# Cloudflare: Agentic Web Tollbooth vs Valuation Risk

> A single-company ThesisLoop pass on Cloudflare after its June 2026 Investor Day, focused on AI-agent traffic, Workers, secure sandboxes, VoidZero, Cloudflare One, margin targets, and valuation risk.

**Companies**: Cloudflare, Inc. Class A Common Stock
**Sectors**: Technology
**Published**: 2026-06-11
**Last Updated**: 2026-06-11
**Source**: https://thesisloop.ai/thesis/7a74deae-99d5-4524-9705-5c42ca13abc8

## Score Overview

| Company | Management | Business Model | Future Growth | Risk |
|---------|-----------|---------------|--------------|------|
| Cloudflare, Inc. Class A Common Stock | 70/100 | 71/100 | 61/100 | 73/100 |

## Cloudflare, Inc. Class A Common Stock (NYSE:NET)

**Sector**: Technology | **Industry**: Cybersecurity & Network Infrastructure

### Management Credibility

- The 2025 Capped Calls were successfully settled in May 2025, resulting in a significant cash inflow. (3 met, 1 in progress across 4 tracked commitments) (POSITIVE, MET)
  > We expect the 2025 Capped Calls to settle in May 2025.
- **[CATALYST] Margin Recovery** (NEUTRAL, IN_PROGRESS): The company continues to report GAAP operating losses ($37.5M for Q3) and expects this trend to persist as it prioritizes strategic investments over short-term profitability. (2 in progress across 2 tracked commitments)
  > The Company currently estimates that it will incur charges of between $140 million and $150 million in connection with the Plan, consisting primarily of cash expenditures for notice period, severance payments, employee benefits and related costs of between $105 million and $110 million and non-cash 
- **[METRIC] ARR and RPO** (NEGATIVE, REVISED): Management maintained the target of recognizing 66% of RPO over the next 12 months, consistent with the prior quarter's guidance. (1 met, 2 revised across 3 tracked commitments)
  > As of June 30, 2025, the Company expected to recognize 66% of its remaining performance obligations as revenue over the next 12 months with the remainder recognized thereafter.
- **[METRIC] Gross Margin Mix** (NEUTRAL): Management expects gross margin to remain consistent over the long term despite period-to-period fluctuations. — target: Consistent (+2 more commitments)
  > We expect our gross profit to increase in absolute dollars and our gross margin to remain consistent over the long term, although our gross margin could fluctuate from period to period depending on the interplay of all of these factors.
- **[METRIC] Rule of 40 and FCF** (POSITIVE, MET): Liquidity position significantly strengthened following the issuance of $2.0 billion in convertible notes, increasing total cash and available-for-sale securities to nearly $4.0 billion. (1 exceeded, 2 met across 3 tracked commitments)
  > We believe that our existing cash, cash equivalents, available-for-sale securities, and available capacity under the Revolving Credit Facility will be sufficient to meet our working capital and capital expenditure needs for at least the next 12 months.
- **[PRINCIPLE] Channel and MSSP Leverage** (NEUTRAL): Management is seeking to increase the rate of hiring sales personnel to drive revenue growth.
  > As we continue to focus on revenue growth, we are seeking to increase our rate of hiring sales personnel and any delays in making these incremental sales hires could have an adverse impact on our ability to increase revenue, particularly with respect to our sales to contracted customers.
- **[TREND] AI Security Spend** (NEUTRAL, IN_PROGRESS): Cloudflare continues to invest in its network, specifically highlighting the addition of GPUs to support AI-related developer platform products. (1 in progress across 1 tracked commitment)
  > We intend to continue to make substantial investments in our global network infrastructure to support the growth of our business, including the addition of servers with storage capabilities to support our storage and database products and servers with graphics processing units (GPUs) to support our 

### Business Model

- The U.S. geographic share has slightly contracted from 51% to 49% as international growth outpaces domestic expansion. (1 contracting, 1 expanding, 1 stable) (NEUTRAL, Change: STABLE)
  > United States $ 315,830 [representing] 49 % [of revenue]
- **[METRIC] Enterprise Customer Concentration** (POSITIVE, Change: EXPANDING): Direct customer revenue share has contracted from 81% to 75% of total revenue, despite absolute dollar growth, as the company shifts more volume toward channel partners. (1 contracting, 2 expanding across 1 engine)
  > Direct customers $ 446,795 [representing] 70 % [of revenue]
- **[METRIC] Gross Margin Mix** (NEUTRAL): Cloudflare's massive global network creates a significant cost advantage. By placing equipment directly inside Internet Service Provider (ISP) data centers, they lower their own bandwidth costs while making their service faster for customers.
  > Given the large customer base we have and the immense amount of Internet traffic that we manage, we are able to negotiate mutually beneficial agreements with Internet service providers (ISPs) that allow us to place our equipment directly in their data centers, which drives down our bandwidth and co-
- **[METRIC] Net Retention and Module Attach** (POSITIVE, Change: EXPANDING): The moat is being reinforced by platform consolidation; dollar-based net retention improved to 114%, showing existing customers are integrating more deeply into the 'unified control plane'. (1 expanding)
  > Our dollar-based net retention rates were 114% and 112% for the three months ended June 30, 2025 and June 30, 2024, respectively.
- **[PRINCIPLE] Attack Surface Relevance** (NEUTRAL): Cloudflare's free customer base acts as a powerful network effect. These millions of users help the company spot new security threats instantly, which then allows Cloudflare to update its protection for all paying customers immediately.
  > These free customers expose us to diverse traffic, threats, and problems, often allowing us to see potential security, performance, and reliability issues at the earliest stage. This knowledge allows us to improve our products and deliver more effective solutions to our paying customers.
- **[PRINCIPLE] Channel and MSSP Leverage** (POSITIVE, Change: EXPANDING): Channel partners are expanding their share of the revenue mix, growing from 19% to 25% of total revenue, indicating successful leverage of resellers and system integrators. (2 expanding, 1 contracting across 1 engine)
  > Channel partners $ 192,960 [representing] 30 % [of revenue]
- **[PRINCIPLE] Mission-Critical Renewal Base** (NEUTRAL): The company benefits from high switching costs, particularly with large enterprise customers. Once a company integrates Cloudflare's 'unified control plane' to manage security and performance across their entire digital footprint, it becomes difficult and risky to move to a different provider.
  > Our network serves as a scalable, easy-to-use, unified control plane to deliver security, performance, and reliability across their on-premises, hybrid, cloud, and software-as-a-service (SaaS) applications.
- **[TREND] AI Security Spend** (POSITIVE, Change: EXPANDING): The network effect moat is being actively strengthened through a strategic shift to an 'agentic AI-first' model, leveraging the massive data from the free customer base to train AI models. (1 expanding)
  > These free customers expose us to diverse traffic, threats, and problems, often allowing us to see potential security, performance, and reliability issues at the earliest stage. This knowledge allows us to improve our products and deliver more effective solutions to our paying customers.

### Future Growth

- Morgan Stanley's price target increase to $305 reflects high market expectations for the 2026 AI inference breakout. While bullish, this creates a valuation risk where any slight miss in AI-driven revenue could lead to significant stock volatility. (NEUTRAL)
- **[CATALYST] M&A Consolidation** (NEUTRAL): Cloudflare acquired Replicate to integrate its AI platform, which helps developers run and deploy AI models more easily on the Cloudflare network.
  > On December 1, 2025, the Company acquired all of the outstanding shares of Replicate, a company that has developed an artificial intelligence (AI) platform that enables developers to deploy and run AI models
- **[CATALYST] Margin Recovery** (POSITIVE, Trend: NEW_TREND): Cloudflare has initiated a significant restructuring plan to pivot toward an AI-first operating model, which involves a major reduction in headcount to drive operational efficiency. (1 new trend across 1 signal)
  > On May 7, 2026, the Company announced a plan (the Plan) designed to further accelerate its evolution to an agentic AI-first operating model. As part of the Plan, the Company expects to reduce its current workforce by approximately 20%.
- **[METRIC] Enterprise Customer Concentration** (POSITIVE, Trend: STEADY): Cloudflare is showing steady growth in its large enterprise customer base, which is a key indicator of its ability to penetrate high-value accounts. The number of customers spending over $100,000 annually grew by 33.5% year-over-year. (5 steady across 5 signals)
  > Paying customers (> $100,000 Annualized Revenue) ... 4,416 [as of March 31, 2026] ... 3,527 [as of March 31, 2025]
- **[METRIC] Net Retention and Module Attach** (POSITIVE, Trend: ACCELERATING): The net retention rate, which measures how much existing customers increase their spending, is showing a slight acceleration compared to the previous year, indicating strong platform stickiness. (3 accelerating, 2 decelerating across 5 signals)
  > Our dollar-based net retention rates were 118% and 111% for the three months ended March 31, 2026 and March 31, 2025, respectively.
- **[PRINCIPLE] Attack Surface Relevance** (POSITIVE, Trend: STEADY): Cloudflare continues to expand its physical network footprint to improve service delivery and support new initiatives like AI. The network now spans over 320 cities, up from the previous reporting period, maintaining a steady expansion pace. (1 steady across 1 signal)
  > Our global network, with a presence in more than 320 cities and over 120 countries worldwide, has helped to foster our strong international growth.
- **[PRINCIPLE] Channel and MSSP Leverage** (POSITIVE, Trend: ACCELERATING): Revenue from channel partners (third-party resellers) is accelerating as a percentage of total revenue, growing from 14% to 19% of the total mix. This indicates a successful shift toward a partner-led sales model to reach more customers efficiently. (5 accelerating across 5 signals)
  > Channel partners [Revenue] $192,960 [30% of revenue in 2026] ... $112,555 [23% of revenue in 2025]
- **[TREND] AI Security Spend** (POSITIVE, Trend: STEADY): Cloudflare is maintaining a steady expansion of its global network infrastructure, now reaching over 330 cities, with a specific focus on adding GPU capabilities for AI workloads. (3 steady across 3 signals, 1 leading indicator)
  > We intend to continue to make substantial investments in our global network infrastructure... including the addition of... servers with graphics processing units (GPUs) to support our AI-related developer platform products.
- **[TREND] Vendor Rationalization** (NEUTRAL): The company faces growth headwinds from a slowing global economy, which has caused some customers to take longer to sign contracts or reduce their spending. — Macroeconomic Uncertainty: Slowdown in revenue growth
  > Potentially as a result of these various macroeconomic impacts on our customers, we periodically have experienced lengthening of the average sales cycle... slowdowns in our pipeline... all of which may have contributed to a slowdown in our revenue growth from prior periods

### Risk Assessment

- Governance risk has intensified as the co-founders' voting power has increased to approximately 51.9% as of June 30, 2025, up from the previously identified 49.9%. This grants them absolute majority control over all matters requiring stockholder approval. (3 intensifying) (NEGATIVE, Risk: HIGH)
  > our co-founders together holding approximately 49.9% of the voting power of our capital stock. Because of the ten-to-one voting ratio between our Class B and Class A common stock, the holders of our Class B common stock collectively continue to control a majority of the combined voting power
- **[CATALYST] Major Breach Cycle** (NEGATIVE, Risk: HIGH): The risk remains high and active. The company disclosed a likely nation-state threat actor intrusion in November 2023 and continues to face large-scale DDoS attacks, such as the HTTP/2 vulnerability exploitation in late 2023. Management notes that defending against these evolving threats is becoming increasingly challenging. (2 intensifying, 1 high-severity)
  > In November 2023, we detected that a likely nation-state threat actor had gained unauthorized access to one of our internal systems... we expect we will continue to be subject to similar threats of unauthorized access in the future
- **[CATALYST] Margin Recovery** (NEGATIVE): The risk has moved from a general forward-looking statement to a concrete execution plan. On May 7, 2026, the company officially announced a 20% workforce reduction and expects to incur up to $150 million in restructuring charges, primarily in Q2 2026. (1 intensifying)
  > On May 7, 2026, the Company announced a plan (the Plan) designed to further accelerate its evolution to an agentic AI-first operating model. As part of the Plan, the Company expects to reduce its current workforce by approximately 20%. The Company currently estimates that it will incur charges of be
- **[METRIC] ARR and RPO** (NEGATIVE): The debt burden has intensified significantly following the issuance of $2.0 billion in new 2030 convertible notes in June 2025. Total convertible senior notes, net, rose from $1.29 billion at year-end 2024 to $3.26 billion as of June 30, 2025. While the 2025 notes were settled, the 2026 notes ($1.29 billion) remain a near-term maturity risk. (2 intensifying)
  > Convertible senior notes, net [as of June 30, 2025]: 3,260,506... [as of December 31, 2024]: 1,287,321
- **[METRIC] Enterprise Customer Concentration** (NEUTRAL, Risk: MODERATE): The demand environment for large customers shows signs of stabilization but remains a challenge. The number of large customers (> $100k Annualized Revenue) grew to 3,712 from 3,046 year-over-year. However, management continues to report periodic lengthening of sales cycles and increased scrutiny on budgets. (2 stable, 1 easing, 1 intensifying)
  > we periodically have experienced lengthening of the average sales cycle for certain types of customers and sales... slowdowns in our pipeline of potential new customers and in the rate of converting sales pipeline opportunities into new sales
- **[METRIC] Gross Margin Mix** (NEGATIVE, Risk: HIGH): Gross margin remains under pressure, stabilizing at 75% for the quarter compared to 78% in the prior year period. The decline is driven by increased depreciation from server acquisitions and higher network traffic costs. Cost of revenue grew 45% year-over-year, outpacing the 28% revenue growth. (1 stable, 2 easing, 1 intensifying, 1 high-severity)
  > Gross margin decreased to 71% from 76%, for the three months ended March 31, 2026, compared to the three months ended March 31, 2025. The decrease in gross margin was primarily due to the increases in costs mentioned above.
- **[METRIC] Net Retention and Module Attach** (POSITIVE): The risk is easing as large customer growth remains robust. The count of customers paying >$100k increased from 3,497 to 4,298 (up 23%), and the Dollar-Based Net Retention Rate improved to 120% from 111% in the prior year. (1 easing)
  > Our dollar-based net retention rates were 120%, 111%, and 115% for the three months ended December 31, 2025, 2024, and 2023, respectively.
- **[METRIC] Rule of 40 and FCF** (NEGATIVE, Risk: HIGH): The risk is stable but remains high as the 2026 Notes are now classified as a current liability, meaning they are due within one year. The company issued $2 billion in new 2030 Notes to bolster liquidity, but the immediate obligation for the 2026 series persists. (1 stable, 1 high-severity)
  > As of March 31, 2026, the Company classified the net carrying value of the 2026 Notes of $1,292.3 million as current portion of convertible senior notes, net.
- **[PRINCIPLE] Hardware-Software Mix** (NEGATIVE): The risk is stable but remains a concern as the company shifts toward AI. Management notes that while previous global shortages (2021-2022) have eased, future supply constraints for GPUs and other electronics could disrupt the build-out of AI-related developer platforms. (2 stable, 2 intensifying)
  > This global shortage disrupted and increased the cost... of some of our expected purchases of network equipment and servers.
- **[TREND] AI Security Spend** (NEGATIVE, Risk: HIGH): Cloudflare is undergoing a major restructuring to shift toward an AI-first business model, which includes cutting its workforce by approximately 20%. This transition could disrupt operations, hurt employee morale, and fail to deliver the expected cost savings or productivity gains. [EXECUTION]
  > On May 7, 2026, the Company announced a plan (the Plan) designed to further accelerate its evolution to an agentic AI-first operating model. As part of the Plan, the Company expects to reduce its current workforce by approximately 20%. The Company currently estimates that it will incur charges of be
- **[TREND] Cyber Disclosure Regulation** (NEGATIVE, Risk: HIGH): Regulatory risk is intensifying with the implementation of new frameworks like the EU's NIS2 and Digital Operational Resiliency Act (effective January 2025). Additionally, the U.S. enacted the PADFA and a new DOJ final rule in April 2025 restricting data transfers to 'countries of concern,' increasing compliance complexity. (5 intensifying)
  > the EU’s General Data Protection Regulation (GDPR) imposes stringent data protection requirements and provides for penalties for noncompliance of up to the greater of €20 million or four percent of worldwide annual revenues.
- **[TREND] Vendor Rationalization** (NEUTRAL, Risk: MODERATE): The company faces intense competition from massive public cloud providers and specialized security vendors. These competitors often have much larger budgets and can bundle products for free or at a loss to steal market share. [COMPETITIVE]
  > Our potential competitors include large companies with substantial infrastructure, such as global telecommunications services provider partners and public cloud providers... some of our larger competitors have substantially broader and more diverse product and services offerings, which may allow the

### Scenario Analysis

- The shift in the Fed rate cycle directly impacts Cloudflare through increased equity discount rates and a $26 million sensitivity in its investment portfolio. These first-order effects cascade into second-order revenue headwinds as tighter credit markets lengthen sales cycles and slow growth to 34%, forcing a transition from growth-at-all-costs to margin preservation. Ultimately, this culminates in a third-order structural risk where the company must navigate a $1.29 billion debt maturity in 2026, potentially forcing a dilutive or high-cost refinancing that resets its long-term valuation floor. (NEGATIVE)
  > In addition, general tightening in the credit market, lower levels of liquidity, increases in rates of default and bankruptcy, and significant volatility in equity and fixed-income markets could all negatively impact our customers’ purchasing decisions. Potentially as a result of these various macro
- The massive surge in hyperscaler capex and AI model deployment (First Order) drives demand for Cloudflare’s edge-based GPU infrastructure, allowing developers to run inference closer to users. This creates a second-order opportunity where Cloudflare gains pricing power through AI-native software tools and developer platforms like Replicate, offsetting the risk of budget consolidation in legacy seat-based security tools. Ultimately, this shifts Cloudflare from a website protector to a strategic compute moat (Third Order), where its ability to provide cross-cloud interoperability prevents proprietary model lock-in by the 'Big Three' cloud providers. (POSITIVE)
  > For example, we expect significant component shortages that may impact our server supply chain during the current year... driven by factors such as the reallocation of manufacturing capacity to support artificial intelligence infrastructure and increased demand from hyperscale data center operators
- Direct tariffs on imported network equipment increase Cloudflare's capital expenditure requirements for its global edge network, forcing a costly shift in supply chain sourcing. These rising input costs, combined with export controls, restrict the company's ability to expand into high-growth regions like China, leading to a second-order effect of lengthened sales cycles and customer churn as global trade friction dampens corporate spending. Ultimately, this shifts Cloudflare's valuation from a pure growth story to one where policy visibility and geopolitical risk in its integrated global network become primary valuation inputs. (NEGATIVE)
  > The United States government has implemented, or threatened to implement, tariffs on some or all of the goods imported into the United States from a number of other countries around the world. We purchase a portion of the equipment that we use to operate our network from suppliers located outside th

---
*Generated by [ThesisLoop](https://thesisloop.ai) — AI investment research for US equities.*