Two plans, and one line between them. There is no number on this page because we have not set one, and we would rather leave the space empty than fill it with a figure we would change. Here is what will cost money, and here is what the money will not buy.
The line is not how much protection you get. Both plans put your website behind exactly the same thing. The line is whether you have to be the one who goes and looks.
Everything that tells you the truth, on a screen you open
No charge today
The same truth, brought to you when it changes
Price not set
Today every website here runs on the left column. The alert emails are the part we have not built yet, which is the other half of why there is no price on this page.
We have not decided what to charge. There is no payment system behind this website either, so nothing here can take your money today even if you tried to hand it over.
When the number exists it gets published here first, in plain sight, before anyone is asked for it.
About the free plan: we are not going to promise it will never change, because we do not know that yet, and a promise we cannot keep is worth less to you than a straight answer. What we can promise is the order of events. You read about a change here, and hear it from us, before it reaches you.
A higher plan does not buy you a stronger firewall. There is no stronger firewall for us to sell.
The protection your website sits behind belongs to Cloudflare, and it is configured for the whole zone. That means the same protection at the same strength for every website we put behind it, on every plan. Firewall rules that apply to one hostname and not another do exist at Cloudflare, as an Enterprise feature, and we are not Enterprise.
So when a pricing page tells you that a higher tier makes your website harder to attack, it is worth asking which part of the network changes. On ours, none of it does. What the paid plan changes is who has to notice when something breaks, you or us.
5 emails, listed below. Each one would reach you on the day the answer changes, instead of waiting for you to open the dashboard and find it.
None of these emails are sent today. The checks behind them run on a schedule already, and the dashboard shows every result, but nothing here reaches out to you yet.
What stops is the telling. No email when a certificate starts running out, none when the record that renews it quietly disappears, none when your CNAME gets deleted. The checks keep running and the dashboard still opens. You just have to be the one who goes and reads it.
What does not happen is us pulling your website off the shield that afternoon. Your domain points at us, so taking you off is an action that can break a site which was working, and that is exactly why it is slow and loud on our side: you get told, more than once, with the steps to point your DNS back at your own server, before anything moves.
The way out entirely is that one DNS record pointed back at your own server. Every screen that has a website on it tells you that, instead of leaving it for you to find in here. The step by step version is written down, and those screens link straight to it.
The check is the finished part. Two public DNS queries, read back to you, with no account and no email address asked for. If the answer is that you are already covered, it says that and stops instead of offering you anything.
Check my domain