These achievements enable Federal, State and Local government, defense, education and highly-regulated organizations to use Cloudflare’s suite of integrated security, performance, AI and developer services to advance their missions and innovate with efficiency.

As the public sector faces an increasingly complex threat landscape, Cloudflare also confirmed its intent to pursue Department of Defense (DoD) Impact Level 4 (IL4) authorization. By bridging the gap between legacy infrastructure and modern security, Cloudflare is enabling government and defense organizations to leverage a unified suite of security, performance, and developer services—allowing them to innovate with speed without compromising on compliance.

"Federal agencies, the Department of Defense, and highly-regulated organizations face more pressure than ever to modernize technologies, deliver faster, and reduce costs while protecting highly sensitive data from evolving threats," said David Mihalchik, VP of U.S. Public Sector at Cloudflare. "FedRAMP High, GovRAMP Moderate, and our intent to pursue DoD IL4 let us bring a platform to federal, state, local, and defense teams to advance their missions, retire legacy technologies, and accelerate their shifts to a more secure, efficient, and innovative future."

Cloudflare for Government is a unified platform that helps organizations adopt Zero Trust security, strengthen digital resilience, accelerate performance, and build and deploy applications quickly. It runs on the same software and architecture as Cloudflare's global network, which spans more than 335 cities in over 125 countries, using software-defined regionality. Cloudflare for Government gives agencies the same protection, performance, and pace of innovation that Cloudflare delivers across the Internet. Post-quantum cryptography also protects data in transit against emerging threats.

With Cloudflare’s FedRAMP High certification, agencies and their partners can adopt Cloudflare for Government to process High Impact data: the sensitive information tied to national security, critical infrastructure, and financial systems, where a breach could have severe or catastrophic consequences. Cloudflare processes this data within an authorized U.S. boundary, across 15 metro areas positioned close to users, so agencies can scale quickly and reliably while keeping their most sensitive data in the U.S.. Similarly, Cloudflare’s GovRAMP Moderate authorization confirms that Cloudflare for Government can satisfy state and local governments’ mandates to protect their own sensitive workloads and meet state-specific data privacy mandates.