Cloudflare WARP / Zero Trust

Cloudflare (Cloudflare, Inc., San Francisco, NYSE: NET) sells two things under one name. The consumer 1.1.1.1 + WARP app is free and encrypts the path from your device to Cloudflare's edge; the paid WARP+ tier is priced only inside the app stores. Cloudflare One, formerly Zero Trust, uses the same client under an admin plane: the Free plan is $0 forever for up to 50 users, Pay-as-you-go is $7 per user a month with no user limit, and a Contract plan is sales-led. All of it is flat, in USD even on the UK page, no intro pricing. For a small team the free tier is remarkable on paper: the client with DNS and HTTP filtering, private-network access through the open-source cloudflared tunnel, device posture checks, SSO through Entra, SAML, OIDC or one-time PIN, SCIM 2.0, a warp-cli for Linux, and, since 14 April 2026, Cloudflare Mesh, which gives every device a private address and client-to-client connectivity with 50 nodes and 50 users free. Support on Free is community forums and Discord only; chat and tickets start at $7.

Now the other half, and it is the same trade we marked Cloudflare Registrar down for. WARP is not a VPN in the sense the rest of this grid means. There is no exit-country picker; your traffic leaves from Cloudflare's IP, and Cloudflare sees it. Its own privacy policy, effective 24 April 2025, says it collects "Source IP, Source Port, Destination IP" for network assignment and keeps operational data "no longer than two years after your last use", while promising it does "not retain a link between the IP address you use … and the websites you visit" and will never sell the data. The audit that is often cited (KPMG, 2020) examined the 1.1.1.1 DNS resolver only, and Cloudflare's post says so: "The examination did not cover WARP"; a second resolver-only examination was published in April 2026. Cloudflare Mesh routes every packet through Cloudflare, not peer to peer, so that policies apply. The WARP client is closed source. Dedicated egress IPs exist but only as an add-on to Enterprise contracts, unpriced, so a small team cannot buy a fixed IP at all. Trustpilot's 1.4 on 1,309 reviews is 74% one-star from people blocked by CAPTCHAs on other companies' websites and says nothing about WARP; we show it for completeness. What you get is a free, well-engineered access layer for a small business whose privacy model is "trust Cloudflare"; that is a legitimate choice, made knowingly, and 3.0 is where it lands. Cloudflare has no affiliate programme.

Not yet tested by Saaskly: assessed on published pricing, documentation and third-party reviews.