Third-quarter 2026 earnings call, November 5, 2026: record quarter, new sales chief, first "Act 4" revenue

Cloudflare reported its fastest revenue growth in nearly four years while posting the highest operating margin in its history, a combination that is unusual at $3 billion of annualized revenue. Third-quarter revenue rose 39% year-over-year to $782.5 million. Operating income was $137.1 million, a 17.5% margin, up 370 basis points sequentially. Management guided fourth-quarter revenue to $845 million to $846 million, implying 38% growth and very little deceleration, and said GAAP profitability will arrive in the fourth quarter, well ahead of the "2028 at the latest" target set at this year's Investor Day.

Customer additions have stepped up sharply, and the web is moving to Cloudflare

The most striking datapoint is the scale of customer acquisition. Cloudflare added more than 158,000 paying customers in the quarter, nearly double the prior record of roughly 80,000 set in Q2, and 110% more than a year ago. Active developers on the platform passed 10 million, up from 7 million a quarter earlier. CEO Matthew Prince said that, based on third-party data, "between July 1 and today, we added approximately 5% of the entire web to Cloudflare. That's wild. It's more than the total market of all our reverse proxy competitors combined added to our network in a bit over a quarter." He said the rate of growth inflected in October 2025, accelerated again in July 2026 and again at the start of this October.

The large-customer data point the same way. Cloudflare added 308 customers paying more than $100,000 a year, bringing the total to roughly 5,000, a 25% increase. Nearly 1,000 were added over the past year, the most ever in both a quarter and a year. Every large-customer cohort set a record for net additions. CFO Thomas Seifert noted that the higher the annual commitment, the faster revenue is growing, and that Cloudflare added almost as many $5 million-plus customers in the first three quarters of 2026 as it had in total at the end of 2025. Large customers made up 75% of revenue, up from 73%. Dollar-based net retention rose to 122%, from 120% last quarter and 119% a year ago, a level Barclays noted had not been seen in almost four years.

Pool-of-funds contracts are accelerating consumption and pulling renewals forward

Seifert said variable revenue was the primary source of upside, and that the breadth of the source matters for how the guide was built. Customers are either joining pool-of-funds structures or burning through existing commitments faster than planned, which forces earlier renewals at larger sizes. "Because it has been driven by a long tail of customers," he said, the strength was "not a concentrated event," which is part of the reason the fourth-quarter guide implies only modest deceleration despite a beat of more than 6% against the Q3 guide. Management argued the structure removes friction from expansion, and Prince said almost every pool-of-funds deal now includes Workers, often to the surprise of the buyer. "The minute the developer team hears that now they have access to Workers, all of a sudden, they're turning to it."

The deal list illustrates the pattern. An AI application platform signed a one-year, $11 million pool-of-funds contract for Workers. A Fortune 100 cloud infrastructure provider signed a 13-month, $15.5 million Magic Transit deal, displacing incumbent DDoS appliances. A cabinet-level U.S. department committed $10.3 million over five years for SASE, and a European media company signed a five-year, $8.1 million contract after replacing a 17-year CDN relationship. Prince said a neobank moved its entire workforce onto Cloudflare's SASE product in one quarter, and that performance tickets per user fell 74% after the incumbent first-generation Zero Trust vendor's latency led employees to switch it off.

The architecture argument: isolates versus containers

Prince made the case that Cloudflare's technical approach is the source of its developer momentum. Hyperscalers and neo clouds were built on containers, which suited the mobile era, but he argued they "just can't keep up in a cost-effective way with the new agentic paradigms of today." Cloudflare is built on isolates, which first allowed geographic scale and, he said, increasingly allow dense scale at an efficiency those rivals cannot match. His summary: "Cloudflare isn't a neo cloud. We're also not, as some of you have called us, the fourth public cloud. We're something different. We're the first agentic cloud." He also said he would "take the under" on his earlier forecast that agents would outnumber humans online 1,000 to 1 within five years.

Asked by Barclays about a possible slowdown in data center construction, Prince was pointed about the financing models behind some AI infrastructure. Cloudflare has been approached repeatedly to do similar deals and declined. "We're an engineering company. We're not a financial engineering company," he said, adding that "we've watched a bunch of really dumb deals get done" and that "you can't sell $1 for $0.50 and be in business over the long term." He expects a more rational market to favor operational efficiency, which he argues Cloudflare has built in.

Security demand is a second, broader driver

Prince attributed the growth inflection partly to a deteriorating threat environment. Because so much of the Internet sits behind Cloudflare, and because it has partnered with nearly every major frontier AI lab and security company hunting for software flaws, it receives quiet advance disclosure of vulnerabilities and applies protections for all customers, paying or not. He said six of the worst Internet security bugs of all time were announced in fewer than 14 days, and that more have already been disclosed to Cloudflare privately. "I think right now, what CISOs are doing is panic," he said. "I know for a fact the worst of it is not over... it's going to be bad for, I think, 2 years." He said the buying is not confined to AI companies: banks, governments, manufacturers and small regional lenders are signing contracts rather than relying on the free tier, and he noted that Cloudflare was named in a White House discussion of how to protect against the vulnerabilities.

The company is also gaining share in Zero Trust. Prince said Cloudflare entered SASE as a second-generation vendor and has benefited from developer-platform conversations in which chief security officers increasingly sit in the room, since agents need identity and containment. He said prospects have "torn up" RFPs with first-generation vendors that are not addressing agents, and described those vendors as becoming "features within what is a much larger platform play."

"Act 4": first revenue, with the timeline still open

Cloudflare recorded its first revenue from Act 4 products, the effort to build a new commercial model for the agentic Internet. Management gave no figures, and Prince was candid about timing: "I don't know exactly how long it will be before it turns into major sources of revenue." The existing revenue stems from efficiency tooling, such as the arrangement with OpenAI in which Cloudflare signals when a page has changed so the crawler fetches only fresh content. Prince expects micro-payments and pricing tied to how much an agent discloses about its purpose to follow. His long-range view is that "if you look 10 years out, I would imagine that this becomes the largest part of Cloudflare's business." He also said Cloudflare increasingly sits between agent builders such as Meta and Google and content owners, and thus gets to "set the rules of the road."

Margins: Workers dilutes gross margin but lifts operating margin

Gross margin was 72.4%, down 70 basis points sequentially and 290 basis points year-over-year, though within the 70% to 77% long-term range. Seifert's argument is that Workers carries slightly lower gross margin but a much lower cost to book than products such as Zero Trust, so faster developer growth is driving operating leverage. Operating expenses fell 510 basis points year-over-year to 55% of revenue, with sales and marketing at 35%, R&D at 13% and G&A at 7%. He said engineering is improving compute utilization for Workers, which should support gross margin, and that the company is "far ahead" of its stated path toward a Rule of 50.

Free cash flow was $82.1 million, 10% of revenue, versus 13% a year ago, which is a step back in margin terms. Network capex was 15% of revenue, and full-year guidance remains 14% to 15%. Cloudflare issued $2.5 billion of convertible notes and repaid $1.3 billion during the quarter, ending with $5.1 billion in cash and securities. RPO rose 34% year-over-year to $2.877 billion. The full-year outlook is revenue of $2.963 billion to $2.964 billion, up 37%, operating income of $462 million to $463 million and EPS of $1.35.

Go-to-market leadership change and AI in the organization

Mark Anderson, who led the go-to-market overhaul over three years, will retire at year-end and stay on as an adviser for at least a year. Christian Smith joins as President of Revenue. Prince said sales productivity rose year-over-year for the 11th consecutive quarter, with record ACV growth and the best quota attainment in more than five years. He expects more forward-deployed engineers and more technical overlays in sales as AI changes the role. Succession at the helm of a sales engine that is currently producing record results is a risk worth watching, though management offered no sign of disruption.

Responding to Citi on the restructuring six months ago, Prince said the aim was to reshape the workforce toward builders and sellers rather than cut headcount, and that he expects total headcount by year-end to exceed pre-layoff levels. He said AI is particularly effective at measurement work, citing an internal agent that now compiles investor materials and earnings script suggestions for "less than a couple of hundred bucks in token costs," replacing work that previously took a large team each quarter. Headcount ended the quarter at about 4,700.