Cloudflare, Inc. (NET) — Company Research

Last Updated: 8 August 2026

Cloudflare sits between roughly a fifth of the world's websites and the people trying to reach them. It started as a way to stop denial-of-service attacks and speed up page loads, and has spent the last decade bolting on security, zero-trust networking and a serverless developer platform until the whole thing became what management now calls a "connectivity cloud". The financial signature of that build-out is unusual: revenue compounding at roughly 30% a year for five straight years, alongside a GAAP operating loss in every one of them. In the twelve months to 30 June 2026 the company added a $150.7m restructuring charge and a roughly 1,100-person headcount reduction to that picture, while simultaneously reporting its fastest revenue growth in three years. This report lays out the reported numbers, the balance sheet, the valuation arithmetic and the risks, without opinions on whether the shares are cheap or expensive. For live price action see our Live Charts.

1. Company Snapshot

2. Bull and Bear Case

Bull Case

• Growth is re-accelerating, not decaying: Q2 2026 revenue of $696.1m was up 36% year on year, faster than the 34% posted in Q1 2026 and the 33.6% in Q4 2025. For a company at a $2.8bn annualised run rate, an acceleration rather than the usual law-of-large-numbers deceleration is the single most important reported datapoint.
• The large-customer engine keeps compounding: customers spending more than $100,000 a year reached 4,698 at the end of Q2 2026, up 27% year on year with a record 986 net additions over the trailing twelve months. That cohort was 72% of revenue in Q1 2026 against 69% a year earlier, so the mix is shifting towards larger, stickier contracts.
• Contracted backlog is growing faster than revenue: total remaining performance obligations grew 48% in FY2025 and current RPO grew 35% year on year in Q2 2026, both ahead of reported revenue growth. Backlog running ahead of recognised revenue is what forward revenue visibility looks like in the accounts.
• Cash generation has turned genuinely positive: operating cash flow rose from $380.4m in FY2024 to $603.1m in FY2025, and capital expenditure of $315.6m still left roughly $287m of free cash flow before capitalised software. The company also sits on $4.16bn of cash and marketable securities against $3.27bn of convertible notes, a net cash position.
• It is trying to monetise the AI traffic shift rather than be disintermediated by it: the Content Signals Policy, the move from Pay Per Crawl to Pay Per Use, and the 15 September 2026 default block on mixed-use AI crawlers over ad-supported pages are attempts to turn Cloudflare's chokepoint position into a toll booth on AI training and inference traffic.

Bear Case

• Seventeen years and no GAAP profit: Cloudflare has never reported a profitable fiscal year on a GAAP basis. The accumulated deficit stood at $1,204.9m at 31 December 2025 and had risen to $1,397.8m by 30 June 2026, so the losses are still widening in absolute terms.
• The non-GAAP profit is largely a stock-based compensation adjustment: FY2025 share-based compensation was $451.5m against revenue of $2,167.9m. Strip it out and the $0.93 of FY2025 non-GAAP EPS becomes a $0.29 GAAP loss. Shareholders bear that cost through dilution whether or not it appears in the adjusted numbers.
• A $1.29bn convertible maturity is days away: the 0% notes due 15 August 2026 are now classified as current, and their if-converted value exceeded principal by roughly $364.7m at 30 June 2026. Settlement is either cash out of the balance sheet or share issuance, and the newer $2.0bn 2030 notes carry a conversion price near $247.67.
• The valuation leaves no margin for error: on the figures in Section 6 the shares trade near 40 times trailing sales and several hundred times free cash flow, with no meaningful GAAP earnings multiple to anchor to. That arithmetic requires the current growth rate to persist for a long time.
• Cutting 20% of staff while claiming an AI dividend is unproven: the 7 May 2026 announcement of roughly 1,100 role reductions framed as an "agentic AI-first operating model" sent the shares down more than 20% on the day. Whether the cost base genuinely resets without damaging product velocity will not be visible in the accounts for several quarters.

3. Segments and Revenue Breakdown

Cloudflare operates and reports as a single reportable segment and does not disclose revenue by product line in its income statement. The categories below are the revenue splits the company does disclose, in its quarterly results announcements and the geographic footnote to the FY2025 Form 10-K.

4. Business Model and Moat

How it makes money. Cloudflare sells subscription and consumption-priced access to its network across four bands — a free tier, then Pro, Business and custom Enterprise contracts. Application services (CDN, DNS, bot management, DDoS mitigation) are the historic core; zero-trust and SASE products sold as Cloudflare One are the enterprise land-and-expand motion; and the developer platform (Workers, R2 object storage, D1, Workers AI, AI Gateway) is the consumption-metered layer. Revenue is recognised largely rateably, which is why remaining performance obligations are a leading indicator of reported revenue.

What the moat actually rests on. Scale of the network is the first pillar. Cloudflare operates in more than 335 cities across over 125 countries, interconnects directly with roughly 13,000 networks, and crossed 500 Tbps of provisioned external capacity in April 2026. That footprint is expensive and slow to replicate, and it is the reason the company can offer unmetered DDoS protection on a free tier. The second pillar is switching cost through breadth: once a customer routes DNS and production traffic through Cloudflare and layers WAF, bot management and zero-trust access on top, unwinding it is a multi-quarter engineering project rather than a procurement decision.

What it costs to defend. GAAP research and development expense was $512.5m in FY2025, up from $421.4m in FY2024 and $358.1m in FY2023, running at roughly 24% of revenue. Gross profit was $1,615.4m on revenue of $2,167.9m, a 74.5% gross margin, so the operating loss is a function of sales, marketing and R&D intensity rather than a structurally poor unit economic.

5. Financial Health

All figures below are taken from Cloudflare's SEC filings — the Form 10-K annual reports and the Form 8-K exhibits carrying each quarterly results announcement — and have been re-derived independently from the SEC XBRL company facts dataset.

Long-term debt is the non-current carrying value of Cloudflare's convertible senior notes at each year end. At 31 December 2025 a further $1,291.3m sat in current liabilities, being the 0% notes due 15 August 2026, giving total convertible debt of $3,265.4m. Adjusted EPS is Cloudflare's reported non-GAAP diluted earnings per share. Cloudflare has never paid a dividend.

The Q2 2026 GAAP loss per share of $0.48 is not a deterioration in the underlying business. It carries a $150.7m restructuring and related charge from the May 2026 headcount reduction; the same quarter produced $56.4m of free cash flow and the fastest revenue growth since 2023.

Cash flow and balance sheet, FY2025 and latest quarter. Operating cash flow was $603.1m in FY2025 against $380.4m in FY2024. Purchases of property and equipment were $315.6m and capitalised internal-use software a further $26.9m, so free cash flow was $287.5m on the standard definition and $260.6m on Cloudflare's own definition, which also deducts capitalised software. Depreciation and amortisation added back in the cash flow statement was $189.7m, and share-based compensation was $451.5m. At 30 June 2026 the balance sheet carried $1,663.8m of cash and equivalents plus $2,499.0m of available-for-sale securities, a total of $4,162.8m, against convertible notes of $1,293.3m current and $1,977.0m non-current, or $3,270.3m in total. That is a net cash position of roughly $892m.

6. Valuation Metrics

Raw metrics, August 2026. Not opinions on whether the stock is cheap or expensive.

7. What Are They Building

Monetising AI crawlers. Cloudflare launched Pay Per Crawl in 2025, charging AI companies per fetch of publisher content. During 2026 it moved to a Pay Per Use model that compensates publishers when their content actually surfaces in an AI-generated answer rather than merely when it is crawled. The Content Signals Policy, launched 24 September 2025, lets site owners set separate permissions for search, AI input and AI training; from 15 September 2026 Cloudflare's defaults will block mixed-use AI crawlers from ad-supported pages unless the site owner opts out. This is the company's attempt to convert its position in front of a fifth of the web into a recurring content-licensing rail.

Developer platform and acquisitions. On 16 January 2026 Cloudflare announced the acquisition of The Astro Technology Company, creators of the Astro web framework, committing to keep it open source. On 4 June 2026 it announced the acquisition of VoidZero, the team behind the Vite, Vitest, Rolldown and Oxc JavaScript tooling ecosystem, together with a $1m commitment to an independent Vite ecosystem fund. Both are framework-layer plays intended to pull developers towards Workers, R2 and the wider edge-compute stack.

Post-quantum cryptography. In April 2026 Cloudflare accelerated its post-quantum roadmap, targeting a fully post-quantum-secure platform by 2029. The company reports that over half of human-initiated traffic across its network already runs on post-quantum-protected connections, with support extended to the WARP client and Cloudflare One.

The internal re-platforming. The 7 May 2026 restructuring was framed as a move to an "agentic AI-first operating model" rather than a cost-cutting exercise alone. Research and development spending continued to rise through it — non-GAAP R&D was $337.9m in FY2025 against $269.4m in FY2024 — so the stated intent is redeployment rather than retrenchment.

8. Competitive Landscape

Peer market capitalisations are point-in-time figures from market data trackers rather than company filings, and were re-checked in the first week of August 2026. Treat them as approximate.

9. Insider Activity

Chief Executive Matthew Prince and President and Chief Operating Officer Michelle Zatlyn, who between them co-founded the company in 2009 and hold Board Co-Chair positions, account for essentially all disclosed insider dealing in 2026. Every transaction below was executed under a pre-arranged Rule 10b5-1 trading plan. No open-market insider purchases were identified in SEC Form 4 filings during 2026.

10. Key Risks

• Persistent GAAP unprofitability: Cloudflare has never reported a profitable fiscal year on a GAAP basis. The accumulated deficit was $1,204.9m at 31 December 2025 and $1,397.8m at 30 June 2026. Every quarter of the last five years has consumed shareholder equity at the statutory level even as cash flow improved.
• Convertible debt and dilution: $1.29bn of 0% notes fall due on 15 August 2026 with an if-converted value roughly $364.7m above principal at 30 June 2026, and a further $2.0bn of 0% notes due 2030 carry an initial conversion price near $247.67. Settlement in shares dilutes holders; settlement in cash draws down the securities portfolio.
• Stock-based compensation intensity: FY2025 share-based compensation of $451.5m equals roughly 21% of revenue and is the single largest bridge item between the GAAP loss and the non-GAAP profit. If the share price falls, retaining engineers requires issuing more shares, which compounds the dilution at the worst moment.
• Restructuring execution risk: the roughly 1,100-role reduction announced 7 May 2026 drove a $150.7m charge and a $205.7m GAAP operating loss in Q2 2026, with completion targeted for the end of Q3 2026. Retention, institutional knowledge and product roadmap slippage are not measurable in the accounts until several quarters later.
• Reliability and reputation as critical infrastructure: Cloudflare disclosed a multi-day service disruption between 16 and 20 February 2026 affecting R2, Bot Management, SSL certificate issuance, WARP and Durable Objects, plus a separate six-hour BGP route-withdrawal outage on 20 February 2026. When a company sits in front of a fifth of the web, outages are systemic events with contractual and reputational consequences.
• Customer concentration in the large-account cohort: roughly 72% of revenue now comes from customers spending above $100,000 a year, and the largest single contract is worth about $42.5m annually. Growth increasingly depends on renewing and expanding a concentrated set of competitively bid enterprise relationships.
• The AI traffic shift cuts both ways: management describes the move to AI agents and answer engines as a fundamental re-platforming of the internet. If AI assistants intermediate more web traffic, the volume flowing through publisher sites that Cloudflare protects could shrink, and the crawler-blocking and pay-per-use policies could provoke disputes with the AI companies whose infrastructure spend Cloudflare also wants.
• Valuation compression risk: at roughly 40 times trailing sales and several hundred times free cash flow, with no GAAP earnings anchor, the shares are priced for sustained 30%-plus growth. A single quarter of deceleration, or a broad de-rating of high-multiple infrastructure software, would have an outsized effect independent of operating performance.

11. Recent Developments

• 16 Jan 2026 — Cloudflare acquires The Astro Technology Company. The team behind the Astro web framework joined Cloudflare, with a commitment to keep the framework open source. It is a developer-funnel acquisition aimed at pulling framework users onto Workers.
• 10 Feb 2026 — Q4 and FY2025 results. Q4 revenue of $614.5m was up 33.6% year on year and FY2025 revenue of $2,167.9m up 29.8%. The company disclosed its largest-ever annual contract value deal at roughly $42.5m a year and total new ACV growth of about 50%.
• 16 to 20 Feb 2026 — Multi-day service disruption. A widespread incident affected R2, Bot Management, SSL certificate provisioning, WARP and Durable Objects, followed by a separate BYOIP and BGP route-withdrawal outage on 20 February lasting six hours and seven minutes.
• 26 Feb 2026 — FY2025 Form 10-K filed. The annual report confirmed the full-year figures, the $1,204.9m accumulated deficit and the convertible note structure used throughout this report.
• 07 May 2026 — Q1 2026 results and a 1,100-role restructuring. Revenue of $639.8m was up 34% year on year, but the simultaneous announcement of a roughly 20% headcount reduction framed as an "agentic AI-first operating model" sent the shares down more than 20% on the day.
• 04 Jun 2026 — Cloudflare acquires VoidZero. The Vite, Vitest, Rolldown and Oxc JavaScript tooling ecosystem joined Cloudflare, alongside a $1m commitment to an independent Vite ecosystem fund.
• 09 Jun 2026 — Investor Day at the New York Stock Exchange. Management set out the connectivity cloud strategy and the AI monetisation roadmap to institutional investors.
• 30 Jun 2026 — Annual Meeting approves a new Class C share structure. Stockholders approved the creation of non-voting Class C common stock and a related Class C distribution, plus a doubling of authorised Class A shares and new equity plan terms.
• 01 Jul 2026 — Content Signals Policy update. Cloudflare announced that from 15 September 2026 its defaults will block mixed-use AI crawlers from ad-supported pages unless site owners opt out, escalating its push to make AI companies pay for publisher content.
• 06 Aug 2026 — Q2 2026 results and raised guidance. Revenue of $696.1m was up 36% year on year, an acceleration; the GAAP net loss of $170.0m included the $150.7m restructuring charge, and non-GAAP EPS was $0.29. Full-year 2026 revenue guidance was raised to $2,864m to $2,870m, implying about 32% growth. The shares rose sharply and set a new 52-week high in the days that followed.

12. Key Dates to Watch

• 15 Aug 2026 — the 0% convertible senior notes due 2026, $1.125bn principal, reach maturity. Settlement will be visible in the Q3 2026 balance sheet and share count.
• 15 Sep 2026 — Cloudflare's default settings begin blocking mixed-use AI crawlers from ad-supported pages, the first hard enforcement date for the Content Signals Policy.
• Expected Oct 2026 — Q3 2026 results. Cloudflare had not formally announced the date as at 8 August 2026; it reported Q3 2025 on 30 October 2025 and typically issues a date-confirmation release three to four weeks ahead.
• 19 Oct 2026 — Cloudflare Connect 2026 opens at Moscone West, San Francisco, running to 21 October 2026. Historically the venue for product announcements.
• Expected Feb 2027 — Q4 and FY2026 results, the first full year including the restructured cost base and the AI crawler monetisation programme.
• 15 Jun 2030 — the 0% convertible senior notes due 2030, $2.0bn principal, reach maturity.

Track scheduled macro releases that move high-multiple software valuations on our Economic Calendar, and discuss this research with other members in the ChartsView Forum.

Disclaimer: This research is produced by ChartsView for educational and informational purposes only. It does not constitute financial advice or a recommendation to buy or sell any security. All information is sourced from publicly available company filings, press releases, and official data. ChartsView does not use analyst opinions or third-party ratings. Always conduct your own due diligence and consider your personal financial situation before making investment decisions. Past performance is not indicative of future results.