS and SOC 2 Type II among its compliance resources.Read 14 Oct 2026 · cloudflare.com

Self-hosting

Gateway is documented as a Cloudflare-hosted service accessed through the dashboard, One Client, proxies, API and Terraform; the reviewed documentation provides no self-hosted Gateway deployment.Read 14 Oct 2026 · developers.cloudflare.com

Shadow IT visibility

Gateway gives unified visibility into sanctioned and unsanctioned SaaS, cloud and AI tools so teams can block risky applications or redirect users to approved alternatives.Read 14 Oct 2026 · cloudflare.com

Terraform

Cloudflare provides a Terraform provider reference and examples for managing Zero Trust configuration as code.Read 14 Oct 2026 · developers.cloudflare.com

Threat intelligence scale

Cloudflare states that Gateway detection uses real-time DNS and HTTP telemetry from trillions of daily requests and visibility into about 20% of the web.Read 14 Oct 2026 · cloudflare.com

Threat protection

Gateway is designed to block malware, ransomware, phishing, DNS tunneling, command-and-control callbacks and zero-day threats using DNS and HTTP telemetry with machine-learning models.Read 14 Oct 2026 · cloudflare.com

TLS inspection requirement

HTTPS inspection requires the Cloudflare One Client, a trusted root certificate, Gateway proxying and TLS decryption; without the certificate Gateway sees only the domain.Read 14 Oct 2026 · developers.cloudflare.com

Plans and prices

Every Cloudflare Gateway plan and price →

Where Specifiction places it

• Zero Trust Network Access Software#1 of 429.3
• Internet Filtering Software#2 of 659.3
• Secure Web Gateway Software#1 of 319.3
• DNS Filtering Services#2 of 609.3
• Web Security Software#1 of 299.3
• Forward Proxy Software#1 of 259.3
• Security Service Edge Software#1 of 239.3
• Zero Trust Platforms#1 of 239.3
• Zero Trust Architecture Software#1 of 199.3
• Secure Email Gateway Software#1 of 189.4
• User Threat Prevention Software#1 of 159.3