Cloudflare’s Next Act: What If Security Is Just the On-Ramp?

Last week, I attended Cloudflare Connect 2026 in San Francisco as one of about 20 invited industry analysts. The most interesting story wasn’t an individual product announcement, but Cloudflare’s broader ambition to extend its global delivery and security network into infrastructure for AI agents that build, connect, and transact across the Internet. The opportunity is substantial because Cloudflare already operates at the intersection of several capabilities that could become increasingly important as machines assume a larger role in online activity.

Dell’Oro Group tracks Cloudflare across several security segments, including web application firewalls (WAF) and Security Service Edge (SSE). These security businesses remain important, but they may also provide the foundation for a broader developer and transaction platform.

Three observations from Connect illustrate both the strategic opportunity and the market implications worth watching.

The Internet’s Bodyguard Wants to Become Its Cashier

Matthew Prince, CEO of Cloudflare, highlighted a striking milestone during his keynote: Cloudflare data shows agentic AI traffic overtook human traffic in May 2026. That crossover arrived more than a year ahead of his original forecast, underscoring how quickly the Internet’s usage patterns are changing. Increasingly, the Internet serves two audiences: people who consume content and AI agents that retrieve information, interact with applications, and complete tasks on their behalf. This shift has implications that extend well beyond the volume of AI agent traffic.

AI agents place different demands on infrastructure because they can generate large numbers of requests, execute multistep workflows, and interact with services without direct human involvement. They also introduce questions about identity, authorization, and accountability, particularly when an agent acts on behalf of a person or organization. Cloudflare sees an opportunity at this intersection of networking, security, identity, and execution, building on a globally distributed network that already delivers applications and enforces security policies. Extending those capabilities into agent identity, execution, and payments could establish Cloudflare as an important infrastructure provider for the agentic Internet.

One particularly interesting opportunity involves the economics of agent-driven commerce. The Internet’s traditional business model has depended heavily on human visits, advertising, and referrals, but AI agents can consume content and computing resources without generating the traffic or revenue that previously supported content creators. Cloudflare’s Pay Per Use and Monetization Gateway initiatives seek to address this imbalance by enabling content and service providers to receive compensation when agents consume their resources. The direction is sensible, though it raises questions about how Cloudflare will set access, pricing, and payment terms as it increasingly mediates transactions between agents and content owners.

The opportunity extends beyond protecting existing business models and points toward a potentially significant category of machine-to-machine commerce. Cloudflare’s network reach naturally positions it to facilitate these interactions, while its existing security capabilities provide a strong foundation for building trust. However, interoperability, transparent policies, and customer control will be essential if these services are to become widely adopted Internet infrastructure. The Internet’s bodyguard is applying for a second job as its cashier, and the rules governing that role will matter.

The Developer Platform Is the Quiet Expansion Engine

The second observation is that developers, not solely enterprise security buyers, are increasingly pulling Cloudflare’s expansion. Workers, data services, and AI-related tooling allow developers to build and deploy applications without assembling conventional cloud infrastructure. Cloudflare OS extends that concept into an AI workspace that connects enterprise systems, selects models, and orchestrates workflows using Cloudflare’s underlying services. Together, these capabilities suggest Cloudflare wants to become an increasingly natural destination for AI-era applications.

The commercial logic is worth examining because the adoption model differs from traditional enterprise software. An open-source workspace does not necessarily generate direct licensing revenue, but applications built around it can increase consumption of compute, data, identity, security, and AI gateway services. A developer begins with a useful application, and the enterprise gradually inherits a broader infrastructure relationship as that application moves toward production. The opportunity is attractive for Cloudflare, although the durability of this consumption model will depend on how successfully experimental workloads become business-critical applications.

Two customer examples illustrated the potential. Block, the financial technology company behind Square and Cash App, described using Cloudflare to incubate employee-created applications without disrupting production systems, while consolidating workforce access under a consistent Zero Trust architecture. The developers at Block were instrumental in picking Cloudflare’s SSE/ZTNA solution. Montclair State University demonstrated another compelling use case: using AI to create connective tissue across disparate enrollment, housing, financial aid, academic, and campus systems. Instead of forcing students to navigate multiple portals and piece together information themselves, an AI-powered workspace can bring those systems together to answer questions, identify next steps, and help students complete tasks. Both examples show how AI can unlock value from existing enterprise systems without replacing them.

The major hyperscalers—Amazon Web Services (AWS), Google Cloud, and Microsoft Azure—are unlikely to lose their central role, especially where databases, long-running workloads, and compliance requirements create substantial inertia. Enterprises may nevertheless welcome Cloudflare for distributed execution, application integration, and security while retaining their core data and systems in hyperscaler or private clouds. However, infrastructure lock-in remains a concern, even when the application framework itself is open source, because operational dependencies can accumulate around the underlying infrastructure services. Cloudflare’s opportunity may be to win more of the work between clouds rather than displace them.

AI Makes Security More Important—and Changes Its Economics

The third observation matters for cybersecurity markets because AI is expanding the attack surface while improving security teams’ productivity. AI accelerates application development, increases API activity, and introduces autonomous agents that can take action, creating additional demand for security controls. At the same time, AI-assisted engineering, vulnerability discovery, investigation, and remediation could reduce the labor required to achieve security outcomes. The resulting dynamic is important: increasing cyber risk does not necessarily translate into proportionately higher spending across every security product category.

Application security provides a useful example because faster software development creates both advantages and difficulties. AI-assisted coding can boost development productivity and potentially reduce certain classes of vulnerabilities, but it also enables organizations to build more applications, APIs, and business logic that need protection. Even well-written code cannot prevent every inappropriate action, particularly when an AI agent executes a legitimate API request for a purpose its user never intended. Consequently, security increasingly needs to evaluate identity, authorization, application context, and permissible actions rather than relying exclusively on identifying known exploits or malicious requests.

This evolution plays to Cloudflare’s strengths in distributed enforcement because its network provides a common infrastructure for applying security policies close to applications and users. Combining these capabilities with agent identity, application execution, and AI governance could create meaningful differentiation as enterprises seek more coordinated security architectures. Customer presentations reinforced the practical importance of these capabilities: eBay described agentic tools supporting customer security operations and cybercrime intelligence, while Estonia demonstrated how centrally managed web and DDoS defenses can protect government services against sustained attacks. Neither example suggests that traditional security requirements are disappearing, but both illustrate how automation and shared enforcement infrastructure may change the economics of delivering security outcomes.

The broader implication is that AI could increase demand for security while also pressuring products whose primary differentiation rests on manual workflows, data aggregation, or basic orchestration. Vendors will increasingly need to demonstrate differentiated context, reliable enforcement, and operational accountability rather than simply adding an AI interface to existing products. For Cloudflare, this presents an opportunity to extend the value of its network and security capabilities into emerging AI workloads. For the cybersecurity market, it suggests that competitive advantage increasingly depends on how effectively vendors coordinate identity, application context, policy, and enforcement across distributed environments.

What I Will Be Watching

Cloudflare’s strategy now spans markets that enterprises have historically budgeted and managed separately, but the underlying capabilities increasingly reinforce one another. Its network provides global reach, security establishes trust, developer services generate workloads, and agent identity and payments introduce additional monetization opportunities. More developers create more applications, which generate traffic and require security, while growing agent activity increases the importance of authorization and transaction services. The strategic logic is compelling, although translating those relationships into sustained commercial growth will require continued execution.

I will be watching three developments as the strategy unfolds. First, can Cloudflare convert growing developer adoption into durable enterprise workloads that generate meaningful infrastructure consumption? Second, will agent identity, authorization, and payment capabilities mature into sufficiently open and interoperable services that enterprises can deploy them confidently? Third, can Cloudflare translate its expanding technology footprint into a coherent operating model that customers increasingly view as broader application and AI infrastructure rather than primarily security and delivery services?

For the cybersecurity industry, the implications reach beyond Cloudflare because AI is accelerating the convergence of networking, application delivery, security, and distributed computing. Vendors that can coordinate these capabilities will capture larger shares of enterprise infrastructure spending, although the economics of individual product categories could evolve considerably along the way. My takeaway from Connect is that Cloudflare is no longer simply asking how much more of the security stack it can address; it is asking how much of the agentic Internet it can help operate. Security may be the on-ramp, but what matters next is whether customers trust—and pay for—the road beyond it.