Cloudflare also announces GovRAMP Moderate and intent to pursue Impact Level 4 (IL4) authorization to protect the nation's sensitive data across the Federal government, DoD, and highly-regulated industries.

Cloudflare, Inc. (NYSE:NET), the leading connectivity cloud company, today announced that Cloudflare for Government achieved the Federal Risk and Authorization Management Program (FedRAMP®) High certification and GovRAMP™ Moderate authorization. These achievements enable Federal, State and Local government, defense, education and highly-regulated organizations to use Cloudflare’s suite of integrated security, performance, AI and developer services to advance their missions and innovate with efficiency.

As the public sector faces an increasingly complex threat landscape, Cloudflare also confirmed its intent to pursue Department of Defense (DoD) Impact Level 4 (IL4) authorization. By bridging the gap between legacy infrastructure and modern security, Cloudflare is enabling government and defense organizations to leverage a unified suite of security, performance, and developer services—allowing them to innovate with speed without compromising on compliance.

"Federal agencies, the Department of Defense, and highly-regulated organizations face more pressure than ever to modernize technologies, deliver faster, and reduce costs while protecting highly sensitive data from evolving threats," said David Mihalchik, VP of U.S. Public Sector at Cloudflare. "FedRAMP High, GovRAMP Moderate, and our intent to pursue DoD IL4 let us bring a platform to federal, state, local, and defense teams to advance their missions, retire legacy technologies, and accelerate their shifts to a more secure, efficient, and innovative future."

Cloudflare for Government is a unified platform that helps organizations adopt Zero Trust security, strengthen digital resilience, accelerate performance, and build and deploy applications quickly. It runs on the same software and architecture as Cloudflare's global network, which spans more than 335 cities in over 125 countries, using software-defined regionality. Cloudflare for Government gives agencies the same protection, performance, and pace of innovation that Cloudflare delivers across the Internet. Post-quantum cryptography also protects data in transit against emerging threats.

With Cloudflare’s FedRAMP High certification, agencies and their partners can adopt Cloudflare for Government to process High Impact data: the sensitive information tied to national security, critical infrastructure, and financial systems, where a breach could have severe or catastrophic consequences. Cloudflare processes this data within an authorized U.S. boundary, across 15 metro areas positioned close to users, so agencies can scale quickly and reliably while keeping their most sensitive data in the U.S.. Similarly, Cloudflare’s GovRAMP Moderate authorization confirms that Cloudflare for Government can satisfy state and local governments’ mandates to protect their own sensitive workloads and meet state-specific data privacy mandates.

Today, more than 100 U.S. government agencies use Cloudflare to accelerate Zero Trust architectures, deliver resilient digital services, meet TIC 3.0 requirements, and enable Post-Quantum encryption. This includes the Department of Commerce, Department of Energy, Department of Health and Human Services, Department of Homeland Security, Department of the Interior, Department of Justice and Department of State. In addition, several cloud solutions including Workday, New Relic, Armis Federal, Darktrace Federal and GitLab rely on Cloudflare for Government to deliver trustworthy cloud services to their government customers around the globe.

To learn more about Cloudflare, and how it supports the public sector check out the resources below:

About Cloudflare

Cloudflare, Inc. (NYSE:NET) is the leading connectivity cloud company on a mission to help build a better Internet. It empowers organizations to make their employees, applications and networks faster and more secure everywhere, while reducing complexity and cost. Cloudflare’s connectivity cloud delivers the most full-featured, unified platform of cloud-native products and developer tools, so any organization can gain the control they need to work, develop, and accelerate their business.

Powered by one of the world’s largest and most interconnected networks, Cloudflare blocks billions of threats online for its customers every day. It is trusted by millions of organizations – from the largest brands to entrepreneurs and small businesses to nonprofits, humanitarian groups, and governments across the globe.

Learn more about Cloudflare’s connectivity cloud at cloudflare.com/connectivity-cloud. Learn more about the latest Internet trends and insights at https://radar.cloudflare.com.

Forward-Looking Statements

This press release contains forward-looking statements within the meaning of Section 27A of the Securities Act of 1933, as amended, and Section 21E of the Securities Exchange Act of 1934, as amended, which statements involve substantial risks and uncertainties. In some cases, you can identify forward-looking statements because they contain words such as "may," "will," "should," "expect," "explore," "plan," "anticipate," "could," "intend," "target," "project," "contemplate," "believe," "estimate," "predict," "potential," or "continue," or the negative of these words, or other similar terms or expressions that concern Cloudflare’s expectations, strategy, plans, or intentions. However, not all forward-looking statements contain these identifying words. Forward-looking statements expressed or implied in this press release include, but are not limited to, statements regarding Cloudflare’s plans and objectives to pursue FedRAMP High, Impact Level 4 (IL4), and other public sector security certifications, the impact to Cloudflare and its customers if Cloudflare achieves FedRAMP High, IL4, or other public sector security certifications, the benefits to customers from using Cloudflare for Government and Cloudflare’s other products and technology, the expected functionality and performance of Cloudflare for Government and Cloudflare’s other products and technology and Cloudflare’s global network, Cloudflare’s technological development, future operations, growth, initiatives, or strategies, and comments made by Cloudflare’s VP, US Public Sector and others. Actual results could differ materially from those stated or implied in forward-looking statements due to a number of factors, including but not limited to, risks detailed in Cloudflare’s filings with the Securities and Exchange Commission (SEC), including Cloudflare’s Quarterly Report on Form 10-Q filed on May 8, 2026, as well as other filings that Cloudflare may make from time to time with the SEC.

The forward-looking statements made in this press release relate only to events as of the date on which the statements are made. Cloudflare undertakes no obligation to update any forward-looking statements made in this press release to reflect events or circumstances after the date of this press release or to reflect new information or the occurrence of unanticipated events, except as required by law. Cloudflare may not actually achieve the plans, intentions, or expectations disclosed in Cloudflare’s forward-looking statements, and you should not place undue reliance on Cloudflare’s forward-looking statements.

© 2026 Cloudflare, Inc. All rights reserved. Cloudflare, the Cloudflare logo, and other Cloudflare marks are trademarks and/or registered trademarks of Cloudflare, Inc. in the U.S. and other jurisdictions. All other marks and names referenced herein may be trademarks of their respective owners.

View source version on businesswire.com: https://www.businesswire.com/news/home/20260810159126/en/

Cloudflare, Inc.

Daniella Vallurupalli

Vice President, Head of Global Communications

press@cloudflare.com