Global Tool Radar

Security & Privacy / Email Security Software

Cloudflare Email Security Review, Pricing, Pros & Cons

Cloudflare Email Security, formerly Area 1, is Cloudflare's current email threat-protection product. Its three annual, sales-quoted packages combine AI and threat-intelligence detection with inline or post-delivery controls, while higher packages add API remediation, link and attachment isolation, outbound DLP, longer retention, SOC integrations, and optional PhishGuard-managed operations through the top edition.

Research by Global Tool Radar Research SystemEvidence checked: Aug 12, 2026AI-assisted · No Global Tool Radar hands-on testView research methodology
Visit product websiteChoose similar tools to compare

Buying snapshot

Quick buying snapshot

A compact view of who this tool fits, what it costs, and what to confirm before choosing it.

Best for
  • The mail environment needs flexible pre-delivery or post-delivery protection: Cloudflare supports MX/Inline for all providers and package-dependent API, BCC, journaling, and mixed approaches across Microsoft 365, Google Workspace, and other cloud or on-premises mail systems.
  • BEC, impersonation, account compromise, malicious links, QR codes, and attachments are priority threats: The product combines sender, behavioral, conversation, relationship, content, link, attachment, and threat-intelligence signals, with advanced identity and isolation functions in the Enterprise packages.
More buying conditions
  • The security team wants human-managed email investigation and response: Enterprise + PhishGuard combines the Enterprise controls with analyst review, managed retractions, threat hunting, fraud and insider-threat work, custom detections, reports, and dedicated resources.
Not for
  • Procurement requires public numeric prices or self-service monthly buying: Cloudflare publishes annual-contract packaging and the user or inbox pricing basis but requires an expert-led sales process for the amount and does not publish a monthly self-service Email Security offer.
  • The buyer expects API deployment, isolation, DLP, long retention, or SOC APIs in the entry package: Advantage omits API and mixed deployment, employee-account-compromise detection, link and attachment isolation, outbound DLP, one-year retention, SOC integration, and targeted API retractions.
More buying conditions
  • The purchase must make full web isolation, Gateway, DMARC management, or broad SASE controls part of every email package: Email link isolation is package-dependent, full Gateway and Browser Isolation actions require separate purchases, DMARC Management belongs to Cloudflare DNS, and SASE services are broader solution packages.
Pricing
  • Three sales-quoted annual-contract editions priced by number of email users or inboxes. Advantage is restricted to organizations with fewer than 5,000 employees; Enterprise adds advanced deployment, isolation, DLP, retention, and SOC capabilities; Enterprise + PhishGuard adds managed email security operations.
  • Advantage · Requires quote · per email user/inbox · custom quote · one-year commitment · organizations with fewer than 5,000 employees
Free or trial access
  • No permanent free Email Security plan or current full-product time-limited trial is publicly stated. A free Retro Scan, requiring no license, analyzes up to 14 days of email in a Microsoft 365 mailbox and produces an assessment report; it is not a plan and does not provide ongoing protection.

Product scope

Product functionality and purchase scope

This profile evaluates the current product historically known as Cloudflare Area 1 Email Security under its active Cloudflare Email Security name. The exact target comprises the Advantage, Enterprise, and Enterprise + PhishGuard annual-contract packages and their package-bound email protection, response, integration, and managed-service capabilities.

Product checked: Aug 12, 2026

Functionality reviewed
  • Advantage package with MX/Inline, BCC, or journaling deployment; email hygiene; sender authentication checks; impersonation and vendor-account-compromise protection; link and QR-code analysis; attachment analysis; reporting; 90-day retention; directory and SSO integrations; submissions; and two API CASB integrations
  • Enterprise package with Advantage capabilities plus API and mixed deployment, employee-account-compromise detection, email link and attachment isolation, Microsoft 365 outbound DLP, executive reporting, one-year retention, SOC workflow integration, and targeted API retractions
  • Enterprise + PhishGuard package with Enterprise capabilities plus managed email detections and retractions, fraud and insider-threat response, threat hunting, custom campaign and IOC reporting, custom rules, and dedicated technical resources
  • Inline pre-delivery and API, BCC, or journaling post-delivery deployment across supported Microsoft 365, Google Workspace, cloud, and on-premises mail environments
  • Cloudflare Email Security dashboard, investigation, message search, quarantine, move, reclassification, API, and orchestration functions that are supported by the purchased package and deployment mode
Non-target functionality excluded from scoring
  • Area 1 as a separate current product, plan ladder, dashboard, or support route; Email Security is the current Cloudflare product name and dashboard location
  • Cloudflare One, SASE, SSE, Zero Trust, and solution packages as duplicate Email Security plans
  • Cloudflare Gateway and full Remote Browser Isolation policy, web-traffic, and user-interaction controls beyond package-bound email link and attachment isolation
  • Cloudflare DMARC Management and Cloudflare DNS as included standalone Email Security products; package DMARC visibility and reporting is conditional on DNS Service
  • Cloudflare Data Loss Prevention for web and SaaS traffic beyond package-bound Microsoft 365 outbound email DLP
  • Free Retro Scan as a permanent plan, paid plan, trial plan, purchase path, or priced offer
  • Standalone professional services, general Cloudflare Global Services, deployment consulting, and support packages
  • Older Pay-per-Phish pricing, historical 30-day trial claims, discontinued Area 1 branding, and commercial terms not confirmed by current sources
Purchase paths

Pricing checked: Aug 12, 2026

  • Cloudflare One SASE, SSE, or Zero Trust solution packages: Cloudflare offers broader solution packages that can combine Email Security with SASE or SSE services. They are separate bundled purchases, not additional Email Security editions, and no bundle amount or entitlement is duplicated here.

Pricing plans

Cloudflare Email Security pricing table

Pricing checked: Aug 12, 2026

Official factConfidence 98%3 linked sources

Cloudflare publishes three current Email Security packages but no numeric price. The official matrix explicitly states an annual contract priced by the number of email users or inboxes, which establishes a one-year commitment and the priced unit but not payment timing, currency, minimum quantity, renewal behavior, or a rate denominator. Buyers must talk to Cloudflare for an amount. Cloudflare One solution packages are broader bundles and are retained only as a related route without duplicate Email Security offers.

Official pricing page
PlanPriceKey differencesBest for
AdvantageCloudflare Email Security AdvantageSupporting pricing evidence
  • Requires quote · per email user/inbox · custom quote · one-year commitment · organizations with fewer than 5,000 employees
  • MX/Inline, BCC, and journaling deployment: Pre-delivery inline or post-delivery copy-based deployment; API and mixed deployment are excluded.
  • Detection metrics and report retention: 90 days.
  • API CASB integrations: 2 API integrations; Examples include Microsoft 365 and Google Workspace.
Organizations with fewer than 5,000 employees that can use MX/Inline, BCC, or journaling and need core phishing, BEC, spoofing, spam, malicious-link, QR-code, attachment, submission, and reporting controls without API or mixed deployment.
EnterpriseCloudflare Email Security EnterpriseSupporting pricing evidence
  • Requires quote · per email user/inbox · custom quote · one-year commitment
  • Detection metrics and report retention: 1 years.
Enterprise security teams needing API or mixed deployment, employee-account-compromise detection, link and attachment isolation, Microsoft 365 outbound DLP, one-year reporting retention, SOC integrations, and targeted post-delivery retractions.
Enterprise + PhishGuardCloudflare Email Security Enterprise + PhishGuardSupporting pricing evidence
  • Requires quote · per email user/inbox · custom quote · one-year commitment
—Enterprises that need the Enterprise technology package plus analyst-led submissions, managed detections and retractions, threat hunting, fraud and insider-threat response, custom detections, campaign reporting, and dedicated technical resources.

Plan upgrade triggers

Verified plan boundaries that can change the required edition.

Advantage Enterprise

The organization needs API or mixed deployment, employee-account-compromise detection, email link or attachment isolation, Microsoft 365 outbound DLP, one-year retention, SOC workflow integration, targeted API retractions, or eligibility beyond the Advantage employee-size limit.

Supporting pricing evidence
Enterprise Enterprise + PhishGuard

The organization needs Cloudflare analysts to review submissions, manage detections and retractions, hunt threats, respond to fraud and insider-risk events, create custom campaign or IOC reports and rules, or provide dedicated technical resources.

Supporting pricing evidence
What is included, connected, or sold separately

Product scope

What is included, connected, or sold separately

Material capabilities are separated by their verified relationship to the target product.

Phishing, BEC, spam, spoofing, link, QR-code, and attachment defenseIncluded capability

All packages include core hygiene, impersonation, vendor-account-compromise, deep and on-demand link analysis including QR codes, and ML attachment analysis.

Plan: Advantage: Included · Enterprise: Included · Enterprise + PhishGuard: Included
Official source
Two API CASB integrationsIncluded capability

The matrix gives Microsoft 365 and Google Workspace as examples and includes two integrations in each package.

Plan: Advantage: Included · Enterprise: Included · Enterprise + PhishGuard: IncludedCloudflare CASB
Official source
Domain-level DMARC source tracking and reportingNative integration

Email Security performs sender-authentication checks. DMARC visibility and reporting is marked as included with DNS Service, and Cloudflare documents DMARC Management as a Cloudflare DNS capability related to Email Security.

Cloudflare DMARC Management with Cloudflare DNS
Official source
API and mixed inline plus API deploymentPlan-dependent capability

Advantage retains MX/Inline, BCC, and journaling but not API or mixed deployment.

Plan: Advantage: Unavailable · Enterprise: Included · Enterprise + PhishGuard: Included
Official source
Email link and attachment isolationPlan-dependent capability

The higher Email Security packages include email-specific isolation. Separately purchased Gateway and Browser Isolation enable additional browsing actions and policies.

Plan: Advantage: Unavailable · Enterprise: Included · Enterprise + PhishGuard: IncludedCloudflare Browser Isolation
Official source
Employee account-compromise detectionPlan-dependent capability

Vendor account-compromise protection is included in all packages; employee account-compromise detection begins with Enterprise.

Plan: Advantage: Unavailable · Enterprise: Included · Enterprise + PhishGuard: Included
Official source
Microsoft 365 outbound email DLP notifications and blockingPlan-dependent capability

The included scope is outbound email in Microsoft 365. Broader web and SaaS DLP remains outside this exact feature.

Plan: Advantage: Unavailable · Enterprise: Included · Enterprise + PhishGuard: IncludedCloudflare Data Loss Prevention
Official source
One-year detection metrics and report retentionPlan-dependent capability

Advantage includes 90-day retention rather than one-year retention.

Plan: Advantage: Unavailable · Enterprise: Included · Enterprise + PhishGuard: Included
Official source
PhishGuard analyst-led email detection, hunting, and responsePlan-dependent capability

PhishGuard is human-managed and post-delivery, with mandatory auto-moves. It is included through the named top package, not duplicated as another plan.

Plan: Advantage: Unavailable · Enterprise: Unavailable · Enterprise + PhishGuard: IncludedPhishGuard
Official source
SOC APIs, orchestration, and targeted post-delivery retractionsPlan-dependent capability

Advantage includes submissions and reporting but not the higher-tier SOC workflow and automated targeted API-retraction rows.

Plan: Advantage: Unavailable · Enterprise: Included · Enterprise + PhishGuard: Included
Official source
Full Gateway and Browser Isolation policies and interaction controlsSeparate product

Email Security can open suspicious links in isolation, and Enterprise packages include email link isolation. The docs explicitly require purchased Gateway and Browser Isolation for additional actions.

Cloudflare Gateway and Cloudflare Browser Isolation
Official source
How the score is calculated

Scoring method

How the score is calculated

The score uses the category-specific buying dimensions below and their displayed weights.

This page is based on public product information, official sources, structured feature data, and multi-model AI evaluation. It is not a hands-on lab test unless explicitly stated. Confidence percentages describe our research indicators, not the probability that a claim is true or a measured accuracy rate.

Evidence confidence
85%
AI claim confidence
99%
Required-field evidence status
100%
Evidence freshness
54%
Field traceability
100%
Model agreement
90%
Why this confidence level
  • Evidence confidence uses source level and claim-to-source support; AI claim confidence is shown separately.
  • Required-field evidence status measures whether weighted required claims have evidence links; it does not mean every product behavior was independently verified.
  • 8 of 8 weighted claims have evidence links.
  • 1 A1 documentary official sources and 9 A2 official product sources are linked.
  • 1 independent review sources are retained, including 0 professional sources with an explicit hands-on method.
  • 4 weighted claims are past the review window.
  • No blocking evidence conflict was identified.
Threat protection efficacy20%
87

Utilizes multi-layered AI, expert rules, and active threat intelligence, though the platform's overall threat mitigation scope is optimized on the Enterprise plans.

Detection accuracy17%
83

Uses Email Detection Fingerprint campaign analysis and behavioral patterns to minimize false positives, with PhishGuard adding manual analyst verification at the top tier.

BEC and identity protection15%
86

BEC, impersonation, vendor fraud, and spoofing protections are core, and employee-account-compromise detection is available on Enterprise, aligning identity-centric fraud controls with higher editions.

Response operations14%
85

Enables automated orchestration and CSV exports, while full SOC integration and targeted API retractions require an upgrade to the Enterprise plan.

Platform coverage and deployment13%
80

MX/inline, BCC, and journaling are included on Advantage for eligible organizations, with API and mixed deployment plus regional processing in the US, Germany, India, and Australia extending coverage on Enterprise tiers.

Governance and integrations11%
75

Features regional processing options across four global locations, but limits the entry plan to 90 days of retention and exactly 2 API CASB integrations.

Support and total cost10%
55

Pricing is custom-quote only under a one-year user-or-inbox commitment with no public amount, currency, payment schedule, or minimum quantity, so total cost and support packaging remain opaque until a sales engagement and may rise materially when Enterprise or PhishGuard capabilities are required.

Public review signals

Exact-product Gartner coverage is favorable; other large aggregates blend Cloudflare One

The exact Cloudflare Cloud Email Security profile on Gartner Peer Insights is favorable and includes comments about deployment, filtering, investigation, and remediation. Recurring cautions include initial setup and tuning effort, reporting or value-quantification gaps, and limited public pricing transparency.

Public review signals updated: Aug 12, 2026

Commonly reported strengths

  • Phishing, impersonation, and malicious-message detection
  • Deployment flexibility and straightforward administration after setup
  • Message investigation and post-delivery remediation

Commonly reported concerns

  • Initial configuration and tuning can require effort
  • Reporting and value quantification can need improvement
  • Public pricing and edition-specific review isolation are limited
Gartner Peer Insights4.1/5
Rating count
126 ratings
Source context
Cloudflare Cloud Email Security ratings on Gartner Peer InsightsExact product
View sourceHistory baseline established: Aug 12, 2026
Score80
Pricing modelThree sales-quoted annual-contract editions priced by number of email users or inboxes. Advantage is restricted to organizations with fewer than 5,000 employees; Enterprise adds advanced deployment, isolation, DLP, retention, and SOC capabilities; Enterprise + PhishGuard adds managed email security operations.
Use caseprotect business inboxes from phishing, BEC, malware, malicious links, account compromise, and email fraud with inline, API, or mixed deployment
Company sizeEnterprise, Mid-market
Structured tags

Cloudflare Email Security tag profile

Company size
  • Enterprise
  • Mid-market
Key features

Cloudflare Email Security core capabilities

  • AI, threat intelligence, expert rules, sender reputation, behavioral analysis, conversation context, and Email Detection Fingerprint campaign analysis
  • Protection against phishing, BEC, impersonation, vendor fraud, compromised accounts, spam, spoofing, bulk mail, malware, malicious links, attachments, and QR-code attacks
  • MX/Inline, API, BCC, journaling, and mixed deployment with provider-specific pre-delivery or post-delivery response options
  • Message investigation, search, similar-email discovery, quarantine, bulk move, reclassification, reporting, CSV export, APIs, and orchestration
  • Enterprise email link and attachment isolation, Microsoft 365 outbound DLP, targeted API retractions, and one-year detection retention
  • Enterprise + PhishGuard analyst review, managed retractions, threat hunting, fraud and insider-threat response, custom rules, and dedicated resources
Detailed strengths and purchase cautions
Pros

Why it is worth considering

  • Detection combines AI, threat intelligence, expert rules, sender reputation, behavioral analysis, conversation context, and campaign fingerprinting against phishing, BEC, impersonation, vendor fraud, spam, spoofing, malware, malicious links, attachments, and QR-code attacks.
  • Deployment choices include pre-delivery MX/inline and post-delivery BCC or journaling on Advantage, with API and mixed modes plus targeted post-delivery retractions available on Enterprise.
  • Operators can investigate messages, search similar email, quarantine, bulk-move, reclassify, export CSV, and use APIs and orchestration, with Enterprise adding one-year detection retention and Enterprise + PhishGuard adding analyst-led hunting and managed retractions.
  • Enterprise editions add email link and attachment isolation plus Microsoft 365 outbound DLP, and MX/inline or BCC/journaling traffic can be processed in the US, Germany, India, or Australia.
Cons

What to confirm before buying

  • All three packages require a sales quote under a one-year commitment priced by email users or inboxes, with no public amount, currency, payment timing, minimum quantity, or renewal terms stated.
  • Advantage is limited to organizations with fewer than 5,000 employees and excludes API and mixed deployment, email isolation, outbound DLP, one-year retention, SOC integrations, and employee-account-compromise detection.
  • Post-delivery modes act only after inbox delivery and depend on correct API scopes or BCC/journaling setup, while PhishGuard managed moves operate post-delivery and need review against change-control and mailbox-governance rules.
  • Package-bound outbound DLP is documented for Microsoft 365 only, and full Gateway, Browser Isolation, Cloudflare DMARC Management, and broader Cloudflare One functions sit outside the Email Security ladder.
Cross-model buying perspectives

Multi-AI review

Cross-model buying perspectives

Multiple AI models assess this tool against the same buying criteria, so you can compare scores, confidence, fit, cautions, and final views.

AI assessment updated: Sep 22, 2026

Score comparisonGPTGeminixAIRange
Threat protection efficacy9185856
Detection accuracy88847810
BEC and identity protection92808612
Response operations8983827
Platform coverage and deployment8475819
Governance and integrations7874735
Support and total cost45685223
email phishing bec detection9385888
email malware url protection9088846
email policy quarantine control8380803
email incident response workflow8682834
email delivery user experience7478744
Where models differ
  • Support and total cost: 45–68 (23-point range)
  • BEC and identity protection: 80–92 (12-point range)
  • Detection accuracy: 78–88 (10-point range)
GPTAI-assisted buyer perspective83

Cloudflare Email Security fits buyers that want sales-quoted, annual email threat protection with flexible deployment across MX/inline, BCC, journaling, API, and mixed modes, plus stronger response and isolation options in higher editions. The main tradeoff is that Advantage is limited to organizations with fewer than 5,000 employees and does not include several advanced response, isolation, DLP, retention, and SOC functions that appear in Enterprise or Enterprise + PhishGuard.

Review confidence
83/100
Model details
Strengths
  • The product combines AI, threat intelligence, expert rules, sender reputation, behavioral analysis, conversation context, and campaign analysis to cover phishing, BEC, impersonation, vendor fraud, compromised accounts, spam, spoofing, bulk mail, malware, malicious links, attachments, and QR-code attacks.
  • The edition ladder supports multiple deployment patterns, including MX/inline, API, BCC, journaling, and mixed deployment, which lets buyers align the control point with their mail architecture.
  • Higher editions add message investigation, quarantine, bulk move, reclassification, reporting, CSV export, APIs, orchestration, link and attachment isolation, Microsoft 365 outbound DLP, targeted retractions, and longer retention for security operations use cases.
Cautions
  • The package ladder is sales-quoted and annual, and the supplied facts do not state a public amount, currency, payment schedule, minimum quantity, or renewal rule, so procurement teams must validate commercial terms in the quote.
  • Advantage is limited to organizations with fewer than 5,000 employees and excludes API or mixed deployment, employee-account-compromise detection, link and attachment isolation, outbound DLP, one-year retention, and SOC functions.
  • Cloudflare states outbound DLP for the package as a Microsoft 365 workflow, so buyers on other mail environments should confirm whether their deployment can use that specific control.
GeminiAI-assisted buyer perspective80

A sales-quoted, user-based email security solution offering three tiers of threat protection, spanning automated inline blockages to analyst-managed operations, where buyers must evaluate the deployment restrictions of the entry-level plan and the platform-specific limits of its outbound data loss prevention.

Review confidence
80/100
Model details
Strengths
  • Combines AI, threat intelligence, behavioral analysis, and campaign fingerprinting to identify phishing, BEC, spoofing, and malicious attachments.
  • Supports flexible deployment options on higher tiers, including inline, API, BCC, journaling, or mixed configurations.
  • Reduces security team workload through the Enterprise + PhishGuard tier, which provides analyst-led threat hunting, custom rules, and managed retractions.
  • Assists with local compliance by offering regional processing for inline or journaling traffic in the United States, Germany, India, and Australia.
Cautions
  • The entry-level Advantage plan is restricted to organizations with fewer than 5,000 employees and excludes API deployment, mixed setups, and account-compromise detection.
  • Standard pricing, renewal rules, and user minimums are entirely unlisted, and the only free option is a 14-day Retro Scan report rather than a continuous trial plan.
  • Outbound Data Loss Prevention is documented exclusively for Microsoft 365, limiting the capability for organizations on Google Workspace or on-premises systems.
  • Full browser and gateway isolation require separate Cloudflare One products, as the included link isolation functions do not cover broad web security.
xAIAI-assisted buyer perspective79

Cloudflare Email Security fits mid-market and enterprise buyers that need AI- and intelligence-driven phishing, BEC, malware, and link protection with MX/inline, BCC, journaling, or higher-tier API deployment, provided they accept annual user-or-inbox quoted contracts and plan upgrades for isolation, longer retention, outbound Microsoft 365 DLP, and managed response.

Review confidence
79/100
Model details
Strengths
  • Detection combines AI, threat intelligence, expert rules, sender reputation, behavioral analysis, conversation context, and campaign fingerprinting against phishing, BEC, impersonation, vendor fraud, spam, spoofing, malware, malicious links, attachments, and QR-code attacks.
  • Deployment choices include pre-delivery MX/inline and post-delivery BCC or journaling on Advantage, with API and mixed modes plus targeted post-delivery retractions available on Enterprise.
  • Operators can investigate messages, search similar email, quarantine, bulk-move, reclassify, export CSV, and use APIs and orchestration, with Enterprise adding one-year detection retention and Enterprise + PhishGuard adding analyst-led hunting and managed retractions.
  • Enterprise editions add email link and attachment isolation plus Microsoft 365 outbound DLP, and MX/inline or BCC/journaling traffic can be processed in the US, Germany, India, or Australia.
Cautions
  • All three packages require a sales quote under a one-year commitment priced by email users or inboxes, with no public amount, currency, payment timing, minimum quantity, or renewal terms stated.
  • Advantage is limited to organizations with fewer than 5,000 employees and excludes API and mixed deployment, email isolation, outbound DLP, one-year retention, SOC integrations, and employee-account-compromise detection.
  • Post-delivery modes act only after inbox delivery and depend on correct API scopes or BCC/journaling setup, while PhishGuard managed moves operate post-delivery and need review against change-control and mailbox-governance rules.
  • Package-bound outbound DLP is documented for Microsoft 365 only, and full Gateway, Browser Isolation, Cloudflare DMARC Management, and broader Cloudflare One functions sit outside the Email Security ladder.

Research transparency

How this page was researched

A compact record of the evidence used, what was not tested, and which conclusions still need verification.

Official sources
10
Broad product review sources
1
Marketplace and app-store sources
0
Editorial sources
0
Latest evidence check
Aug 12, 2026
Research basis

Global Tool Radar generated this assessment from structured facts linked to public sources. No Global Tool Radar hands-on test is recorded in this page's research data. Any external hands-on assessment is identified separately and does not affect the Global Tool Radar score.

Conflict handling

No unresolved evidence conflict is currently recorded.

View research methodology
Verified findingsNo permanent free Email Security plan or current full-product time-limited trial is publicly stated. A free Retro Scan, requiring no license, analyzes up to 14 days of email in a Microsoft 365 mailbox and produces an assessment report; it is not a plan and does not provide ongoing protection.
  • Three sales-quoted annual-contract editions priced by number of email users or inboxes. Advantage is restricted to organizations with fewer than 5,000 employees; Enterprise adds advanced deployment, isolation, DLP, retention, and SOC capabilities; Enterprise + PhishGuard adds managed email security operations.
  • AI, threat intelligence, expert rules, sender reputation, behavioral analysis, conversation context, and Email Detection Fingerprint campaign analysis Protection against phishing, BEC, impersonation, vendor fraud, compromised accounts, spam, spoofing, bulk mail, malware, malicious links, attachments, and QR-code attacks MX/Inline, API, BCC, journaling, and mixed deployment with provider-specific pre-delivery or post-delivery response options Message investigation, search, similar-email discovery, quarantine, bulk move, reclassification, reporting, CSV export, APIs, and orchestration Enterprise email link and attachment isolation, Microsoft 365 outbound DLP, targeted API retractions, and one-year detection retention Enterprise + PhishGuard analyst review, managed retractions, threat hunting, fraud and insider-threat response, custom rules, and dedicated resources Regional processing for MX/Inline or BCC/Journaling traffic in the US, Germany, India, and Australia
  • Requires quote
  • Cloudflare publishes three current Email Security packages but no numeric price. The official matrix explicitly states an annual contract priced by the number of email users or inboxes, which establishes a one-year commitment and the priced unit but not payment timing, currency, minimum quantity, renewal behavior, or a rate denominator. Buyers must talk to Cloudflare for an amount. Cloudflare One solution packages are broader bundles and are retained only as a related route without duplicate Email Security offers.
Verification notes and unresolved itemsThe canonical current name is Cloudflare Email Security
  • Area 1 is retained only as product history and the requested slug.
  • The active product page links the August 2025 package matrix, and 2026 changelog entries confirm Advantage, Enterprise, and Enterprise + PhishGuard remain the current package names.
  • Each package is represented once as a quote plan.
  • The explicit annual-contract statement supports a one-year commitment and duration
Sources checked

Sources checked

Cloudflare Email Security source links

Regional processingCloudflare DocsLevel A2Linked to 0 scored claimsChecked Aug 12, 2026
Search emailCloudflare DocsLevel A2Linked to 1 scored claimChecked Aug 12, 2026
Cloudflare DMARC ManagementCloudflare DocsLevel A2Linked to 1 scored claimChecked Aug 12, 2026
PhishGuardCloudflare DocsLevel A2Linked to 1 scored claimChecked Aug 12, 2026
Retro ScanCloudflare DocsLevel A2Linked to 0 scored claimsChecked Aug 12, 2026
Before you beginCloudflare DocsLevel A2Linked to 1 scored claimChecked Aug 12, 2026
Email securityCloudflare DocsLevel A2Linked to 0 scored claimsChecked Aug 12, 2026
Email security changelogCloudflare DocsLevel A2Linked to 1 scored claimChecked Aug 12, 2026

FAQ

Cloudflare Email Security FAQ

Is Cloudflare Area 1 Email Security still the current product name?

The current product and dashboard name is Cloudflare Email Security. Cloudflare documentation refers legacy Area 1 users to Area 1 materials, but new product pages, docs, packages, and dashboard navigation use Email Security.

What are the current Cloudflare Email Security packages?

Advantage, Enterprise, and Enterprise + PhishGuard. All are annual-contract, sales-quoted packages priced by the number of email users or inboxes.

Is Retro Scan a free Email Security plan or trial?

No. Retro Scan is a free, no-license Microsoft 365 assessment that scans up to 14 days of mailbox email and generates a report. It does not provide ongoing licensed protection.

Is PhishGuard a separate add-on in this profile?

PhishGuard is managed human analysis and response, but the current official plan ladder packages it as the Enterprise + PhishGuard edition. It is therefore represented once as that edition, not as a duplicate add-on plan.

Does Email Security include Cloudflare Browser Isolation and Gateway?

Enterprise and Enterprise + PhishGuard include email link and attachment isolation. Full Gateway and Browser Isolation functions provide additional actions and remain separately purchased Cloudflare One products.

Does Email Security include Cloudflare DMARC Management?

The Email Security packages perform sender-authentication checks, and the matrix lists DMARC visibility and reporting with a DNS Service condition. Cloudflare DMARC Management is a distinct capability available to Cloudflare DNS customers and is not treated as a duplicate Email Security plan.

Popular comparisons

Common Cloudflare Email Security comparisons

Only high-scoring and nearby tools from the same subcategory are shown, avoiding comparisons between unrelated use cases.

VS #1
Cloudflare Email SecurityvsCisco Secure Email Threat Defense
80Gap 080

Enterprise / Mid-market

VS #2
Cloudflare Email SecurityvsProofpoint Core Email Protection
80Gap 080

Enterprise / Mid-market

VS #3
Cloudflare Email SecurityvsAbnormal Security
80Gap 383

Enterprise / Mid-market