NET Stock - Cloudflare, Inc.

Cloudflare’s (NET) Q4 2025 earnings report and subsequent FY2026 guidance reflect a strategic pivot toward capturing the "Agentic Internet" through its Workers AI platform and accelerating enterprise consolidation within its Zero Trust suite. Management’s outlook suggests that while AI monetization is transitioning from experimental to usage-based revenue, the broader consolidation trend is driving record-breaking deal sizes.

FY2026 Revenue Guidance & Workers AI Monetization

Cloudflare issued FY2026 revenue guidance of $2.785B–$2.795B, representing a year-over-year increase of 28–29%. This guidance incorporates a shift in monetization strategy specifically designed to capture AI-driven workloads:

• Usage-Based "Pool of Funds" Model: Management noted that Workers AI monetization is increasingly flowing through "pool of funds" agreements, which allow enterprises to commit to a dollar amount and draw down across various services. In Q4 2025, these deals represented approximately 20% of new Annual Contract Value (ACV), up from the mid-teens earlier in the year.
• AI Agent Traffic Surge: The guidance accounts for a massive spike in "agentic" traffic. CEO Matthew Prince reported that weekly requests generated by AI agents more than doubled in January 2026 alone. Because AI agents generate an order of magnitude more outbound requests than traditional users, Cloudflare expects this to drive higher variable revenue through its Workers platform.
• Neutral Platform Positioning: The FY2026 outlook assumes Cloudflare will act as the "neutral" infrastructure layer for AI, providing inference at the edge. Management highlighted that over 40% of the Y Combinator Winter 2025 cohort is already building on Workers AI and R2 storage, creating a pipeline for future enterprise-scale monetization.

Enterprise Consolidation & Zero Trust Momentum

There are definitive signs of accelerating enterprise consolidation, as customers move away from point-solution security vendors in favor of Cloudflare’s integrated "Connectivity Cloud."

• Multi-Product Adoption: A critical indicator of consolidation is that more than 70% of new large contracts in Q4 included three or more Cloudflare products. Zero Trust and Workers AI are frequently being bundled with core application security services.
• Record Deal Sizes: Cloudflare closed its largest-ever annual contract in Q4, averaging $42.5M per year. Total new ACV grew nearly 50% YoY, the fastest growth rate since 2021, driven by multi-year, multi-million dollar "platform" deals.
• Large Customer Cohort Growth:
  • $100k+ Customers: Reached 4,298, up 23% YoY.
  • $1M+ Customers: Reached 269, a significant 55% YoY increase.
  • Revenue Contribution: Large customers now account for 73% of total revenue, up from 69% in the prior year.

Risks and Operational Considerations

While the growth trajectory is robust, the shift toward AI and usage-based models introduces new variables:

• Gross Margin Pressure: Non-GAAP gross margin for Q4 was 74.9%, slightly below the long-term target of 75–77%. This was attributed to higher network costs associated with the rapid scale-up of AI-related traffic and "pool of funds" usage.
• Revenue Variability: The increasing mix of usage-oriented revenue may lead to higher seasonal volatility in quarterly results, a factor management explicitly cautioned about in the FY2026 outlook.
• Retention Stability: Dollar-based net retention (DNR) reached 120%, up from 119% in Q3, suggesting that enterprise consolidation is successfully offsetting any churn in smaller customer segments.

Cloudflare’s (NET) strategic expansion into sovereign cloud capabilities, particularly within the European Union, creates a complex interplay between capital-intensive infrastructure buildouts and high-margin software scalability. For the first half of 2026 (H1 2026), the company’s operating margins are projected to experience a temporary compression relative to Q4 2025 peaks, followed by a trajectory of expansion as localized sovereign services transition from deployment to monetization.

H1 2026 Operating Margin Outlook

Based on management’s guidance issued in February 2026, Cloudflare expects a sequential softening of non-GAAP operating margins in the early part of the year. While the company achieved a record 14.6% non-GAAP operating margin in Q4 2025, the outlook for Q1 2026 points to a range of $70M to $71M in operating income on revenue of $620M to $621M.

This implies a ~11.4% operating margin for Q1 2026, representing a -320 bps contraction from the previous quarter. This compression is primarily attributed to:

• Front-loaded Infrastructure Investment: Network CapEx is projected at 12% to 15% of revenue for the full year 2026, with significant outlays in H1 to support the "Data Localization Suite" and regionalized hardware required for EU compliance.
• Sovereign Cloud Go-to-Market (GTM) Costs: The expansion of sovereign capabilities involves longer sales cycles and higher sales engineering intensity to navigate complex EU regulatory frameworks (e.g., GDPR, Schrems II/III).

Balancing Localized Buildouts with Software Sales

Cloudflare’s margin profile is currently a "tug-of-war" between the physical requirements of data sovereignty and the high-leverage nature of its software-defined network.

• Infrastructure Drag: Unlike traditional hyperscalers, Cloudflare’s "serverless" edge architecture allows it to deploy sovereign capabilities without building massive standalone data centers. However, the Data Localization Suite (DLS) requires specific regional routing and metadata boundaries that increase operational complexity and "middle-mile" costs in the short term.
• Software Accretion: Offsetting these costs is the rapid growth in high-margin enterprise software. New Annual Contract Value (ACV) grew nearly 50% YoY in late 2025, driven by AI-enabled Workers and Zero Trust services. These software-heavy products carry gross margins significantly higher than the corporate average of 74.9%.
• The "Agentic" Catalyst: Management anticipates that the rise of "AI agents" will drive massive traffic volumes through Cloudflare’s network. Because these agents require secure, localized processing to comply with EU privacy laws, they act as a high-margin catalyst that utilizes the newly built sovereign infrastructure.

Full-Year 2026 Trajectory

While H1 2026 margins appear constrained by investment, the full-year guidance suggests a recovery in the second half. The company projects full-year 2026 operating income of $378M to $382M on revenue of approximately $2.79B.

This implies a full-year operating margin of ~13.6%. To achieve this average after an 11.4% start in Q1, Cloudflare must deliver significant operating leverage in H2 2026, likely reaching margins of 15% to 16% as the sovereign cloud infrastructure reaches higher utilization rates.

Risks and Uncertainties

• Regulatory Volatility: Further shifts in EU-U.S. Data Privacy Frameworks could necessitate additional, unplanned infrastructure modifications.
• CapEx Efficiency: If the transition of AI workloads from experimental to production phases slows, the 12-15% CapEx spend may not yield the expected near-term revenue, leading to prolonged margin pressure.
• Competitive Pricing: Hyperscalers (AWS, Azure) are also launching sovereign cloud regions; aggressive pricing in the EU could limit Cloudflare's ability to maintain its target 75-77% gross margin range.

Cloudflare’s (NET) competitive positioning has undergone a structural shift in the most recent quarter (Q4 2025), characterized by an accelerating displacement of legacy hardware firewall vendors. This evolution is primarily driven by the inability of on-premise appliances to withstand hyper-volumetric, AI-augmented DDoS attacks, which reached unprecedented scales in late 2025.

Competitive Win Rate & Legacy Displacement

In Q4 2025, Cloudflare reported a significant uptick in "win rates" against legacy hardware incumbents (e.g., Cisco, Fortinet, and Palo Alto Networks). Management highlighted a record-breaking $42.5M annual contract value (ACV) deal, the largest in the company’s history, which involved a total "re-platforming" of a customer’s network away from legacy hardware.

• Consolidation Momentum: New ACV grew nearly 50% YoY in the most recent quarter, the fastest growth rate since 2021. This acceleration is attributed to the "must-have" status of cloud-native security as hardware capacity limits become a liability.
• The "Pool of Funds" Model: Approximately 20% of new ACV is now being driven by a flexible "pool of funds" contracting model. This allows enterprise customers to migrate away from legacy vendors at their own pace, reducing the friction of displacing multi-year hardware contracts.
• Infrastructure Superiority: While legacy firewalls often face throughput bottlenecks at the 1-2 Tbps range, Cloudflare’s global network capacity now exceeds 200 Tbps, allowing it to absorb attacks that would otherwise "blackhole" traditional on-premise defenses.

AI-Driven Threat Landscape as a Catalyst

The shift toward AI-driven threat actors has acted as a primary tailwind for Cloudflare’s enterprise penetration. The emergence of "agentic" traffic and AI-powered botnets has fundamentally changed the volume and sophistication of attacks.

• DDoS Escalation: Total DDoS attacks identified by Cloudflare more than doubled in 2025 to 47.1M, a 121% YoY increase.
• Hyper-Volumetric Peaks: In Q4 2025, the network mitigated a record 31.4 Tbps attack. Such "theoretical" scales are now becoming frequent, rendering traditional scrubbing centers and hardware appliances obsolete.
• AI Bot Mitigation: Cloudflare blocked over 416B AI bot requests in the latter half of 2025. The rise of AI agents (e.g., OpenClaw) has increased the complexity of traffic, favoring Cloudflare’s integrated "Connectivity Cloud" over siloed hardware solutions.

NRR Trajectory & 2026 Outlook

Cloudflare’s Dollar-Based Net Retention Rate (NRR) has entered a period of sustained recovery, reflecting deeper wallet share capture within the Fortune 500.

• Current Performance: NRR reached 120% in Q4 2025, up from 119% in Q3 and 111% in the prior year.
• 2026 Trajectory: The NRR is projected to trend toward the 122-125% range in 2026. This is supported by a 48% YoY growth in Remaining Performance Obligations (RPO), which totaled $2.496B at year-end.
• Large Customer Growth: Customers paying over $100,000 annually grew 23% YoY to 4,298, now accounting for 73% of total revenue.

Risks & Strategic Limitations

Despite strong momentum, Cloudflare faces specific headwinds as it enters 2026:

• Margin Pressure: Non-GAAP gross margins dipped slightly to 74.9% in the most recent quarter, remaining just below the long-term target of 75-77% due to increased investment in AI inference hardware.
• Operational Complexity: The rebranding of "Magic" products to "Cloudflare One" (e.g., Magic Firewall becoming Cloudflare Network Firewall) reflects a need to simplify a maturing SASE suite that faces intense competition from Zscaler and Palo Alto’s Prisma Access.
• CapEx Intensity: Network CapEx is expected to remain elevated at 12-15% of revenue in 2026 to support the "Agentic Internet" infrastructure.