# Cloudflare (NET) — InvestMoat Analysis _Last analyzed: July 21, 2026_ _Asset class: equity · Canonical page: https://investmoat.com/stocks/net_ ## Scores | Dimension | Score (0–100) | | --- | --- | | Moat durability | 83 | | Growth trajectory | 92 | | Valuation | 62 | | **Composite** | **79** | | **Recommendation** | **Accumulate** | Scores are computed deterministically from this asset’s data by the InvestMoat formula (see https://investmoat.com/llms.txt for methodology). Scores are not directly comparable across asset classes. ## Key stats - **Ticker:** NET - **Market Cap:** $95.7B ## Moat Cloudflare's global edge network processes 215 billion threats daily, creating a threat-intelligence flywheel that compounds with scale and is unreplicable by any single competitor. ### The Connectivity Cloud Moat Cloudflare's moat rests on three interlocking pillars: **Proprietary Data Flywheel, Network Effects, and Platform Bundling**: - **Threat Intelligence Flywheel (Proprietary Data):** With 215 billion cyber threats blocked daily across 332,000+ customers — including 38% of the Fortune 500 — Cloudflare operates the world's largest internet threat sensor network. This telemetry feeds security products in real-time, creating a data moat that grows more valuable with every new customer added to the network. - **Edge Network Effects & Architecture:** Cloudflare's 300+ city network delivers sub-100ms latency to 95% of the world's connected population. Every server in every city can perform every function simultaneously — DDoS mitigation, SASE, DNS, compute, and AI inference. This architecture is 10+ years in the making and cannot be replicated quickly; the performance it delivers improves for all customers as the network scales. - **Platform Bundling Depth (SASE + Zero Trust + Workers):** Cloudflare sells CDN, DDoS protection, Zero Trust access, SASE (Magic WAN, Gateway, DLP), R2 storage, Workers serverless compute, and AI inference from a single unified dashboard. Once enterprises deploy multiple modules — such as the 7-year, $12.7M/year SASE deal closed in Q1 2025 — the configuration, integrations, and workflow dependencies create multi-year switching costs exceeding those of most pure-play cybersecurity vendors. **Moat verdict:** Cloudflare is a net beneficiary of AI — the shift from human users to AI agents as the primary internet traffic source creates massive demand for Cloudflare's edge network, security layer, and Workers compute runtime. The proprietary threat-intelligence data flywheel and network effects are the two most AI-resilient moats, both of which strengthen as AI-driven attack vectors increase the value of real-time threat data. The primary AI risk is that hyperscalers bundle security capabilities into their managed AI platforms, reducing the independent security and CDN market. Overall, Cloudflare's architecture — where AI inference, security, and networking converge at the same edge node — positions it as critical infrastructure for the agentic internet. ## Growth Q1 2026 delivered $639.8M revenue (+34% YoY), beating consensus of $622M and matching Q4's accelerated pace. FY2026 guidance was raised to $2.805–2.813B and non-GAAP EPS to $1.19–1.20 (from $1.11–1.12), and Q2 was guided to $664–665M. RPO grew to $2.54B (+36% YoY, decelerating from +48% in Q4) and DBNRR slipped 2pp sequentially to 118% — a yellow flag worth watching. Alongside earnings, Cloudflare announced a 20% workforce reduction (~1,100 roles, $140–150M charges) to pivot to an agentic-AI-first operating model, simultaneously a long-term margin catalyst and a near-term execution risk that drove the stock down ~18% on the print. - **Revenue CAGR estimate:** 26–30% - **Primary type:** both - **Margin trend:** expanding - **Key risk (moderate):** Two converging risks: (1) the 20% workforce reduction announced May 2026 disrupts go-to-market and product velocity for 2–3 quarters, dragging DBNRR below 116% by Q4 2026; (2) hyperscaler-managed AI agent platforms (AWS Bedrock Agents, Anthropic Managed Agents on AWS/Azure) capture >20% of enterprise agent infrastructure by end of 2026, leaving Cloudflare dependent on the more contested CDN/SASE market where Palo Alto and Zscaler are accelerating bundled offers and RPO growth decelerates below 25% - **Drivers:** - Zero Trust & SASE — ~35% of Cloudflare One platform; multi-year enterprise contracts including $12.7M/yr 7-yr deal (accelerating) - Large Customer Expansion — 4,416 customers >$100K (+25% YoY); contributing 72% of revenue (accelerating) - AI Agent Infrastructure (Workers AI, AI Gateway, Agent Cloud) — AI agent requests on Cloudflare's network +1,700% June 2025→May 2026; Cloudflare Environments for Claude Managed Agents launched with Anthropic; agentic-AI-first restructuring redirects ~$140M cost base toward edge AI roadmap (accelerating) - **Score derivation:** Base 80 (15–30% CAGR, blended 26–30%) + 5 recurring (subscription model, NRR 118%) + 5 TAM expansion (AI agents as new internet users, TAM grows $181B→$231B by 2028) − 2 DBNRR deceleration (120 → 118 QoQ) − 1 restructuring execution risk = 87 ## Valuation At ~$272, NET has pushed ~9% above its $250 base target and now sits ~17% of the way from base to the $380 bull case — the June AI-agent rally has continued into July (Citizens raised its PT to $330 on July 17), leaving the stock ~110% above the bear ($130). The margin of safety that existed at the May ~$150 low and the June ~$234 level is gone: NTM P/S has re-expanded to ~34× and forward non-GAAP P/E to ~228×, pricing in flawless execution of the agentic-AI thesis through the 2–3 quarter restructuring — with Q2 results (due July 30) the next catalyst that must validate the multiple. Valuation is now full rather than attractive. | Multiple | Value | Note | | --- | --- | --- | | Trailing P/E (GAAP) | N/A | Net loss; GAAP EPS negative TTM | | Forward P/E (NTM, non-GAAP) | ~228× | raised FY26 EPS guide $1.19–1.20 | | PEG Ratio | N/A | P/E not meaningful at this stage | | Price / Sales (NTM) | ~34× | $2.81B NTM revenue (raised guide) | | Price / FCF | ~285× | Q1 FCF $84M (13% margin) | NET now trades at ~34× NTM P/S after the AI-agent rally extended from June into July — the multiple has not just round-tripped the May restructuring selloff but pushed past its ~27× March level to a cycle high. The premium to cybersecurity peers (CrowdStrike ~16×, Palo Alto ~11×) is now the widest of the cycle; the market is paying for the agentic-internet thesis (AI agent requests +1,700% YoY, Anthropic managed-agent environments, Citizens PT raised to $330 on July 17) rather than the current 30%+ revenue growth alone. At ~228× forward non-GAAP P/E, the FCF-margin path is the swing factor: only if the 1,100-person reduction delivers 18–20% FCF margin by Q4 2026 does the multiple compress to a defensible level for a 30%+ grower — and with the stock now above its base target ahead of the July 30 Q2 print, the risk/reward has shifted from patience-rewarded to execution-priced-in. _(as of July 2026)_ ## Price scenarios ### Bear — $130 The 20% workforce reduction disrupts go-to-market velocity and product execution for 2–3 quarters while hyperscaler bundling erodes CDN/SASE share, compressing P/S to ~14× on $2.81B 2026 revenue. - Agentic-AI-first restructuring removes too much sales capacity too fast — large-customer ACV growth stalls below 18% YoY through Q4 2026 as deal cycles slow and the 7-year SASE momentum cools - DBNRR slips further from 118% to 114–116% for two consecutive quarters as enterprises pause SASE expansion amid macro uncertainty and AWS CloudFront + Security Hub bundling displaces Cloudflare's CDN layer at 5%+ of Fortune 500 accounts - Gross margin compresses below 73% as edge infrastructure CapEx to support AI inference workloads exceeds revenue contribution from Workers AI through 2026 - Multiple re-rates to ~14× NTM P/S as growth decelerates toward 24% and FCF margin expansion stalls at 14–15% despite the cost actions ### Base — $250 Cloudflare delivers raised FY2026 guidance ($2.81B, +29–30% YoY; EPS $1.19–1.20) with DBNRR stabilising at 118% and FCF margin expanding toward 18–20% as the agentic-AI-first restructuring delivers the targeted operating leverage by H2 2026. - FY2026 revenue lands at $2.81B with large customers growing 22%+ YoY and RPO sustaining 30%+ growth through contracted multi-year SASE and AI Gateway deals - FCF margin expands to 18–20% by Q4 2026 as the 1,100-person reduction (~$140M annualised cost base) compounds with operating leverage on a 30% revenue base - Workers AI and AI Gateway establish Cloudflare as default edge inference infrastructure for AI agent traffic, contributing $150M+ incremental ARR by year-end 2026 - DBNRR re-anchors at 118–120% by Q4 2026 as the AI-first sales motion displaces seat-based CRM/security workflows with agent-driven upsell ### Bull — $380 AI agent traffic creates a new internet infrastructure cycle — Cloudflare's agentic-AI-first pivot lands the company as the default runtime for autonomous agents, re-accelerating revenue toward 35%+ and pushing FCF margin to 25%+ ahead of schedule. - AI agent traffic on Workers exceeds 20% of Cloudflare's total request volume by end of 2026, driving a new consumption-based revenue layer on top of the subscription base and pushing ARR growth toward 40% - Cloudflare wins 3+ sovereign government cloud contracts in Europe under EU Data Act/NIS-2 compliance, establishing a government revenue stream and locking in decade-long regulatory relationships - SASE displacement of Zscaler at 3–4 Fortune 100 accounts adds >$100M ACV, validating Cloudflare's ability to compete in the largest enterprise security deals - FCF margin reaches 25%+ by Q4 2026 as the AI-first cost base compounds with revenue scale, triggering a re-rating toward 30× NTM P/S on $3.3B+ 2026–27 blended revenue --- InvestMoat is an open-source research and education framework. Nothing here is financial advice. Past performance does not guarantee future results.