One Platform, Two Problems: Cloudflare's New Bundles Attack Connectivity's Real Fault Lines

Cloudflare has spent years building out a portfolio that now spans nearly 100 products across Application Services, Network Services, Zero Trust, and its Developer Platform. That breadth brings capability, but it also brings a familiar complaint from customers: too many point products to choose from, each with its own pricing logic. Cloudflare says the answer is to stop selling products and start selling solutions to the two problems every organization actually has: protecting what faces the public and protecting what lives inside.

To that end, the company is introducing two new use-case bundle families, Externa and Interna, which package its existing technologies into prescriptive, tiered offerings (Essentials, Advantage, and Premier). The goal is to replace the typical patchwork of point solutions—a WAF from one vendor, a DDoS scrubber from another, a VPN from a third—with a single, integrated connectivity and security architecture.

Externa targets the public-facing side of the business: the websites, APIs, applications, and networks that sit at the front door of an organization.
Interna handles the internal, private side: employees, devices, data, and networks that make up the corporate core. The two families are designed to work together.

The Economics of the Front Door

Cloudflare's pitch for Externa is grounded in pricing fairness, particularly around attack traffic. The company criticizes competitors that bill for all traffic, clean or malicious, arguing that charging for DDoS flood volumes is like paying a fire department for the water it uses to save your house. With Externa, customers only pay for legitimate traffic.

The bundle aggregates existing Cloudflare services—WAF, DDoS protection, API security, networking, and application performance—into a package whose units of measure scale with value. Cloudflare highlights three specific design principles:

  • No attack traffic tax: Costs stay predictable even during a sustained DDoS attack.
  • Value-driven pricing units: No fees for origin fetches, no duplicate charges per request, no per-rule pricing.
  • Simplified connectivity: Free private interconnects for on-ramping from any hosting environment.

Because security does not stop at the network perimeter, every Externa package also includes 50 seats of Interna, the company's SASE solution.

A Different Model for the Hybrid Work WAN

Interna is aimed at the broken economics of legacy networking, which Cloudflare argues was built for a world where employees come into an office. In a hybrid work environment, the internal network extends to wherever employees and data reside, yet many vendors still charge for the user seat and again for their office network usage.

Cloudflare's counter-model is to never charge for user bandwidth. The per-seat license covers a user regardless of location, and traffic generated by user device clients is subtracted from the WAN meter. Each user license also contributes to a shared bandwidth pool, meaning the budget an enterprise already spends on security can now help build out its corporate WAN. Key benefits outlined by the company:

  • No user bandwidth charges: A single per-seat price eliminates the hybrid work penalty and shrinks WAN bills.
  • Every license expands WAN capacity: Pooled bandwidth from user licenses can replace expensive, dedicated WAN contracts.
  • Security features included: Digital Experience Monitoring (DEM) and both in-line and API-based Cloud Access Security Broker (CASB) capabilities come standard, rather than as premium add-ons.

The Network as the Unifying Advantage

Cloudflare attributes its ability to offer this integrated model to its underlying infrastructure. Serving a broad customer base—from free-plan developers to large enterprises—on a single global network provides a structural benefit: threat detection models trained on data from roughly 20% of the web offers better detection than siloed platforms can achieve. The same scale, the company argues, allows the bundled platform to scale with a business, offering a path that eliminates the traditional trade-off between outgrowing a point-product mess and outgrowing an integrated platform.

With the tiered structure of the new bundles, Cloudflare is betting that customers will adopt a simpler decision path: choose a family, pick a tier, and move up as the organization grows without re-architecting the security stack.