Cloudflare
Usage- + subscription-based SaaS; self-built anycast network monetized across CDN/performance, security (WAF, DDoS, Zero Trust/SASE), and Developer Platform (Workers, R2, D1, AI inference). Land-and-expand, free tier funneling to paid; ~72% of revenue from customers >$100K/yr.
Earnings, margins, COGS & capex
Durable ~30%+ top-line grower with best-in-class net retention among infrastructure names, now pivoting hard into AI-inference/agentic workloads. Gross margin is compressing (non-GAAP 77.1%->72.8% YoY) as low-margin developer/AI products scale, but FCF margin is expanding (13% in Q1) and non-GAAP operating margin sits low-to-mid-teens. In May 2026 management announced a ~20% headcount reduction (~1,100 roles, $140-150M charges) framed as an AI-efficiency reset - a notable culture/execution inflection for a company that had grown headcount aggressively.
Income statement — where each revenue dollar goes
% of revenueOf every $1 of revenue, ~27¢ is cost of goods and ~59¢ operating expense, leaving ~14¢ of operating profit.
Revenue trend
Margins
declining (was 77.1% Q1 FY2025, -430bps YoY; ~-210bps QoQ; full-year FY2025 74.5%)
stable-to-up
still GAAP-unprofitable at the operating line; not yet trending to breakeven - profitability is a non-GAAP story
expanding (full-year FY2025 12%)
COGS structure
Bandwidth/transit, colocation and network hardware, plus support and stock-based comp allocated to cost of revenue. The self-built anycast network gives operating leverage at scale but the incremental margin on developer/R2/AI-inference workloads is structurally lower than legacy CDN/security, which is what is pulling gross margin down as that mix grows.
Capex
Ongoing network buildout - servers (increasingly GPU/accelerator capacity for Workers AI inference), points-of-presence expansion (330+ cities), and colocation. Capital-light relative to hyperscalers because Cloudflare places commodity/edge compute in existing carrier-neutral facilities rather than building mega-datacenters, but AI-inference ambitions are pushing compute intensity up.
Latest earnings
Beat - revenue $639.8M (+34%) above the ~$630M guide/consensus; the headline surprise was the ~20% workforce reduction announced alongside, framed as an AI-driven efficiency reset
Q2 FY2026 revenue $664-665M (+30% YoY), non-GAAP operating income $90-91M, non-GAAP EPS $0.27. FY2026 revenue $2,805-2,813M (~+30%), non-GAAP operating income $418-421M, non-GAAP EPS $1.19-1.20. Restructuring charges $140-150M in 2026 ($105-110M cash, $35-40M non-cash).
- Revenue
- $639.8M (+34% YoY)
- Customers >$100K/yr
- 4,416 (+25% YoY)
- Large-customer revenue share
- 72% (up from 69%)
- Dollar-based net retention
- 118% (Q1 FY2026, down from 120% Q4 FY2025)
- RPO
- $2.543B (+36% YoY; current RPO +34%)
- Free cash flow
- $84.1M (13% margin)
- Non-GAAP gross margin
- 72.8%
Growth drivers
- Large-customer expansion - 4,416 customers >$100K/yr (+25% YoY), now 72% of revenue (up from 69%)
- Pool-of-funds / platform contracts and strong dollar-based net retention (118% in Q1 FY2026) driving expansion within existing accounts
- Zero Trust / SASE displacing legacy VPN and hardware appliances (vs Zscaler, Palo Alto)
- Developer Platform (Workers, R2 object storage with no egress fees, D1, Durable Objects) as a serverless AWS-alternative
- AI-inference at the edge (Workers AI, AI Gateway, Vectorize) and being the connectivity/security layer for AI agents and MCP traffic
Reported financials — SEC EDGAR
Audited GAAP figures pulled from SEC filings · latest filing 2026-02-26. The audited primary-source spine — not financial advice.
Revenue — annual (GAAP)
Margins & balance sheet — FY’25
Bull & bear
A category-defining, mission-critical network that is becoming the neutral security-and-compute layer for the whole internet - and now for AI agents - compounding at ~30% with expanding free cash flow and a widening product surface no single competitor spans.
- ~30% durable growth with 13% FCF margin and low-to-mid-teens non-GAAP operating margin - a growth+profitability combination scaling toward Rule-of-40-plus
- 4,416 large customers (+25%), 118% net retention, and RPO +36% show the enterprise land-and-expand engine is accelerating, not maturing
- Uniquely positioned for the agentic-AI wave: the security, connectivity, gateway, and edge-inference layer that AI traffic must traverse
- R2 (no egress fees) and Workers give a credible, differentiated wedge against hyperscaler lock-in economics
- The 2026 restructuring, if it holds, converts a cost-heavy culture into an AI-leveraged one - potential step-change in operating margin
- Owned single network gives structural cost advantage and a threat-data flywheel competitors can't replicate cheaply
A ~30x-forward-sales stock that is still GAAP-unprofitable (-$207.2M operating loss FY2025), with gross margins actively compressing, a ~20% layoff exposing prior over-hiring, and hyperscalers plus security pure-plays squeezing it from both ends - priced for near-perfect execution.
- ~30x forward sales and a GAAP operating loss (-9.6% of revenue FY2025) mean the valuation rests entirely on continued flawless ~30% growth
- Non-GAAP gross margin fell 77.1%->72.8% YoY; if the low-margin developer/AI mix keeps growing, unit economics deteriorate as revenue scales
- The ~20% workforce reduction signals the prior growth was over-resourced and raises execution/attrition risk
- Hyperscalers can bundle CDN/edge/security at near-zero incremental price, capping Cloudflare's pricing power
- Security TAM is crowded with better-capitalized specialists (Zscaler, Palo Alto, CrowdStrike) - Cloudflare is a share-taker, not the leader, in Zero Trust (net retention also eased to 118% from 120%)
- AI-inference monetization is early and unproven at margin; GPU cost inflation could make it dilutive rather than accretive
- Convertible-notes overhang (~$3.29B total across 2026/2030 Notes) and stock-based comp keep the real (diluted, GAAP) cost of the business higher than the non-GAAP framing suggests
What it is worth
Forward EV/Sales with a reverse-DCF sanity check. At ~$86B market cap and modestly net-cash-positive (~$4.16B liquidity vs ~$3.29B convertible notes), EV is ~$85B; on the FY2026 revenue guide (~$2.81B) that is ~30x forward sales - a premium even among high-growth infrastructure software (Akamai trades low-single-digit x; Zscaler/CrowdStrike mid-teens x). The multiple is justified only by durable ~30% growth plus a credible path to 20%+ FCF margins.
Growth decelerating toward ~20% and continued gross-margin compression triggers multiple compression to a still-rich but lower ~15-20x sales, implying meaningful downside from ~$246 (potentially into the $150-180s).
~$240-260 range holds
if the company delivers ~30% growth and mid-teens non-GAAP operating margin with stabilizing gross margin - the multiple stays rich but supported by execution.
Sustained ~30% growth + FCF margin expansion to low-20s% supports a re-rate toward/above the ATH (~$277+); AI-inference/agent monetization proving accretive would justify the premium and more.
The current price implies the market expects Cloudflare to sustain ~25-30% growth for many years while expanding FCF margin toward the low-20s% - essentially pricing it as the winning neutral layer of the AI-era internet. That is a demanding but not impossible bar given the RPO/large-customer trajectory; the swing factor is whether non-GAAP gross margin (72.8% and falling) stabilizes as the developer/AI mix scales.
SWOT
Strengths
- One unified global network (330+ cities) delivering CDN, security, and compute from the same edge - a genuinely differentiated architecture vs bolt-on competitors
- Massive traffic visibility gives a data/threat-intelligence flywheel that improves the security products
- Strong land-and-expand: 118% net retention, 4,416 large customers (+25%), RPO +36% YoY
- Free tier + developer love create a low-CAC top-of-funnel and brand moat
- Positioned as the neutral connectivity/security layer in front of every cloud - benefits regardless of which hyperscaler wins
Weaknesses
- GAAP-unprofitable at the operating line (-$207.2M / -9.6% FY2025); profitability is a non-GAAP story
- Gross margin compressing (non-GAAP 77.1%->72.8% YoY) as low-margin developer/AI workloads scale
- Rich valuation (~30x forward sales) leaves no room for execution slips
- 2026 workforce cut (~20%, ~1,100 roles) signals prior over-hiring and creates near-term execution/morale risk
- 2026 convertible notes (~$1.29B) maturing Aug 2026 - refinance/dilution overhang, though liquidity covers it
Opportunities
- Become the security + connectivity + inference layer for the agentic-AI era (AI Gateway, Workers AI, MCP/agent traffic)
- R2 zero-egress object storage attacking AWS S3 egress economics - a wedge into hyperscaler workloads
- Zero Trust/SASE consolidation replacing legacy VPN and appliance vendors
- Sovereign/data-localization and post-quantum demand favoring a global neutral network
- Cross-sell from performance into higher-value security and platform SKUs
Threats
- Hyperscalers (AWS CloudFront, Azure Front Door, Google Cloud) bundling CDN/edge/security at aggressive prices
- Well-capitalized pure-play security peers (Zscaler, Palo Alto, CrowdStrike) in Zero Trust/SASE
- AI-inference commoditization and GPU cost inflation pressuring the developer-platform margin
- Macro/enterprise IT budget cyclicality slowing usage-based revenue
- Multiple compression if growth decelerates below the ~30% the valuation assumes
Moats, dependencies & bottlenecks
Moats
Every product runs on the same network, so each new POP and customer improves latency, security data, and unit cost simultaneously - very hard and capital-intensive to replicate.
Sitting in front of a large share of internet traffic yields security signal no smaller competitor can match; feeds WAF/DDoS/bot products.
Free tier and Workers create bottom-up adoption and low CAC; switching costs rise as apps build on Workers/R2/D1.
Consolidating CDN+security+Zero Trust+compute on one vendor is sticky, but individual layers are replaceable by hyperscaler equivalents.
Being cloud-agnostic (sits in front of AWS/Azure/GCP) is a positioning advantage, but hyperscalers are also its biggest competitive threat.
Dependencies
Coopetition / origin infrastructure Cloudflare fronts workloads hosted on them but competes directly on CDN/edge/storage/security; they can bundle and undercut.
Digital Realty DLR, tier-1 carriers) Network cost of goods; peering relationships and colo capacity underpin the edge.
GPU/accelerator supply and pricing increasingly gate the Workers AI / inference roadmap.
Usage-based revenue is sensitive to customer traffic and budget cycles.
2026 Notes (~$1.29B) mature Aug 2026 and 2030 Notes (~$2.0B) in 2030; ample liquidity but a refinance/dilution consideration.
Advantages
- Single unified network spanning performance + security + compute — no competitor offers all three natively from one edge
- Highest-visibility threat data set in the industry
- Bottom-up developer adoption lowering customer-acquisition cost
- Cloud-neutral positioning as the layer in front of every hyperscaler
- Early, credible product presence in AI-agent security/connectivity (AI Gateway, Workers AI, MCP)
Weaknesses
- Still GAAP operating-loss-making (-$207.2M FY2025); profitability is non-GAAP
- Gross margin compressing as mix shifts to low-margin products
- Not the leader in the crowded Zero Trust/SASE and broader security markets
- Valuation leaves no margin for error
- Prior over-hiring exposed by the 2026 ~20% cut
Bottlenecks
- Gross-margin trajectory of the developer/AI-inference business — must prove it scales profitably, not just fast
- GPU/accelerator capacity and cost for edge AI inference
- GAAP profitability and stock-based-comp dilution converging with the non-GAAP narrative
- Execution through the ~20% restructuring without losing product velocity or key talent
- Enterprise sales motion maturity vs entrenched security/network incumbents
Top signals & trends
Top signals
Watch whether gross margin stabilizes and whether restructuring lifts operating margin.
4,416 (+25%), 118% net retention, and RPO +36% are the core expansion signal; net retention easing from 120% and any count deceleration would matter a lot at this multiple.
Management is leaning into AI-inference/agent narrative; concrete monetization numbers would re-rate the story.
~20% cut is a double-edged signal - efficiency upside vs execution/culture risk.
Non-GAAP GM 77.1%->72.8% YoY; the direction is the single most-watched fundamental risk.
Trends
Structural tailwind Cloudflare is explicitly positioning for (AI Gateway, Workers AI, agent/MCP traffic).
Multi-year enterprise refactor; Cloudflare a share-taker against Zscaler/Palo Alto.
R2's no-egress-fee model rides growing enterprise frustration with hyperscaler egress pricing.
The 2026 layoffs mirror an industry-wide 'do more with AI, fewer people' pivot - margin-positive if executed.
Favors a global, neutral, standards-forward network operator.
Ecosystem & competitor graph
Suppliers feed the company; customers pull from it. Line thickness shows the strength of each tie (supply-chain dependency, customer earnings contribution). Hover to isolate a tie.
Carrier-neutral colocation for Cloudflare POPs.
Data-center/colo capacity provider.
GPUs/accelerators for Workers AI edge inference.
Server CPUs and accelerators across the fleet.
Server silicon supplier.
Switching and networking gear; peering and IP transit that underpin the network also rely on tier-1 carriers (mix of public and private vendors).
SaaS companies, e-commerce, media, and public sector Broad base - 72% of revenue from 4,416 customers paying >$100K/yr; specific logos largely undisclosed by contract.
Bottom-up Workers/Pages/R2 adoption funneling from the free tier into paid usage.
Growing cohort using AI Gateway, Workers AI, and Cloudflare as the security/connectivity layer for AI traffic.
Legacy CDN + security incumbent; slower-growing, more profitable - the classic value-vs-growth contrast to NET.
Smaller edge-cloud/CDN pure-play; developer-oriented but far behind on scale and financials.
Hyperscaler bundling CDN/edge/security/storage; can undercut on price and lock in via the broader cloud.
Bundles edge + security into Azure/enterprise agreements.
Hyperscaler edge + security competitor with deep network assets.
Zero Trust/SASE leader; direct competitor in the security-service-edge market Cloudflare is expanding into.
Platformizing security including SASE (Prisma); well-capitalized incumbent.
Adjacent security-platform competitor expanding into network/Zero Trust.
App delivery/security incumbent; overlaps on WAF/app protection.
Competes for the developer/SMB cloud + edge-compute segment.