Boundary vs Cloudflare Gateway
Boundary
developer.hashicorp.com
Cloudflare Gateway
cloudflare.comSide by side
| Figure | Boundary | Cloudflare Gateway |
|---|---|---|
| Price from | Free | $7/mo |
| Free plan | Yes | Yes |
| Free trial | Yes | — |
| Open source | — | — |
| Web | Yes | Yes |
| Windows | Yes | Yes |
| macOS | Yes | Yes |
| Linux | Yes | Yes |
| iOS | — | Yes |
| Android | — | Yes |
| API | Yes | Yes |
| Self-hosted | Yes | — |
| Plans published | 5 | 6 |
| Spec score · Zero Trust Network Access Software | 9.0 (#2) | 9.3 (#1) |
| Documentation depth | The documentation set covers CLI, API, domain model, HCP deployment, target connections, HCL configuration, permissions, data security, TLS connections, and filtering. | Cloudflare One documentation covers implementation guides, reference architecture, account limits, troubleshooting, API and Terraform, changelogs and client deployment. |
| Headquarters | San Francisco, California, United States | Cloudflare lists its headquarters at 101 Townsend Street, San Francisco, California. |
| Rating on G2 | 0 out of 5 from 0 reviews | 4.5 out of 5 from 928 reviews for Cloudflare, Inc.'s product portfolio; Cloudflare One (SASE) has 104 reviews. |
| Rating on Gartner Peer Insights | No rating shown from 0 reviews | 4.5 out of 5 from 223 reviews for Cloudflare in the IT security comparison page. |
| Self-hosting | Boundary Enterprise is self-managed, while HCP Boundary hosts the control plane and lets customers run private worker proxies. | Gateway is documented as a Cloudflare-hosted service accessed through the dashboard, One Client, proxies, API and Terraform; the reviewed documentation provides no self-hosted Gateway deployment. |
| What it does | Boundary provides identity-based, authenticated access to servers, databases, applications, and cloud or on-premises infrastructure without direct network access. | Cloudflare Gateway is a cloud-native secure web gateway that filters DNS, HTTP and network traffic for office and remote users. |
Plans
Boundary
- Boundary Community EditionFree
- Boundary Community EditionFree
- HCP Boundary PlusFree
- HCP Boundary StandardFree
- Boundary EnterprisePriced on request
Cloudflare Gateway
- FreeFree
- Pay-as-you-go$7 a month
- ContractPriced on request
- Free PlanFree
- Pay-as-you-go$7 a month
- Contract PlanPrice not published
In their own words
Boundary
Boundary provides authenticated, identity-based access to infrastructure without requiring users to connect directly to its underlying network. It supports just-in-time and least-privilege access, role-based authorization, and single sign-on through OIDC or LDAP. Users can reach TCP, SSH, RDP, HTTPS, RDS, Kubernetes, and database targets through familiar clients such as SSH tools, PuTTY, Remote Desktop, database clients, and web browsers. Boundary can broker credentials and integrate with HashiCorp Vault for short-lived dynamic credentials and credential injection. Target discovery can be automated, with dynamic host catalogs for AWS, Azure, and GCP available in HCP Boundary. Deployment options include managed HCP Boundary, optionally with customer-run workers, and self-managed Boundary Enterprise. The Community Edition is listed at free. HCP Boundary Standard and Plus have usage-based billing, with monthly rates per user depending on edition; Standard includes Vault credential injection and audit-log streaming, while Plus adds session recording. Enterprise is self-managed and has full feature parity with HCP Boundary. Boundary supports Terraform, a REST API, CLI, and SDK.
Cloudflare Gateway
Cloudflare Gateway has no write-up on Specifiction yet; its figures are above.