Cloudflare Gateway vs DNSFilter
Cloudflare Gateway
cloudflare.comDNSFilter
dnsfilter.comSide by side
| Figure | Cloudflare Gateway | DNSFilter |
|---|---|---|
| Price from | $7/mo | $1/mo |
| Free plan | Yes | — |
| Free trial | — | Yes |
| Open source | — | — |
| Web | Yes | Yes |
| Windows | Yes | Yes |
| macOS | Yes | Yes |
| Linux | Yes | Yes |
| iOS | Yes | Yes |
| Android | Yes | Yes |
| API | Yes | Yes |
| Self-hosted | — | Yes |
| Plans published | 6 | 3 |
| Spec score · Internet Filtering Software | 9.3 (#2) | 9.1 (#4) |
| Spec score · DNS Filtering Services | 9.3 (#2) | 9.0 (#5) |
| Spec score · Web Security Software | 9.3 (#1) | 9.1 (#2) |
| Spec score · Security Service Edge Software | 9.3 (#1) | 9.1 (#2) |
| Spec score · User Threat Prevention Software | 9.3 (#1) | 9.0 (#2) |
| Company legal name | Cloudflare, Inc. is the legal company name shown in Cloudflare and Crunchbase materials. | Crunchbase lists the legal entity as DNSFilter, Inc. |
| Company size | LinkedIn lists Cloudflare as a public computer and network security company with 1,001–5,000 employees. | LinkedIn lists DNSFilter as having 51–200 employees. |
| DNS filtering | Administrators can create DNS policies using predefined security and content categories to control domain access. | The service blocks malicious or unwanted domains at the DNS layer before they load. |
| Headquarters | Cloudflare lists its headquarters at 101 Townsend Street, San Francisco, California. | The company lists Washington, District of Columbia as headquarters. |
| Integrations | Cloudflare One documentation lists identity-provider integrations including Google, Google Workspace, GitHub, Microsoft Entra ID, Okta, OneLogin, PingOne, Keycloak and custom SAML or OIDC providers. | Integrations include Microsoft Entra, Active Directory, Zapier, ConnectWise, HaloPSA, Datto Autotask, Syncro, Pulseway PSA and Kaseya. |
| Linux requirements | The current Linux client supports RHEL 9/10, Debian 12/13, Fedora 43/44 and Ubuntu 22.04/24.04/26.04 on AMD64 or ARM64, with at least 3 vCPUs and 1 GB RAM without a desktop. | Relay minimum requirements are a 64-bit two-core CPU and 2 GB RAM. |
| Rating on Apple App Store | 3.8 out of 5 from 102 ratings for Cloudflare One Agent. | 4.6 out of 5 from 870 ratings |
| Rating on G2 | 4.5 out of 5 from 928 reviews for Cloudflare, Inc.'s product portfolio; Cloudflare One (SASE) has 104 reviews. | 4.6 out of 5 from 272 reviews |
| Rating on Gartner Peer Insights | 4.5 out of 5 from 223 reviews for Cloudflare in the IT security comparison page. | 4.3 out of 5 from 13 ratings |
| Rating on GetApp | 4.7 out of 5 from 527 verified reviews for Cloudflare. | 4.8 out of 5 from 88 reviews |
| Rating on Google Play | 4.1 out of 5 from about 2.03K reviews for Cloudflare One Agent. | 3.2 out of 5 from 51 reviews |
| Rating on Trustpilot | 1.4 out of 5 from 1,316 reviews for Cloudflare. | 3.0 out of 5 from 3 reviews |
| Security compliance | Cloudflare's Trust Hub lists ISO 27001, ISO 27701, PCI DSS and SOC 2 Type II among its compliance resources. | DNSFilter identifies AICPA SOC 2 certification and provides guidance for HIPAA, PCI-DSS, NIST 800-53 and similar regulated environments. |
| What it does | Cloudflare Gateway is a cloud-native secure web gateway that filters DNS, HTTP and network traffic for office and remote users. | DNSFilter provides AI-powered DNS content filtering and threat blocking for phishing, malware and unwanted content. |
Plans
Cloudflare Gateway
- FreeFree
- Pay-as-you-go$7 a month
- ContractPriced on request
- Free PlanFree
- Pay-as-you-go$7 a month
- Contract PlanPrice not published
In their own words
Cloudflare Gateway
Cloudflare Gateway has no write-up on Specifiction yet; its figures are above.
DNSFilter
DNSFilter provides protective DNS and content filtering for organizations managing threats and workplace internet use. It categorizes billions of domains with Webshrinker machine-learning categorization, while AppAware can block more than 100 risky applications. DNSFilter says its real-time threat categorization can identify threats 10 days faster than other threat feeds. Deployments include network configuration, a DNS relay, and roaming clients for Windows, macOS, iOS, Android, and Chrome. Listed controls include DNS encryption such as DNS-over-TLS, custom blocklists, safe search, filtering schedules, and advanced activity reports. Active Directory Sync Tool supports up to 500,000 users and applies policies by user or group. Integrations include Microsoft Entra, Active Directory, Zapier, API access, and an MCP Connector. Data Export supports Amazon S3 and Splunk, with Microsoft Sentinel also named. API access is included in all plans, with rate limits but no overall usage cap. Pricing starts at $1/mo (annual), with a 14-day trial and no free plan.