Skip to content
Cloudflare Docs

FedRAMP Status

FedRAMP High "In-Process"

The following products are are under FedRAMP High "In-Process" status. Any exceptions are denoted with a note or exception.

  • Zero Trust Network Access
    • Exception: Browser-based SSH and VNC is not supported.
    • Exception: Storing SSH logs on Cloudflare is not supported.
  • Advanced Certificate Manager
  • Cloudflare Aegis
  • AI Crawl Control
  • Analytics, aka Cloudflare Analytics
  • API Shield
  • Email Security
  • Argo Smart Routing
  • Bots, aka Bot Management
  • Browser Isolation
  • CDN Cache
    • Exception: Smart Tiered Cache is not supported.
  • Cache Reserve
  • Cloudflare for SaaS
  • Cloudflare Images
  • Cloudflare Logs
  • Cloudflare One
  • Zero Trust Infrastructure Access
  • Cloudflare Queues
  • Cloudflare Spectrum
  • Cloudflare Stream
  • Cloudflare Tunnel
  • Cloudflare Turnstile
  • Cloudflare WARP client
    • Exception: Directly route Microsoft 365 traffic is not supported.
    • Note: Users will need to exempt a new of of IPs in their firewall.
  • Cloudflare Workers
  • Cloudflare Workers KV
  • Cloudflare Zero Trust
    • Note: Third-party integrations will appear in the FedRAMP Zero Trust dashboard, but users will need to indpendently verify their integrations are FedRAMP High compliant.
  • CASB, aka Cloud Access Security Broker
  • Customer Metadata Boundary
  • Data Loss Prevention (DLP)
  • Data Localization Suite
  • DDoS Protection
  • DNS
  • Cloudflare Durable Objects
  • Cloudflare Gateway
  • Hyperdrive
  • Load Balancing
    • Exception: Geo-steering is not supported. Only "FedRAMP High" and "FedRAMP High – All Datacenters" are supported as options for health monitoring regions.
  • Magic Firewall
  • Magic Network Monitoring
  • Magic Transit
  • Magic WAN
  • Network Interconnect
  • Page Shield
  • R2 Object Storage
  • Rate Limiting
  • SSL/TLS
  • Tiered Cache
  • Video Stream Delivery
  • WAF
  • Waiting Room
  • Web Analytics