Cloudflare Access on new websites

Cloudflare Zero Trust Access authentication service

Sites using Cloudflare Access
252
234 found by StackScope, 18 via launch platforms
Last 30 days
0.0%
of new sites, to Oct 18
-0.0 pts on the 30 days before
Last 7 days
0.0%
of new sites, 7-day average
-0.0 pts on the week before
Rank in Security
#23
of 398 tools, all time
Found via
  • StackScope Wider Web 157
  • StackScope Discovery (Indie) 77
  • Product Hunt 14
  • Hacker News 2
  • PeerPush 2
First seen Apr 22, 2026
Last seen Oct 19, 2026
Most recent launch MyLens, Oct 18, 2026
Website cloudflare.com
View

What we found

  1. Cloudflare Access appeared on about 70 new sites in the last 30 days.[1]
  2. It is unusually common on .app domains: 14% of the domains running it, against 5.9% of domains across new sites.

Share of new sites using Cloudflare Access

0.00% 0.02% 0.04% 0.06% Apr Jun Aug Oct [2] [3]

The line is the 7-day average share of new sites that use Cloudflare Access, day by day for the last 90 days and weekly before that (left of the dashed line). The shaded areas were measured against a different set of sites, so the line can step there without Cloudflare Access itself changing.[2][3]

Who uses Cloudflare Access

Kind of site 111 sites with a known type, all time
TypeSitesShareBar
Content 15 13.5%
Developer Tools 13 11.7%
Productivity 12 10.8%
Crypto 10 9.0%
Finance 10 9.0%
Games 9 8.1%
Education 8 7.2%
Health 8 7.2%
Marketing 7 6.3%
AI 6 5.4%
Social 6 5.4%
E-commerce 4 3.6%
Design 1 0.9%
Directory 1 0.9%
Hiring & HR 1 0.9%
Country[4] likely for 22 of 252 sites (8.7%)
CountrySitesShareBar
France 6 27.3%
United Kingdom 4 18.2%
United States 4 18.2%
Canada 3 13.6%
Germany 1 4.6%
Denmark 1 4.6%
South Korea 1 4.6%
North Macedonia 1 4.6%
Netherlands 1 4.6%
Domain ending 252 sites, all time
EndingSitesShareBar
.com 126 50.0%
.app 33 13.1%
.ai 10 4.0%
.org 10 4.0%
.xyz 10 4.0%
.dev 9 3.6%
.uk 7 2.8%
.fr 6 2.4%
.io 6 2.4%
.net 5 2.0%
.ca 4 1.6%
.online 3 1.2%
.us 3 1.2%
.cloud 2 0.8%
.sh 2 0.8%

Security on new sites

# Movement Tool Share of all sites Share of category Bar
1 – HSTS 47.5% 87.4%
2 – Cloudflare Bot Management 13.7% 25.2%
3 – Google reCAPTCHA 1.9% 3.5%
4 ▲1 Anubis 0.1% 0.2%
5 ▼2 DDoS-Guard 0.1% 0.2%
…
23 ▼3 Cloudflare Access <0.1% <0.1%

All-time shares across the new sites we track: of all of them, and of the sites using any Security tool. Cloudflare Access is typically used alongside HSTS rather than instead of it. Among September launches it ranked #25 in Security, down from #22 in August. All 398 in Security

Often used with Cloudflare Access

Tool Sites with both vs all new sites Bar
Cloudflare DNS 223 2.9x
Next.js 80 2.3x

Tools that turn up far more often on Cloudflare Access sites than on new sites in general, and how many times as common each one is there.

Recent launches using Cloudflare Access

95 of the 252 sites using Cloudflare Access are product launches we list individually. The other 157 are sites we found crawling the wider web: they count towards the figures above, but we do not publish them one by one. They are included in the StackScope API and in Stackdar alerts.

Showing the most recent 12 of 95.

The StackScope API serves all 252 sites using Cloudflare Access, filterable and exportable, from £15 a month.

Notes

  1. These figures cover websites that went live since April 2026, not the web as a whole.
  2. Grey: before 8 July 2026, we only tracked launches from launch platforms. From that date we crawl the wider web as well, so the share is measured against a much larger set of sites. For one continuous measure, view launch platforms only.
  3. Amber: 8 July to 10 September 2026, before we improved our infrastructure to index new sites much sooner, often on the day they go live. Sites found that early often haven't finished setting up, so anything usually added after launch reads lower from 10 September. We record each site as it was when we found it.
  4. Country comes from what each site says about itself, such as a company registration, legal terms or a phone number, not just its domain ending. Too few sites state their country plainly for the usual count, so this one also counts single signals: a country domain ending, a phone number (for North America, its area code), a location the site declares in its own page metadata, or a country-specific vendor stack and the page language where they agree and nothing contradicts them. Read these as likely rather than certain.

How this page is made

StackScope looks at each new website near the day it goes live and records what it was built with. We do not go back later, so these figures describe what sites launch with, not what they run today. A site counts towards Cloudflare Access when we detect Cloudflare Access on it at that look.

Every share on this page is a proportion of the new sites we were tracking at the time. Sites we found across the wider web count towards the figures, but only product launches are listed by name. How StackScope detects technologies · How StackScope Discovery works

Something not look right? If a technology shown here is wrong or out of date, email [email protected] and we'll review it.