Company: NET
Filing Date: 2025-02-20
Form Type: 10-K
Source: 0001477333-25-000043
Chunk: 21

Company: Cloudflare, Inc.
Filing Date: 2025-02-20
Form: 10-K
Item: Item 1
Chunk 21
---
.

Network Services

These products help our customers connect, secure, and accelerate their corporate networks, without the need to manage legacy network hardware. This effectively enables Cloudflare to act as a secure wide area network (WAN) for all entities on a corporate network regardless of what device they use or where they are located.

•Magic WAN: Connects and routes traffic between different networks within an enterprise, which are often broadly geographically dispersed, across Cloudflare's global network.

•Magic Transit: Extends the benefits of our network to customers' on-premises and data center networks. Magic Transit is deployed in front of an enterprise network and protects it at the IP layer from DDoS attacks and enables provisioning of a full suite of virtual network functions, including IP packet filtering and firewalling, load balancing, and traffic management tools.

•Magic Firewall: Cloud-based firewall enables administrators to set policies for all traffic entering and leaving the network.

•Cloudflare Network Interconnect: Direct Internet connectivity between Cloudflare’s global network and on-premises networks wherever they are, whether over a private network interconnect or over an Internet exchange.

•Spectrum: Extends Cloudflare’s speed, security, and reliability functionality to TCP/UDP applications at the transport layer of the Internet, such as gaming applications and voice over Internet protocol (VoIP) applications.

Zero Trust Security

These products shield users of a corporate network from attacks, inspect traffic for threats, and apply privilege rules to grant access to the customer's data and applications.

•Cloudflare Access: Enforces Zero Trust application access based on identity.

•Cloudflare Gateway: Filters all traffic crossing to customer employee devices to prevent malicious traffic reaching end-user devices.

•Remote Browser Isolation: Runs a customer's browsers in the cloud as opposed to on-device, insulating devices from attacks.

•Cloud Access Security Broker (CASB): Provides visibility and control over SaaS applications to help prevent data leaks and compliance violations.

12

•Cloud Email Security: Protects users of a corporate network from phishing, business email compromise, and email supply chain attacks.

•Data Loss Prevention: Inspects HTTP/S traffic for sensitive data like personally identifiable information (PII) and prevents exfiltration of customer information with allow or block policies.

Developer-based Solutions

By leveraging our serverless platform, developers can build serverless applications on our network that scale without needing to spend time and effort on infrastructure or operations. This enables developers to deliver more performant applications that have global scale, all while improving their productivity.