Who uses Cloudflare WAF?
Web application firewall with managed rules and machine-learning attack detection.
On usedby, 13 companies use Cloudflare WAF, including Caliente, CrazyGames, and Hack The Box. 5 of them are confirmed by a published case study, quote or press release. 2 of them declared it to usedby themselves. Every company links to the public page that names it.
13 companies, each with its public proof
Strongest proof first. Open a company to see the page that names it, and when we captured it.
ConfirmedCaliente
ConfirmedCrazyGames
ConfirmedHack The Box
ConfirmedOlive YoungRetail
ConfirmedVFS Global
DeclaredCapacityArtificial Intelligence
DeclaredHalcyonArtificial Intelligence
ObservedGustoHR & Recruiting
ObservedBAFTA
ObservedComfortDelGro- ObservedFujitecManufacturing
ObservedPoki
ObservedTAP Air PortugalAirlines & Aviation Services
| Company | Industry | Proof | First public proof | Source |
|---|---|---|---|---|
| Caliente | — | — | cloudflare.com | |
| CrazyGames | — | — | cloudflare.com | |
| Hack The Box | — | — | cloudflare.com | |
| Olive Young | Retail | — | cloudflare.com | |
| VFS Global | — | — | cloudflare.com | |
| Capacity | Artificial Intelligence | — | trust.capacity.com | |
| Halcyon | Artificial Intelligence | — | halcyon.ai | |
| Gusto | HR & Recruiting | — | cloudflare.com | |
| BAFTA | — | — | cloudflare.com | |
| ComfortDelGro | — | — | cloudflare.com | |
| Fujitec | Manufacturing | — | cloudflare.com | |
| Poki | — | — | cloudflare.com | |
| TAP Air Portugal | Airlines & Aviation Services | — | cloudflare.com |
What customers say Cloudflare WAF changed
Figures and quotes as Cloudflare WAF and its customers published them, each tied to its source. We quote, we do not measure the result.
“Sophisticated scraping bots were a real business risk, causing price information leaks and database loads. However, after introducing Cloudflare, we simultaneously reduced infrastructure costs and strengthened our data security by precisely filtering out malicious bots.”
Taekeun LeeSRE Engineer, Olive Young“Cloudflare's platform could scale seamlessly alongside growth in traffic, users, and attack surface without introducing additional operational complexity”
Thiseas MeggosVice President of Infrastructure at Hack The Box, Hack The Box“WAF just works and you don't have to think about how the reverse proxy network settings interact with the firewalls”
Raf MertensCEO and co-founder, CrazyGames, CrazyGamesIs Cloudflare WAF used in companies like yours?
By industry
5 industries among 13 customers.
What Cloudflare WAF does, and what to check
What Cloudflare WAF does
Web application firewall with managed rules and machine-learning attack detection.
Written by usedby from developers.cloudflare.com.
Questions to ask in your demo
- Which of your customers look like us, by industry and size?
- What does a pilot cost, and what decides the move to a full contract?
- Where is our data stored, who can access it, and is it used to train models?
- How does Cloudflare WAF work with the tools we already use?
Cloudflare WAF alternatives, by public customers
Same or competing category, from another vendor. Every proof level counts. A shared category alone does not establish the same functions or suitability for your task.
- Cloudflare WAFThis tool
Abnormal AIBehavioral AI platform that stops email attacks, account takeover and AI-agent risks across cloud workspaces.Who uses Abnormal AI →
SentinelOneAI-powered cybersecurity platform for endpoint, cloud, identity and data protectionWho uses SentinelOne →
Vectra AIAI-driven threat detection and response across network, identity, cloud and SaaS for security operations teams.Who uses Vectra AI →
TorqAI SOC platform whose agents triage, investigate and remediate security alerts with hyperautomation.Who uses Torq →
DarktraceSelf-learning AI cybersecurity platform that detects and responds to threats across network, email, cloud and identity.Who uses Darktrace →
Questions about Cloudflare WAF
Who uses Cloudflare WAF?
13 companies use Cloudflare WAF (5 confirmed, 2 declared, 6 observed), including Caliente, CrazyGames, and Hack The Box.
What results do companies report with Cloudflare WAF?
Companies that use Cloudflare WAF report these results in public case studies. Olive Young: Mitigation time dramatically reduced by over 80% (source: cloudflare.com, checked November 12, 2026). Cloudflare mitigates 25 million threats targeting CrazyGames every month (source: cloudflare.com, checked November 12, 2026). VFS Global: In a single month, the WAF generated 581 million protective firewall events (source: cloudflare.com, checked November 12, 2026).
What are the alternatives to Cloudflare WAF?
Ranked by public customers (every proof level counts, job posts included), the top Cloudflare WAF alternatives are Abnormal AI (43 customers, 0 shared), SentinelOne (42 customers, 0 shared), Vectra AI (39 customers, 0 shared), and Torq (28 customers, 0 shared). See all Cloudflare WAF alternatives.
How does usedby know who uses Cloudflare WAF, and how current is it?
Each company here links to a public page that names it as a Cloudflare WAF customer, and each line shows its proof level. A company that declared Cloudflare WAF itself is marked Declared. The latest check ran on November 12, 2026. How usedby collects and checks its data.
Where this data comes from
Three proof levels
Main sources
- cloudflare.com/case-studiesNov 12, 2026
- cloudflare.com/case-studies/olive-youngNov 12, 2026
- cloudflare.com/case-studies/hack-the-boxNov 12, 2026
- 5 case studies, quotes and press releasesNov 12, 2026
- 2 customers declared it themselves
Cite this page
UsedBy.ai (2026). Who uses Cloudflare WAF? 13 companies. Retrieved from https://www.usedby.ai/tools/cloudflare-waf, latest check November 12, 2026.