Cloudflare: From a Harvard Business School Project to the World's Largest Edge Security Network

Origin

In 2004, Matthew Prince and Lee Holloway created Project Honey Pot, an open-source anti-spam community to track the sources of spam senders. In 2009, while pursuing his MBA at Harvard Business School, Prince met Michelle Zatlyn. During a casual chat about the project, Zatlyn asked why they only tracked the bad guys instead of stopping them directly—a question that became the starting point of the venture. The three teamed up to participate in the Harvard Business School Business Plan Contest and won. They then moved to Silicon Valley with the idea of building a website protection layer that was both fast and secure. The primary skepticism from early investors and advisors was that security protection would inevitably slow down websites, prompting the team to make eliminating latency their core proposition.

Milestones

Turning Points

• Michelle Zatlyn's remark asking why they didn't stop the bad guys upgraded Project Honey Pot from a tracking community into Cloudflare's foundational business proposition.
• The counterintuitive confirmation in the 2010 private beta that security does not slow down but rather accelerates websites established the integrated security and performance roadmap.
• The introduction of free Universal SSL in 2014 traded short-term revenue to secure standard-setting power for global HTTPS and mass site migration.
• The launch of R2 egress-fee-free storage in 2022 frontally challenged the AWS pricing model, upgrading the company from a CDN provider to a cloud platform competitor.
• Surpassing 50% non-human traffic in 2026 drove a complete pivot to a new positioning of building infrastructure for AI agents.

Failures & Pitfalls

• Early investors and advisors universally doubted that security protection would inevitably slow down websites; the team spent a tremendous amount of time eliminating latency step by step to prove the model viable.
• Long-term provision of infrastructure services to controversial websites repeatedly plunged the company into public relations crises, forcing it to high-profile terminate Kiwi Farms services in 2022 and damaging its brand.
• The company experienced years of ongoing losses after going public; the conversion rate of the freemium model and the pace of profitability faced repeated skepticism from Wall Street.
• Large-scale network outages and occasional edge node failures once caused a vast number of global websites to become simultaneously inaccessible, exposing the systemic risks of centralized infrastructure.

Core Data

• FY2024 Revenue：Approximately $1.67 billion, an increase of about 29% year-over-year (publicly disclosed figures, independently unverified)
• Offering and Listing：Listed on the NYSE in September 2019 at an offering price of $15, with a first-day market cap of approximately $4.4 billion (publicly disclosed figures, independently unverified)
• Network Coverage：Covering over 330 cities across more than 125 countries (publicly disclosed figures, independently unverified)
• Record DDoS Mitigation in 2026：Peak attack volume reached 31.4 Tbps in a single attack (publicly disclosed figures, independently unverified)
• Paying Customer Base：Over 220,000 paying customers in 2024 (publicly disclosed figures, independently unverified)
• 2026 Non-Human Traffic Share：Non-human traffic such as AI agents exceeded 50% of total network traffic (publicly disclosed figures, independently unverified)
• Global Workforce：Over 4,000 employees globally (publicly disclosed figures, independently unverified)

Competitors / Peers

In the CDN and edge security market, Cloudflare primarily benchmarks against Akamai and Fastly, both of which have deeper roots in media delivery and large customer customization. In the zero-trust and SASE domain, it competes directly with Zscaler and Palo Alto Networks. Its R2 egress-fee-free object storage and Workers edge computing directly challenge the public cloud pricing models of Amazon AWS, Microsoft Azure, and Google Cloud. Cloudflare's differentiation lies in a unified programmable global network combined with an aggressive free strategy, whereas competitors largely rely on traditional high-priced contracts or cloud bundling sales.