Cloudflare WARP / Zero Trust
Free for a team of up to 50, with SSO, SCIM and device posture, but not a privacy VPN: no choice of exit country, IP logs kept for up to two years and no audit.
Who owns it
Cloudflare (Cloudflare, Inc., San Francisco, NYSE: NET) sells two things under one name. The consumer 1.1.1.1 + WARP app is free and encrypts the path from your device to Cloudflare's edge; the paid WARP+ tier is priced only inside the app stores. Cloudflare One, formerly Zero Trust, uses the same client under an admin plane: the Free plan is $0 forever for up to 50 users, Pay-as-you-go is $7 per user a month with no user limit, and a Contract plan is sales-led. All of it is flat, in USD even on the UK page, no intro pricing. For a small team the free tier is remarkable on paper: the client with DNS and HTTP filtering, private-network access through the open-source cloudflared tunnel, device posture checks, SSO through Entra, SAML, OIDC or one-time PIN, SCIM 2.0, a warp-cli for Linux, and, since 14 April 2026, Cloudflare Mesh, which gives every device a private address and client-to-client connectivity with 50 nodes and 50 users free. Support on Free is community forums and Discord only; chat and tickets start at $7.
What to know
Now the other half, and it is the same trade we marked Cloudflare Registrar down for. WARP is not a VPN in the sense the rest of this grid means. There is no exit-country picker; your traffic leaves from Cloudflare's IP, and Cloudflare sees it. Its own privacy policy, effective 24 April 2025, says it collects "Source IP, Source Port, Destination IP" for network assignment and keeps operational data "no longer than two years after your last use", while promising it does "not retain a link between the IP address you use … and the websites you visit" and will never sell the data. The audit that is often cited (KPMG, 2020) examined the 1.1.1.1 DNS resolver only, and Cloudflare's post says so: "The examination did not cover WARP"; a second resolver-only examination was published in April 2026. Cloudflare Mesh routes every packet through Cloudflare, not peer to peer, so that policies apply. The WARP client is closed source. Dedicated egress IPs exist but only as an add-on to Enterprise contracts, unpriced, so a small team cannot buy a fixed IP at all. Trustpilot's 1.4 on 1,309 reviews is 74% one-star from people blocked by CAPTCHAs on other companies' websites and says nothing about WARP; we show it for completeness. What you get is a free, well-engineered access layer for a small business whose privacy model is "trust Cloudflare"; that is a legitimate choice, made knowingly, and 3.0 is where it lands. Saaskly has no commercial relationship with Cloudflare.
Not yet tested by Saaskly: assessed on published pricing, documentation and third-party reviews.
Pros
- +Free for 50 users with SSO, SCIM, posture checks, DNS/HTTP filtering and private-network tunnels; $7/user after
- +Cloudflare Mesh (April 2026) for device-to-device with 50 nodes free; Linux CLI; open-source tunnel
- +Flat pricing, no intro/renewal games
Cons
- −Not a privacy VPN: no exit choice, Cloudflare retains source/destination IPs up to two years, no audit has covered WARP
- −Closed-source client; Mesh is hub-routed through Cloudflare, not peer-to-peer
- −Fixed IP is Enterprise-only and unpriced; community-only support on Free
Pricing
Minimum commitment: Free (no licence cost). The least you can spend before walking away; excludes numbers, minutes and add-ons.
Zero Trust Free
$0free tier
Paid tier $7/mo, month-to-month
- ✓Free for up to 50 users; Pay-as-you-go $7/user/mo, no limit; Contract custom; USD on the UK page, VAT not stated; consumer 1.1.1.1 + WARP free, WARP+ priced in-app only; dedicated egress IP Enterprise add-on, unpriced.
Specifications
| Rating | 3.0 |
| Pricing and plans | |
|---|---|
| Month-to-month | Free ($7/mo paid tier) |
| Longest plan, per month | Free |
| Renewal, per month | Free |
| Pricing pattern | Per user |
| Business plan | ✓ |
| Free tier | Usable free plan |
| Money-back (days) | 0 |
| Features | |
| Type | Zero-trust access |
| Devices | Unlimited |
| Fixed IP | Business plans only, no UK IP |
| Device-to-device network | Included |
| WireGuard | ✓ |
| Port forwarding | No |
| UK servers | ✓ |
| Countries | 125 |
| RAM-only servers | No |
| Kill switch | No |
| Split tunnelling | ✓ |
| Multi-hop | No |
| Ad / tracker blocking | ✓ |
| Integrations and developers | |
| SSO | ✓ |
| Linux client | ✓ |
| Open-source apps | No |
| API | ✓ |
| MCP server | No |
| Ownership and trust | |
| Jurisdiction | United States |
| Owner | Cloudflare, Inc. |
| No-logs audit | Not audited |
| Trustpilot (reviews)† | 1.4 (1,309) |
| Support | |
| 24/7 live chat | No |
| Support channels | Community forums / Discord (Free), Chat + ticket (Pay-as-you-go), Phone (Enterprise) |
†Trustpilot: uk.trustpilot.com TrustScore and review count on the research date. Three cells are weak signals and are shown for completeness: Cloudflare (1.4) is mostly non-customers blocked by CAPTCHAs on other companies' websites and no review mentions WARP; Tailscale (23 reviews) and Mullvad (186) are tiny unprompted samples. NordLayer has no Trustpilot profile, so its cell is blank.
Researched and drafted with AI assistance; reviewed and approved by Tim Meredith. How we use AI
Work at Cloudflare WARP / Zero Trust? Something not look right? Register in the vendor portal to see what we publish and send corrections.