Cloudflare Enterprise Add-on

Put any domain on Cloudflare Enterprise CDN for $5

Cloudflare sells Enterprise as a negotiated contract starting in the thousands a month. xCloud already holds one — $5 per domain, per month, no contract.

  • No Cloudflare account
  • No nameserver change
  • Cancel any domain, any time
  1. Your visitor

    Anywhere on earth

  2. Cloudflare Enterprise edge

    330+ cities · WAF · DDoS · full-page cache

    • Cache hit → served here
    • Attack → dropped here
  3. Your server

    Managed by xCloud

Every switch on that middle box lives in your xCloud dashboard — no Cloudflare account, no second login

Pricing

Cloudflare Enterprise pricing, flat per domain

One price, the whole suite, on every domain you enable.

Cloudflare Enterprise Add-on

$5/ domain / month

One subscription per domain — subdomains count as their own. Add and remove them individually from the Addons page. Includes 100 GB of bandwidth a month; beyond that it's $0.02/GB, prorated.

No contract and no minimum term. No free trial, and add-ons are non-refundable once activated.

Everything included

  • Cloudflare Enterprise network, 330+ cities
  • Full-page edge caching and static CDN caching
  • Tiered caching across Cloudflare's network
  • Enterprise managed WAF and unmetered DDoS
  • 100 GB bandwidth per month, then $0.02/GB
  • Image optimization, Early Hints, ScrapeShield
  • Traffic, cache and security analytics in-panel
  • One-click worldwide cache purge
  • Per-domain billing — remove a domain any time

The real comparison

Every other way to get Cloudflare Enterprise

Six hosts bundle it free — as long as you move your sites onto their servers. Two sell it per domain. Here is the whole picture, including the three rows where we come off worse.

The xCloud Cloudflare Enterprise add-on compared with Cloudways, hosts that bundle Cloudflare Enterprise into their plans, and buying from Cloudflare directly
FeaturexCloud add-onon servers you ownBundled hostingKinsta, 10Web, Levamo, BigScoots, ConvesioCloudwaysadd-on, on their platformCloudflare directbought from Cloudflare
Runs on your own cloud accountYesTheir platformTheir platformYes
Any stack — WordPress, Laravel, static, PHPYesMostly WordPressWordPress & WooYes
Custom cache bypass paths, per siteYesVariesNoManual rules
Bandwidth included, per domain100 GB, then $0.02/GBPlan limitsQuota, then $0.02/GBYes
Full-page caching at the edgeYesYesWordPress & WooManual rules
Keep your DNS provider and nameserversYesVariesYesNo
DNS set up for you, and restored on cancelYesn/aManual CNAMENo
Switch it off per domain, any timeYesChange hostYesAnnual contract
No separate Cloudflare accountYesYesYesNo
Volume discount$5 flatn/a$4.99Negotiated
Automatic selective cache purgeNoVariesYesVaries
Pricing$5/month per hostname — root and www together — 100 GB included, then $0.02/GB$23–$50/month hosting plan — Cloudflare included only while you host there$4.99/month per hostname — plus $0.02/GB once the bandwidth quota runs out$250/month per domain — add-ons billed separately — Enterprise on annual contract

The xCloud price is the add-on, on top of the plan you already have. Bundled figures are each host's cheapest plan carrying Cloudflare Enterprise, and Cloudflare's are its published month-to-month rates — all checked 4 August 2026, with Cloudways verified in a live account. See cloudflare.com/plans.

How much does Cloudflare Enterprise cost?

Cloudflare doesn't publish an Enterprise price. It's sold as a negotiated annual contract, quoted per organisation on traffic, domain count and which add-on products you want, and entry-level deals are widely reported to start around $5,000 a month. That's the tier this add-on runs on — you're joining xCloud's existing contract as a custom hostname rather than signing one of your own, which is the only reason a per-domain price of $5 is possible.

What about the Free, Pro and Business plans?

Cloudflare's free plan gives you CDN caching for static assets and unmetered DDoS protection, which is genuinely good and enough for many sites. Pro is $25 a month per domain and adds image optimization and a fuller WAF ruleset. Business is $250 a month per domain. Tiered caching is a paid extra on top of all three, and none of them cache full HTML pages at the edge without you writing the rules yourself.

Do I have to move my DNS or nameservers?

No — and this is where the add-on differs from signing up to Cloudflare directly. Their own plans expect you to move your domain's nameservers to Cloudflare and run DNS there. This runs on Cloudflare for SaaS instead: your domain joins xCloud's account as a custom hostname, so your registrar and DNS provider stay exactly where they are and you add one CNAME record.

Is this the same CDN as Cloudflare's free one?

It's the same network, on a higher tier. Free and Enterprise both serve from 330+ cities, but Enterprise adds the managed WAF rulesets, priority routing, tiered caching, and full-page edge caching for WordPress and WooCommerce — the things that move time-to-first-byte rather than just offloading images.

Some hosts include Cloudflare Enterprise free. Why pay $5?

Because free comes with their servers attached. Kinsta, Rocket.net, Levamo, 10Web, Convesio and BigScoots all bundle Cloudflare Enterprise at no line-item cost, and every one of them requires you to host with them to get it — it's a reason to stay, which is what it's designed to be. The xCloud add-on runs on infrastructure you own: your DigitalOcean, AWS, Vultr, Hetzner or Linode account, or a managed xCloud server, whichever you already chose. If you move providers next year the add-on moves with you. $5 a domain is what it costs to not have that decision made for you.

How does this compare to the Cloudways add-on?

Cloudways is the only other host selling Cloudflare Enterprise per domain, at $4.99 falling to $1.99 above 25 domains, and they offer a 30-day trial where we don't. On list price and billing unit the two are effectively the same — both charge per hostname with the root domain and its www counted together, and both meter bandwidth per domain at $0.02 per gigabyte beyond the included quota. What differs is everything around it. We set your DNS up automatically and put it back the way we found it if you cancel, reinstating your previous SSL, where theirs is a manual CNAME both ways. You can add your own cache bypass paths per site; their documentation says custom cookie exclusion is currently unavailable. Their edge page caching is limited to WordPress and WooCommerce, while ours also runs on Laravel, static sites and custom PHP. And ours runs on infrastructure you own rather than on their platform. Where they're ahead: the free trial, the volume pricing, and automatic selective cache purging, which we don't have yet.

What you get

Faster pages, blocked attacks, and one place to see both

The same three things every enterprise CDN promises. Here is the mechanism behind each one, and everything switched on for your $5.

Every feature below runs on Cloudflare's Enterprise tier

Your site loads from the city your visitor is in

Static assets and full HTML pages are served from whichever of Cloudflare's 330+ locations is closest, instead of a round trip to your server. Tiered caching keeps neighbouring data centres sharing what they've already fetched rather than each one asking your origin separately, cutting origin requests by up to 60%.

  • Global CDNContent served from 330+ Cloudflare cities worldwide.
  • Edge page cachingWhole HTML pages cached at the edge, so time-to-first-byte stops depending on your server.
  • Static content cachingImages, CSS and JavaScript across the global CDN with one toggle.
  • Tiered cachingNearby data centres share what they've already fetched instead of each asking your origin.
  • Early Hints (103)Browsers start preloading critical assets before the final response arrives.
  • WooCommerce-aware cachingCarts, checkout and logged-in sessions bypass the cache automatically.

Attacks stop at the edge, not on your server

A security plugin can only act once the request has already reached your origin and spent its CPU. Cloudflare's managed WAF rulesets sit in front of the site and drop OWASP-class attacks, exploit scans and zero-days before they arrive. Volumetric DDoS is absorbed by one of the largest networks on the internet — unmetered, at layers 3, 4 and 7.

  • Enterprise WAFCloudflare-managed rulesets catching emerging threats, including zero-days.
  • Unmetered DDoSVolumetric attacks dropped at the edge at layers 3, 4 and 7 — no surcharge, no cap.
  • Rate limitingManaged challenges for IPs that exceed the request threshold.
  • Browser integrity checkRequests with suspicious or missing HTTP headers are blocked.
  • Under Attack ModeEvery visitor passes an extra check before reaching the site.
  • AI crawler blockingStop known AI crawlers scanning or collecting your content.
  • Managed edge SSLCloudflare edge certificates on every domain, with live status in your domain table.

All of it inside the panel you already use

There is no second dashboard and no Cloudflare account to create. Every toggle, every purge and every report lives in xCloud, next to the server and site they belong to. Traffic, cache performance and security events go back as far as 30 days and as fine as the last 30 minutes — top pages, countries, devices and IPs — and cache purges go out worldwide from the Overview tab.

  • One-click purgePush an update live worldwide from the Overview tab.
  • Traffic analyticsRequests and data transfer from the last 30 minutes to the last 30 days.
  • Cache analyticsSee what's being served from the edge and what still reaches your origin.
  • Security eventsEvery block and challenge, with the top pages, countries, devices and IPs behind them.
  • Image optimizationPolish-style compression — lossy, lossless or off, per site.
  • SSL cipher profilesChoose the cipher suite used between visitors and the edge.
  • ScrapeShieldEmail addresses obfuscated so bots can't harvest them.

Setup

Live in three steps, not a migration

Your DNS provider stays where it is. Your nameservers stay where they are. One record changes.

  1. 01

    Enable the add-on

    In your xCloud dashboard, open Addons, find Cloudflare Enterprise and hit Enable. Pick the domain from the dropdown and pay — $5 for the month, no contract attached to it.

  2. 02

    Add one CNAME record

    xCloud shows you the exact record to add at your existing DNS provider. Your nameservers do not move and your DNS host does not change — the domain joins xCloud's Cloudflare account as a custom hostname.

  3. 03

    Hit refresh, and you're live

    Refresh the domain status; it flips to Active. Sensible defaults are already on, and the Settings tab is there when you want to change caching, WAF or anything else.

A slow or unprotected site never fails loudly. It bleeds.

  • Rankings slip. Search engines rank faster competitors above you, and organic traffic erodes month after month.
  • Conversions leak. Slow pages push up bounce rates and shave the return off every campaign you're already paying for.
  • Attacks arrive unannounced. Bots and exploit scans hit your server daily; without edge protection you find out when it's already down.

Who it's for

Built for every site that can't afford to be slow

  • WooCommerce stores

    Product pages off the edge, carts and checkout dynamic, WAF in front of payments.

  • Agencies & freelancers

    Enable it per client site, at a price you can bill on as a line item.

  • Content & media sites

    Serve heavy pages worldwide from the edge, and block AI crawlers from scraping them.

  • Launch & campaign sites

    Absorb the traffic spike at the edge, so your origin stays calm through launch day.

  • Membership & SaaS

    Rate limiting and Under Attack Mode keep logged-in experiences fast and protected.

  • Global audiences

    Every continent loads from the nearest of 330+ cities, not one distant server.

Social proof

Teams who moved for speed and price

  • I had 150 sites on cloudways and am in the process of moving them to xcloud. Much faster and better priced.
    Dan Spinoza
  • I came from Cloudways and won't go back. Highly impressed with xCloud. Glad I gave them a chance.
    Jared McDowell
  • I went from Cloudways to xCloud. No intention on switching in the foreseeable future.
    Blaine Moore

FAQ

Questions worth asking before you enable it

What exactly is the Cloudflare Enterprise add-on?

A fully managed, per-domain integration that puts your website on Cloudflare's Enterprise network. Enterprise normally means a contract negotiated directly with Cloudflare at volume. xCloud already holds that contract, so you get global CDN acceleration, enterprise WAF and DDoS protection, edge caching, image optimization and real-time analytics for $5 a domain — with no negotiation, no minimum commitment and no Cloudflare account of your own.

Do I need my own Cloudflare account?

No. Cache rules, WAF toggles, purges, analytics and security events are all in your xCloud dashboard. Setup is smoothest if your domain already sits in a Cloudflare account that's connected to xCloud, because the configuration is then applied for you automatically — but that account is only ever used for your DNS records, not for the add-on itself.

How is $5 possible when Cloudflare Business is $250?

Because you're not buying a plan — you're joining one. xCloud holds an Enterprise contract with Cloudflare and the add-on attaches your domain to it as a custom hostname, so the cost is a share of a network already paid for rather than a new subscription. That is also why tiered caching and full-page edge caching are included here, when they're paid extras or hand-written rules on Cloudflare's own Pro and Business plans.

Is there a free trial?

Not at the moment. At $5 per domain with no contract you can enable it, run it on your own site and cancel whenever you want — but it starts billing straight away.

Is the add-on refundable?

No. Like every xCloud add-on, the Cloudflare Enterprise add-on is non-refundable once the subscription is activated. Add-on purchases are final, so check the domain, price and billing details before you subscribe. The full terms are in the xCloud Refund Policy.

Does the price per domain include subdomains?

One subscription covers the root domain and its www version. Other hostnames — shop.example.com, app.example.com, staging.example.com — are separate subscriptions at $5 per hostname per month, so you enable only the ones you need. Manage them together from the Addons page, and remove any single one without touching the rest.

Is bandwidth really unlimited?

Each domain subscription includes 100 GB of bandwidth per month, which covers the vast majority of WordPress sites — full-page edge caching means most requests are served from Cloudflare's edge without touching your server. Usage beyond 100 GB is billed at $0.02/GB, prorated, so a high-traffic site pays transparently for what it uses instead of hitting a hard cap or a forced upgrade. You can monitor your data transfer anytime in the Analytics tab of the addon.

Can I purge the cache from my WordPress dashboard?

You can purge per site from the xCloud dashboard today. A plugin to purge from wp-admin is planned as part of a central xCloud plugin — the purge capability is already built, it just needs wiring into WordPress.

How does rate limiting work, and can I change the threshold?

Rate limiting counts requests per IP in 60-second windows and applies a managed challenge above the threshold, which keeps bots, scrapers and brute-force traffic off your server. The default is 200 requests a minute and we're still tuning it across sites. It isn't a hard Cloudflare cap: if the default doesn't suit your site — a busy store, say — open a support ticket and we'll customise the threshold for your domain. Self-serve control is on the roadmap.

Is there still a 100-second timeout limit?

No. On Enterprise the timeout isn't fixed the way it is on the free plan. We currently run it at 200 seconds and can raise it further per use case — Cloudflare allows up to 6,000. If you have a legitimate long-running process hitting 524 errors, open a support ticket.

Does it work with WordPress and WooCommerce?

Yes, and the caching is aware of both. Full pages are cached at the edge, while edge page caching automatically bypasses logged-in sessions, wp-admin, wp-login, the REST API, WooCommerce and EDD carts, checkout, my-account, feeds and sitemaps — so shoppers never see someone else's basket. You can add your own bypass paths per site in the Cache Bypass Paths setting; anything under them is never cached at the edge and always loads fresh from your server. When you turn on Edge Page Caching, xCloud disables local page caching for that site so the two layers can't conflict.

Can I change the caching and security settings?

Yes. Early Hints, ScrapeShield, static caching, edge page caching, image optimization and the SSL cipher profile are all switchable, as are the WAF, rate limiting, browser integrity check, Under Attack Mode and AI crawler blocking. The defaults are already tuned; save after changing a toggle and xCloud persists it for the site.

What analytics do I get?

Request summary, cache performance and security events, over ranges from the last 30 minutes to the last 30 days, with your top pages, countries, devices and IPs — all in the xCloud dashboard rather than a separate Cloudflare console.

Will this affect my SEO?

It should help. Search engines weigh page speed and availability, and this improves both — pages come off the edge, and the WAF and DDoS mitigation keep the site reachable during attacks that would otherwise take your server, and the crawler, offline.

Stop paying for visitors who leave before the page loads

Enterprise speed and always-on protection on any domain, for $5 a month. One CNAME, live in minutes, and yours to switch off whenever you want.

No contract · Cancel any domain at any time