Cloudflare expands Enterprise features and raises platform limits

Broader access and account controls

Cloudflare said every generally available feature launched that week on its Enterprise plan is also available to Pay-as-you-go customers, with most available on the free tier. The company said plan differences now concern usage limits rather than feature access, though its goal of making every feature available to everyone is not yet complete.

Logpush is now available to Free, Pro and Business customers through self-service, pay-as-you-go pricing. It delivers Cloudflare logs to storage, security and analytics destinations. Transformers is generally available to all customers and uses SQL to filter records, redact sensitive information, enrich events and reformat logs. Custom Dashboards, which provide personalized metric views, are also available to all customers.

Cloudflare has also expanded Role-Based Access Control across its products. Nearly all products have RBAC roles at account and zone levels, and Workers recently joined R2 and Access with resource-level roles. A new dashboard control lets users create additional free, independently billed accounts for separate teams or open source projects. Enterprise customers can request accounts through their account team, with no preset limit.

Organizations group accounts with shared analytics and configuration. The feature is in beta for Enterprise customers, scheduled for general availability in October, and planned for free accounts in early 2027. Shared capabilities include analytics, audit logging, and WAF, Gateway and Access IdP settings. Terraform is available to all customers. Tags can be added interactively or through the API, and Cloudflare intends to extend them to billing and access control while making them manageable through Terraform.

Self-service tools and higher limits

Support for the Authentik identity provider is now generally available, as are SCIM Audit logging, SCIM 2.0 Group Sync and MCP Server Portals. The Network Overview page and Unified Routing are also available to all customers. Cloudflare said it is committed to introducing no new Enterprise-only features, except inherently Enterprise-oriented offerings such as Cloudflare for Government.

The billable usage dashboard and API let non-Enterprise customers see spending and download consumption data. Budget alerts are on by default. Hard spending caps are being prototyped, with early availability planned for Q4 2026, while Cloudflare expects to announce the Enterprise experience in 2027.

Product limits also rose. Workers now support 1 second of startup time, 32 MiB WebSocket messages, 1 million subrequests per request and 64 MiB uncompressed. Containers can use 6 TiB of memory, 1,500 vCPU and 30 TB of disk. Workflows can run 50,000 concurrent instances, create 300 per second and queue 2 million. Security Insights provides scheduled scans every seven days on Free, every three days on Pro and Business, and daily on Enterprise, plus on-demand scans on every plan.

How Cloudflare uses the platform

Cloudflare said its teams create accounts by team or service and use Terraform for access and production configuration. Narrow scopes let engineers receive broader permissions while limiting the blast radius. All company accounts sit within a Cloudflare organization that gives the security team administrative access, analytics, policy management and shared configurations. Teams are beginning to use Resource Tagging to find WAF rules and R2 buckets.