Cloudflare (Full History)

```mediawiki Cloudflare, Inc. is a global technology company specializing in internet security, performance, and reliability services. Founded in 2009 and headquartered in San Francisco's South of Market (SoMa) neighborhood, the company operates one of the world's largest distributed networks, spanning more than 330 cities across over 120 countries as of 2025. The company went public on the New York Stock Exchange under the ticker symbol NET in September 2019 and reported annual revenue of approximately $1.625 billion for fiscal year 2023, growing to roughly $2.09 billion in fiscal year 2024. As a provider of infrastructure that touches a substantial share of global web traffic, Cloudflare has become a notable presence in San Francisco's technology sector and in the broader conversation about internet governance, security, and access.

History

Founding and Early Years (2009–2013)

Cloudflare was founded in 2009 by Matthew Prince, Lee Holloway, and Michelle Zatlyn. Prince and Holloway had previously worked together on Project Honey Pot, an anti-spam and threat-tracking initiative that gave them early insight into the scale of malicious internet traffic. Zatlyn met Prince while both were students at Harvard Business School, and the three co-founded Cloudflare with the goal of building a network that could protect websites from attacks and improve their performance simultaneously.

The company launched publicly at TechCrunch Disrupt in September 2010, where it won the Startup Battlefield competition. Within hours of the announcement, tens of thousands of websites had signed up for the service. That early traction reflected genuine demand — businesses of all sizes were looking for affordable, easy-to-deploy protection against distributed denial-of-service (DDoS) attacks and other threats that had previously required expensive hardware or specialized vendors.

In its earliest years, Cloudflare operated on a freemium model, offering a free tier to attract individual website owners and small businesses while charging enterprises for advanced features. This approach proved effective. The company raised a $2 million seed round in 2009, followed by a $20 million Series B in 2012 led by New Enterprise Associates.

Expansion and Growth (2014–2018)

By 2015, Cloudflare had grown to serve hundreds of thousands of customers and was handling a meaningful share of global internet traffic. The company expanded its product offerings well beyond basic DDoS mitigation, introducing a full-featured content delivery network (CDN), authoritative DNS management, and SSL/TLS certificate issuance. In 2014, Cloudflare launched Universal SSL, offering free HTTPS encryption to all of its customers — a move that helped push the broader web toward encrypted connections at a time when most small websites still ran on unencrypted HTTP.

The company raised a $110 million Series D round in 2015, valuing it at roughly $1 billion and making it one of San Francisco's newest unicorn companies. That capital supported geographic expansion of its network, hiring, and product development. In 2017, Cloudflare launched Cloudflare Workers, a serverless computing platform that allows developers to run code at the network edge — meaning on Cloudflare's servers close to end users, rather than on centralized cloud infrastructure. Workers represented a significant shift in the company's identity, from a security and performance overlay to an active platform for building applications.

Controversies in Content Moderation (2017–2019)

Cloudflare's scale has placed it at the center of recurring debates about whether infrastructure providers bear responsibility for the content they help deliver. In August 2017, the company terminated service to The Daily Stormer, a neo-Nazi website, following public pressure in the wake of the Charlottesville attack. CEO Matthew Prince acknowledged in an internal memo that the decision was made unilaterally and without a clear policy framework. "I woke up this morning in a bad mood and decided to kick them off the internet," Prince wrote, adding that he found the lack of process troubling. The incident forced a public conversation about infrastructure companies as de facto arbiters of online speech.

Two years later, in August 2019, Cloudflare terminated service to 8chan, an imageboard linked to multiple mass shootings, including the El Paso attack that killed 23 people. Prince published a detailed blog post explaining the decision, describing 8chan as "a cesspool of hate" that had become "a unique danger to public safety." Both terminations were criticized by some free speech advocates and praised by others, and both illustrated the significant — and legally unregulated — power that network infrastructure providers hold over online expression.

IPO and Public Company Era (2019–Present)

Cloudflare went public on the New York Stock Exchange on September 13, 2019, trading under the symbol NET. The company priced its shares at $15, above its expected range, and closed its first trading day at $18, giving it a market capitalization of approximately $5.3 billion. The IPO raised roughly $525 million. Matthew Prince and Michelle Zatlyn remained at the helm as CEO and President, respectively.

In the years following its IPO, Cloudflare continued expanding its product portfolio. In 2020, it launched Cloudflare One, a zero trust network-as-a-service platform designed to replace traditional corporate VPNs and firewalls with cloud-native security controls. In 2022, Cloudflare introduced R2 Storage, an S3-compatible object storage service with no egress fees, positioning itself directly against Amazon Web Services. The company reached $1.625 billion in revenue for fiscal year 2023, growing approximately 32 percent year-over-year, and reported roughly $2.09 billion in revenue for fiscal year 2024.

By early 2025, Cloudflare's global network had reached 500 terabits per second (Tbps) of external network capacity — a milestone the company described as the product of 16 years of continuous infrastructure investment. The network now processes more than 20 percent of all web traffic globally on a daily basis.

Products and Services

Cloudflare's core offering began as a reverse proxy that sits between a website's origin server and its visitors, filtering malicious traffic and caching content closer to users. That basic model remains central to the business, but the product portfolio has expanded considerably.

The company's DDoS protection service is among the most widely used in the industry. Cloudflare has mitigated some of the largest volumetric attacks on record — including a 3.8 Tbps attack in 2024 that the company described as the largest ever publicly disclosed. DDoS mitigation is available on all plan tiers, including the free tier, which has made meaningful attack protection accessible to small website operators who couldn't otherwise afford it.

Cloudflare's DNS resolver, launched at the IP address 1.1.1.1 in April 2018, offers a privacy-focused alternative to ISP-provided DNS. The service does not log user IP addresses and has consistently ranked among the fastest DNS resolvers globally in independent benchmark tests.

Cloudflare Workers, introduced in 2017, allows developers to deploy JavaScript, Rust, Python, and other code at the network edge across all of Cloudflare's data centers simultaneously. It's built on the V8 JavaScript engine rather than Node.js, which allows for faster cold starts and lower memory overhead. As of 2024, the Workers platform supports several related products including Durable Objects (for stateful serverless applications), Workers KV (a globally distributed key-value store), and the R2 object storage service.

Cloudflare One, the company's zero trust security suite, bundles several enterprise security products: Cloudflare Access (identity-aware application access), Gateway (a secure DNS and HTTP proxy), the WARP corporate VPN client, and Magic Transit (which routes enterprise network traffic through Cloudflare's infrastructure for DDoS protection and performance). Together these products position Cloudflare as a competitor to traditional enterprise security vendors such as Zscaler and Palo Alto Networks.

The company also operates the Cloudflare Radar platform, a public-facing tool that displays real-time internet traffic trends, routing anomalies, and outage data sourced from the company's global network. Radar has become a frequently cited resource for journalists and researchers monitoring internet health events, including regional shutdowns and BGP routing incidents.

Geography

Cloudflare's headquarters is located in the South of Market (SoMa) neighborhood of San Francisco, at 101 Townsend Street. The SoMa district — roughly bounded by Market Street to the north, the Embarcadero to the east, Townsend Street to the south, and Sixth Street to the west — spent much of the twentieth century as a warehouse and light-industrial district. Beginning in the 1990s dot-com boom, it attracted technology companies drawn by relatively large floor plates, reasonable (by San Francisco standards) rents, and proximity to the Financial District. That transformation accelerated through the 2010s, and SoMa is now home to major offices for Salesforce, Twitter (now X), GitHub, and dozens of other technology firms.

Cloudflare's 101 Townsend Street address places it in the southern portion of SoMa, close to the Caltrain station at 4th and King Streets, which provides direct rail service to Silicon Valley and is one of the most heavily used commuter rail stations in the Bay Area. The building is also a short walk from the Chase Center arena and the Mission Bay neighborhood, where UC San Francisco operates its major research campus. This part of the city has seen significant commercial and residential development since 2010, driven in part by the presence of technology employers.

The company's network has no geographic center in any traditional sense. Its 330-plus data centers are distributed globally, with major hubs in Frankfurt, London, Singapore, São Paulo, and dozens of other cities. This distributed architecture means that most internet users in the world connect to Cloudflare infrastructure located within a few dozen milliseconds of their physical location.

Culture

Cloudflare's stated culture emphasizes transparency, intellectual curiosity, and a willingness to engage publicly with difficult questions — including ones the company's decisions have provoked. Matthew Prince and Michelle Zatlyn have both written extensively on the company's blog about internal debates, product reasoning, and policy positions. That directness is somewhat unusual among infrastructure companies, which more often prefer to operate quietly in the background.

The company has participated in various San Francisco civic and educational initiatives, including partnerships with local schools and coding education non-profits to support computer science programs in underserved communities. These efforts reflect a broader pattern among large SoMa tech employers who have faced criticism for contributing to the city's housing costs and displacement pressures without proportionate community investment.

Cloudflare has also developed an internal culture that has attracted attention for both positive and negative reasons. In 2020, former customer success manager Jade E. published a widely read blog post alleging abusive management practices and retaliation after she raised internal complaints. Cloudflare disputed her account, and the incident generated significant public discussion about workplace culture at San Francisco technology companies.

Community and Policy Initiatives

Cloudflare runs several programs designed to provide free or subsidized service to organizations with public interest missions. Project Galileo, launched in 2014, offers enterprise-grade security services at no cost to journalistic organizations, civil society groups, and human rights organizations that face cyberattacks because of their work. As of 2024, the program protects more than 2,400 organizations across 111 countries.

The Athenian Project, launched in 2017, provides free DDoS protection and security services to state and local election infrastructure in the United States, including official election websites and voter registration systems. Election security has remained a persistent concern among government officials and researchers since the 2016 U.S. presidential election, and Cloudflare's participation represents