Cloudflare Access Free, Pay-as-you-go and Contract pricing, annual billing, user limits and separately charged platform options checked 2026-10-22.
Verified
Choose Cloudflare Access Free for a deployment within the documented 50-user limit; compare Pay-as-you-go when you need the published paid plan, and Contract when the purchase needs the advertised enterprise support scope. [1][2] These are the zero trust platform plans shown in the Access product page’s pricing section, rather than website CDN plans.
All Access pricing-section plans
Cloudflare Access pricing checked 2026-10-22; “Pay-as-you-go” still states annual payment.
Plan
Price and billing period
Unit, minimums and limits
Free plan or trial
Free Plan
$0 forever.
50-user limit in the core-capabilities table. The headline says best for teams under 50; use 50 as the stated table limit. [2][1]
Continuing free plan; described as usable for enterprise proof-of-concept tests. [1]
Pay-as-you-go
$7 per user/month, paid annually. Separate monthly-payment amount and ISO currency code: Unknown. [1]
No user limit in the table. Minimum paid commitment: Unknown; “best for teams over 50” is positioning rather than a verified minimum. [2][1]
Separate timed trial: Unknown. Free-plan evaluation is documented. [1]
Contract Plan
Custom price per user/month, paid annually. Numeric amount and currency: Unknown. [1]
No user limit in the table; negotiated minimum: Unknown. [2]
Free plan is positioned for proof-of-concept tests; contract-specific trial duration: Unknown. [1]
Add-ons shown alongside Access
Access-related zero trust platform options, not a quote for a full SASE deployment.
Item
Price or state
Boundary
Log Explorer
Free/Pay-as-you-go: first 10 GB free, then $1 per GB/month. Enterprise: custom pricing. [3]
This is a storage/usage charge, separate from the user rate. ISO currency code: Unknown.
The published paid rate is annual-payment pricing despite the Pay-as-you-go name. A five-user arithmetic example at that rate is $35/month equivalent or $420/year (5 × $7 × 12); this does not confirm that a five-user paid order is available or establish a minimum. [1]
Unknowns and purchase checks
The standalone zero trust plans URL returned a platform-pricing shell without plan amounts. The plan and add-on facts here come from the Access page’s actual pricing section.
The dollar ISO currency code, a separately priced monthly payment option, timed-trial/card terms, taxes, paid minimums, and negotiated add-on amounts are Unknown.
Free Plan
$0
forever
Best for teams under 50 users or enterprise proof-of-concept tests.
Get started
Pay-as-you-go
$7
per user/month (paid annually)
Best for teams over 50 users solving narrow SSE use cases and that do not require enterprise support services.
Get started
Contract Plan
Custom price
per user/month (paid annually)
Best for organizations building toward a full-featured SSE or SASE deployment that also desire maximum support.
Talk to an expert
Cloud access security broker (CASB)
Cloud access security broker (CASB)
CASB continuously monitors SaaS apps at rest to detect potential data exposure due to misconfigurations or weak posture findings.
See tech docs >
Up to 2 read-only API integrations
Up to 2 read-only API integrations
Unlimited out-of-band integrations (add-on)
Data loss prevention (DLP)
Data loss prevention (DLP)
DLP detects sensitive data in transit and at rest across web, SaaS and private apps with controls or remediation guides to stop leakage or exposure.
See tech docs >
Limited predefined profiles
Limited predefined profiles
Full-featured (add-on)
Remote browser isolation (RBI)
Remote browser isolation (RBI)
RBI layers additional threat defense and data protection controls across browsing activities by running all browser code on Cloudflare's global network.
See tech docs >
Add-on
Add-on
Email security
Email security
Email security helps block and isolate multi-channel phishing threats, including malware and business email compromise.
See tech docs >
Add-on
Network services for SASE
Network services for SASE
Cloudflare One is our single-vendor SASE platform that converges zero trust security services from the plans above with network services — including Magic WAN and Firewall.
See tech docs >
Add-on (See next pricing tab)
Support options vary by plan type. Various professional advisory and hands-on implementation services available as add-ons to Contract plans.
Chat and ticket support
Phone, chat, and ticket support; professional services available (add-on)