This conference call transcript was computer generated and almost certianly contains errors. This transcript is provided for information purposes only.EarningsCall, LLC makes no representation about the accuracy of the aforementioned transcript, and you are cautioned not to place undue reliance on the information provided by the transcript.

Cloudflare, Inc.
7/31/2025
Hello and welcome to the CloudFlare second quarter 2025 earnings call. All lines have been placed on mute to prevent any background noise. After the speaker's remarks, there will be a question and answer session. If you would like to ask a question during this time, please press star one on your telephone keypad. I would now like to turn the conference over to Phil Winslow. You may begin.
Thank you for joining us today to discuss CloudFlare's financial results for the second quarter of 2025. With me on the call, we have Matthew Prince, co-founder and CEO, Michelle Zatlin, co-founder and president, and Thomas Seifert, CFO. By now, everyone should have access to our earnings announcement. This announcement, as well as our supplemental financial information, may be found on our investor relations website. As a reminder, we will be making forward-looking statements during today's discussion, including, but not limited to, our customers, vendors, and partners, operations, and future financial performance, our anticipated product launches and the timing and market potential of those products, our anticipated future financial and operating performance, and our expectations regarding future macroeconomic conditions. These statements and other comments are not guarantees of future performance and are subject to risks and uncertainty, much of which is beyond our control. Our actual results may differ significantly from those projected or suggested in any of our forward-looking statements. These forward-looking statements apply as of today, and you should not rely on them as you're representing our views in the future. We undertake no obligation to update these statements after this call. For a more complete discussion of the risks and uncertainties that could impact our future operating results and financial condition, please see our filings with the SEC, as well as in today's earnings press release. Unless otherwise noted, all numbers we talk about today, other than revenue, will be on an adjusted, non-GAAP basis. You may find a reconciliation of GAAP to non-GAAP financial measures that are included in our earnings release on our investor relations website. For historical periods, a GAAP to non-GAAP reconciliation can be found in the supplemental financial information referenced a few moments ago. We would also like to inform you that we will be participating in TeBank's Technology Leadership Forum on August 12th, Stiefel's Tech Executive Summit on August 26th, and Goldman Sachsman's Communicopia and Technology Conference on September 9th. Now I'd like to turn the call over to Matthew.
Thank you, Phil. We had an excellent quarter. We crossed $2 billion in annual run rate revenue, achieving $512.3 million of revenue in the quarter. We started the year detailing our strategy to drive re-accelerating growth. Our Q2 results highlight that this formula is working and market key inflection points to the company, with revenue growing 28% year over year, up from .5% in the first quarter. We now have 3,712 customers paying us more than $100,000 per year, a 22% increase year over year. Revenue contribution from these large customers grew at 35% year over year, contributing to 71% of revenue during the quarter, up from 67% in the second quarter last year. Our dollar-based net retention was 114%, up 3% quarter over quarter. Our gross margin was 76.3%, in line with our long-term target range of 75% to 77%. We delivered an operating profit of $72.3 million, representing an operating margin of 14.1%, and we generated strong free cash flow of $33.3 million during the quarter, again exceeding expectations. Cloudflare keeps innovating faster than ever, and customers are voting with their wallets. You can see that in the momentum from our Q2 results. It's not just interest, it's real investments that drove record ACV bookings in the quarter. Beyond innovation, under the leadership of Mark Anderson, our President of Revenue, we also delivered significant operational and strategic progress along multiple -to-market areas in the second quarter. This set a strong foundation for the rest of the year and beyond. Some highlights of this. First, the number of ramped account executives increased year over year at the fastest pace in the last two years. We expect growth in our net sales capacity to continue to accelerate in the second half. Second, we delivered another year over year and quarter over quarter improvement in sales productivity. Third, we again saw particular strength with our largest customers, those that spend over $1 million and $5 million with Cloudflare annually, with both cohorts growing year over year at their highest level since 2022. And finally, new pipeline attainment exceeded our expectation and grew at the fastest rate in more than two years. I once again feel like the company is firing on all cylinders. The momentum you see in these results shows that we have the right technology, the right strategy, and importantly, the right team to accelerate Cloudflare's next phase of growth. That's a good segue to discuss some of our wins in the quarter. A rapidly growing AI company expanded their relationship with Cloudflare, signing a one-year $15 million pool of funds contract for workers AI. This is the third contract signed with this customer in the last year as they moved all of their inference workloads from a hyperscaler over to make Cloudflare their single inference cloud platform. The continued expansion with this customer demonstrates not only the tremendous value they realized from the Cloudflare platform, but also the truly unmatched scalability, efficiency, and speed of workers AI. Cloudflare is increasingly the platform the most innovative companies are choosing to power the future of AI. A Fortune 500 financial services company expanded their relationship with Cloudflare, signing two three-year contracts totaling $11.4 million for application services and magic transit. This customer initially approached us looking to bolster their network resiliency with a dual vendor strategy, and we were happy to come in as the number two behind their incumbent provider. Impressed with our superior reliability, best in class performance, and innovative product in just one month, this customer signed a second contract making Cloudflare their primary vendor. A Fortune 500 multinational financial services company expanded their relationship with Cloudflare, signing a three-year $7.1 million contract for application services, magic transit, and workers. This customer turned to Cloudflare to establish greater network resiliency by eliminating any single point of failure, migrating half of their traffic from a long time incumbent to us. A Fortune 100 global financial services company expanded their relationship with Cloudflare, signing a one-year $5 million pool of funds contract with initial use cases for magic transit, email security, threat intelligence, and application services. In addition to addressing pressing reliability and redundancy requirements in order to improve their network resiliency, this customer was also able to enhance their security posture and gain unparalleled threat intelligence collected from our vast global network. A large state government entity in the United States expanded their relationship with Cloudflare, signing a five-year $5.1 million contract for our SAP products, including secure Web Gateway, Magic WAN, DLP, and CASB. This customer's previous architecture was a mess of multiple vendors, including a first-generation zero-trust vendor that was only 30% deployed after three years. Consolidating onto Cloudflare's unified platform will improve the customer's overall security posture and simplify their architecture, while also realizing a roughly 60% cost savings. A Fortune 500 technology company expanded their relationship with Cloudflare, signing a three-year $2.4 million zero-trust contract. What's neat about this deal is we initially lost this RFP a year and a half ago to a first-generation zero-trust vendor who was ultimately unable to meet the company's requirements, leading the customer to come back to Cloudflare. They were blown away by how quickly our zero-trust products had matured in just 18 months. This pace of innovation, combined with our ease of deployment and superior performance, were key differentiators to securing this win this time around. A rapidly growing AI company signed a five-year $4.6 million contract for AI Gateway, Magic Firewall, Magic Transit, and Application Services. As a highly technical company, its customers turned to Cloudflare as a strategic partner to enable accelerated innovation, provide enhanced security, improve performance, and offer unmatched scale with our globally distributed connectivity cloud. This contract is just the beginning with its customers. They're already kicking the tires on our firewall for AI products. A leading digital travel company expanded their relationship with Cloudflare, signing a four-year $3.8 million contract primarily for our workers developer platform. This customer is transitioning workloads from an incumbent hyperscaler to Cloudflare workers to drive faster innovation and better empower developers, while also decreasing latency and improving their global end-user experience. In the words of this customer, quote, the performance improvement we saw with Cloudflare was crazy. This customer is a great example of our land and expand model across our product acts. They started with DNS in 2023, added application security and performance in 2024, and now are building atop our workers development platform. What's next? They're currently testing our zero-trust solution. Some of our most strategic customer wins in the quarter, however, weren't big ACV deals. Let me explain. Cloudflare has historically had relatively low penetration in media companies. They didn't spend a lot or have significant security concerns, so they weren't our top priority. However, over the last year, we've gotten to know their senior leaders and many of the leading publishers to understand new threats to their business. Historically, publishers online have made money primarily in two ways, subscriptions or ads. In either case, the key was generating traffic. In the past, one of the most effective ways to do that was through search. Over the last 25 years, publishers allowed Google and other search engines to copy their content in exchange for sending them traffic. But recently, that traffic has been falling dramatically. Based on the data that Cloudflare has observed, it's nearly 10 times harder to get traffic from Google than it was just 10 years ago. What's changed? The interface of the web is switching from search to AI. Even at Google, which has represented the dominant interface for discovering the web, most searches now include an AI overview, which Pew Research has found significantly decreases the likelihood of someone clicking on a link and reading original content. Pew's data aligns exactly with what we've observed based on our customers' traffic. It's even worse with pure AI companies. Every AI company we've trapped is worse than Google of old, with some being as much as 30,000 times harder to get traffic from. As the interface of the web switches from search to AI, it's clear more people will read derivatives of content rather than the original content itself. That means the new AI-driven web will kill the old web's business model. Cloudflare is in a unique position to help. More than 20% of the web sits behind us today. But maybe as importantly, around 80% of the leading AI companies know and use us. So in Q2, we partnered with the who's who of the publishing world, from the Associated Press to Ziff Davis and nearly everyone else in between, to help invent the new business model for content creators on an AI-driven web. The deals we are signing with these companies aren't high dollars, but they are highly strategic. The response has been incredibly positive from publishers for sure, but also from the majority of AI companies who understand that original content is the fuel that powers their engines. When seismic shifts happen in ecosystems as important as the web, new business models inherently emerge. We believe we are uniquely positioned to power the business model of content creation in the coming AI-driven web. But the opportunity may actually be much larger than that. The same rails that we are building to power payments from AI companies to publishers, we believe, will be used to facilitate transactions between AI agents, whatever they happen to be doing for you online. The fact that we sit in front of so much of the web and that more than half of our dynamic traffic is already between APIs means that we are strategically positioned to deliver the agentic web of the future. For those of you who have been following us for a while, you know that we talk about our product areas in terms of acts. Act 1 are our reverse proxy products, WAF, DDoS, mitigation, etc. Act 2 are our forward proxy products, Zero Trust, VPN, Network Firewall. Act 3 are our workers developer tools. What we are doing to help publishers empower agentic transactions is a big enough deal to us that we've begun to refer to it internally as Act 4. Now, you may not know this, but I was an English literature major in college with a computer science minor. I read a lot of Shakespeare and all of his plays had five acts. So don't think we're done here. We've still got a lot more up our sleeve. With that, I'll turn it over to Thomas, our CFO, who thankfully studied economics, not English literature. Thomas, take it away.
Thank you, Matthew. And thank you to everyone for joining us. At the beginning of the year and again during our investor day, we detailed the factors that gave us confidence to thrive, reaccelerating growth over the course of 2025. We are pleased to have delivered on that goal during the second quarter with the revenue increasing 28% year over year. As Matthew mentioned, strength in our business this quarter was driven by large $1 million and $5 million plus customers continuing our momentum in the enterprise segment. Green shoots across the financial services, public sector, retail and media verticals. Continued momentum with our workers developer platform, including workers AI and ongoing prioritization of security and resiliency by our customers. In addition to accelerating the net capacity of our Salesforce, we also delivered another year over year increase in sales productivity, improve the up-close rates and exceeded our expectations for new pipeline attainment. Turning to revenue. Total revenue for the second quarter increased 28% year over year to $512.3 million. From a geographic perspective, the US represented 49% of revenue and increased 22% year over year. EMEA represented 28% of revenue and increased 29% year over year. APAC represented 15% of revenue and increased 44% year over year. Turning to our customer metrics. In the second quarter, we had approximately 266,000 paying customers representing an addition of over 15,000 paying customers sequentially and an increase of 27% year over year. We ended the quarter with more than 3,700 large customers representing an increase of 22% year over year. Revenue contribution from large customers increased to 71% of revenue during the quarter, up from 67% in the second quarter last year. We again saw particular strengths in our largest customer cohorts, adding a record number of customers year over year spending both over a million dollars and over $5 million with Cloudflare. Which served as a tailwind to our expansion business. As a result, our dollar-based net retention rate accelerated to 114% during the quarter, up 3% sequentially and 2% year over year. Moving to gross margin. Second quarter gross margin was .3% representing a decrease of 80 basis points sequentially and a decrease of 270 basis points year over year. Recall that the extension of the estimated useful life of our network equipment from four to five years at the beginning of fiscal 2024 reduced depreciation for assets and service as of December 31, 2023 by about $5.6 million or .4% of revenue for the second quarter of 2024. During the second quarter of 2025, paid versus free customer traffic again increased as compared with both the -go- quarter and first quarter, resulting in a higher allocation of expenses to cost of goods sold from sales and marketing. At Cloudflare we've always been clear our significant cost advantage is a strategic weapon. The accelerating adoption of our workers development platform is a clear validation of this philosophy. Demonstrating how the inherent scalability and efficiency of our network fuels our powerful engine of disruption. Even as we pass on substantial savings to workers customers compared with hyperscale competitors, we expect gross margin to comfortably remain with our long-term target range of 75 to 77%. Network capex represented 11% of revenue in the second quarter. We continue to expect network capex to be 12 to 13% of revenue for full year 2025. Turning to operating expenses. Second quarter operating expenses is a percentage of revenue decreased by 3% year over year to 62%. Our total number of employees increased 18% year over year, bringing our total headcount to more than 4,600 at the end of the quarter. Sales and marketing expenses were $182.1 million for the quarter. Sales and marketing as a percentage of revenue decreased to 36 from 37% in the same quarter last year. Research and development expenses were $83.6 million in the quarter. R&D as a percentage of revenue remained consistent at 16% compared to the same quarter last year. General and administrative expenses were $52.6 million for the quarter. G&A as a percentage of revenue decreased to 10% from 11% in the same quarter last year. Operating income was $72.3 million, an increase of 27% year over year compared to $57 million in the same period last year. Second quarter operating margin was 14.1%, a decrease of 10 basis points year over year. Operational excellence is a long-term competitive advantage and these results highlight our continued focus on becoming more efficient and more productive. Turning to net income in the balance sheet. Our net income in the quarter was $75.1 million or diluted net income per share of 21 cents. Free cash flow was $33.3 million in the quarter or 6% of revenue compared to $38.3 million or 10% of revenue in the same period last year. We are comfortable with consensus free cash flow estimates for the second half of fiscal 2025. During the second quarter, we issued $2 billion of 0% convertible senior notes due June 2030. In connection with the offering, we also entered into a capped call option transactions with a capped price of 175% over the last reported sale price on June 12, 2025, which protects against dilution to a price of $469.73 per share. We ended the second quarter with $4 billion in cash, cash equivalents and available for sale securities. Remaining performance applications or RPO came in at ,000,000 representing an increase of 6% sequentially and 39% year over year. Current RPO was 66% of total RPO, increasing 33% year over year versus 29% in the first quarter and 30% for the fourth quarter. Moving to guidance for the third quarter and full year 2025. Entering 2025, data gave us confidence to invest to reaccelerate growth. Second quarter results underscored that our strategy to deliver continued innovation and accelerating growth, while also remaining committed to the strong unit economics of our business, is working. And we are confident in our ability to continue to execute against this winning formula as we transition to the second half of the year and beyond. For the third quarter, we expect revenue in the range of $543.5 to $544.5 million, representing an increase of 26% to 27% year over year. We expect operating income in the range of $75 to $76 million. We expect an effective tax rate of 20%. We expect diluted net income per share of 23 cents, assuming approximately 376.5 million shares outstanding. For the full year 2025, we expect revenue in the range of ,113.5 million to ,115.5 million, representing an increase of 27% year over year. We expect operating income for the full year in the range of $284 to $286 million. We expect an effective tax rate of 20%. We expect diluted net income per share over that period to be in the range of 85 to 86 cents, assuming approximately 370 million shares outstanding. In closing, we continue to focus on creating significant shareholder value with our ongoing commitment to disciplined execution, durable growth, and operational efficiency. I'd like to thank our employees for their dedication to our mission, as well as our customers for trusting us to help modernize, accelerate, and secure their businesses. And with that, I'd like to open it up for questions. Operator, please poll for questions.
Thank you. If you would like to ask a question, please press star 1 on your telephone keypad. If you would like to withdraw your questions, simply press star 1 again. Please ensure your phone is not on mute when called upon. We ask that you please limit yourself to one question and one follow up. Thank you. Your first question comes from Keith Weiss of Morgan Stanley. Your line is open.
Excellent. Thank you guys for taking the question and congratulations on a really solid quarter. It definitely looks like the engine is back to running full speed here. I wanted to dig into the business model for the agentic web and maybe you could give us a little bit more color and visibility on what that means in reality. What are the business models that you're looking to enable for your customers and how do you monetize that for Cloudflare?
Sure, thanks, Keith. I don't think we know exactly the answer to that. And my hunch is that there will be a number of different models that emerge and over time consolidate. The analogy I've been thinking about is risk of hubris. When Apple rolled out 99 cents a song, that was a key turning point in the music industry. But it wasn't the ultimate model that we ended up with. We came close to something that was $10 a month with Spotify. And so I think that this is going to go through a number of different stages and iterations. And you could imagine something that is a fraction of a penny per transaction. You could imagine different sites charging different things. You could imagine sites that charge agents more or sites that actually discount for agents that are there. I think what we feel confident, though, is that because of the fact that so much of the Internet sits behind us and inherently those agents are going to be passing through us, that we have an opportunity to help define what those rails are that the agents will ride on and take some fee from those transactions as we've helped facilitate them and make them faster, more reliable, more secure. Give people the access to those rails. So I think it's too early for us to model exactly what that looks like in terms of revenue. Way too early. Right now what we are playing for is very much around how do we just get as much adoption as possible? How do we make sure that we are the universal translator, regardless of what protocol someone uses, whether it's MCP or the protocol coming out of Google or what's coming out of Microsoft, we want to make sure that no matter what it is that we work with it. And again, I think that we're in a unique strategic position because of how much of the Internet does sit behind us.
Got it. It's great to see the fast-paced innovation. And so we'll stay tuned on how these models evolve.
Thank you. The next question comes from Andy Nowinski with Wells Fargo. Your line is open.
Okay, good afternoon. Thank you for taking the questions and I extend my congrats as well on a great quarter. So We saw on the news, you know, how Cloudflare blocked the number of record-breaking DDoS attacks this quarter and while your WAV, your DNS and your DDoS solutions are your Act 1 products, they seem to be being an inflection just like your newer Act 2 and Act 3 and Act 4 solutions. So Matthew, I also saw on Axe that chart you posted about you know, one of those massive attacks that consumed only a few percentage points of your network capacity while it consumed about half the capacity of your competitors. So I'm just wondering if you could maybe talk about the Act 1 segment of your portfolio and what's happening there.
Yeah, we love the Act 1 products and they, I think, are probably the easiest way to see the fundamental architectural advantage that Cloudflare has over really everybody else in the space. The way that most of our competitors try and deal with these problems is they set up specific scrubbing centers that have a certain amount of capacity. Those scrubbing centers are not always optimized for the best performance, so traffic is not routed through them all the time, only when an attack takes place does it switch over. That means that, one, it inherently has a cost to route that traffic through. Two, there's an inherent latency when you switch the traffic over because something has to change. And then three, those scrubbing centers just from a pure capacity planning basis, they have to be a limited size and they have to keep up with whatever the sort of latest new attacks are. We took a very different approach from the beginning. And the way we've always talked about this is every single server that makes up Cloudflare's network is capable of running every single service. And that's a really big deal that I think sometimes people don't appreciate because it's a fundamentally different architecture than anyone else in the market has in place. It took a lot more work, a lot more engineering to make that work. What that then means is that across all of Cloudflare's network, there are no scrubbing centers. Every machine is capable of dealing with WAF requests, is capable of dealing with DDoS requests. And what that means is that under normal circumstances, when we're not under a massive attack, there's a lot more traffic that's flowing out of our network because we're cashing proxy than is flowing in. And the way you pay for bandwidth is on the greater of in versus out. And so, unlike anyone else, when we receive these attacks, not only do you have the capacity to deal with them, but they don't actually change the underlying cost structure of our business because even with these major attacks, it doesn't actually drive up our bandwidth usage. And so that fundamental architectural change where we have built the hard systems, the hard technology systems to be able to deal with any of our services being launched anywhere, I think that shows up in terms of our ability to win customers in those Act 1 products. But that same architecture, that same work that we did to be able to stop those big attacks is also what allows when somebody is signing up for our Zero Trust services to make sure that they don't just have good service in major metropolitan areas, but if their CEO is on vacation in Rwanda, we've got facilities in Kigali and we can deliver the Zero Trust services from there. If you deploy something with Cloudflare workers, it will scale up because your code as a customer of ours also has the ability to run on literally every server across all of Cloudflare's network. And that lets us scale up and then also scale down incredibly quickly. And so that architectural change is what has allowed us to win in that Act 1 product, a set of products, but it is that same architectural change that also is allowing us to win in Act 2 and Act 3 as well.
That makes sense. That's very helpful. Thank you, Matthew. Maybe a quick follow up for Thomas. I think you said you surpassed $2 billion in ARR this quarter, which looks like you're still on track to reach that $5 billion target in FY28. I'm just wondering if you could talk about the path you're on relative to your expectations. Thank you.
I would say we're tracking well to our expectations. We were optimistic entering the year when we gave guidance for the year and reiterated during our investor day that the signs we are seeing in terms of the progress we are making, whether it's success with large customers, pool of funds, deals, variable revenue, and especially the progress the -to-Market team is making in terms of increasing sales productivity and increasing sales capacity overall, makes us confident that we would reaccelerate and now the second quarter is a good proof point to it. A large part of the performance in the second quarter was coming from pool of funds, deals, and variable revenue. We are tracking well to our expectations there. So I would just say that we are tracking well to our plans and are quite confident that the momentum we have generated so far is going to play well into the second half of this year. Great. Thanks, guys.
The next question comes from Matt Hedberg of RBC Capital Markets. Your line is open.
Alright, thanks for taking my questions and I'll offer my congrats as well. Matthew, in your prepared remarks, it was a really good update on some of the -to-Market improvements. It feels like that. And it is in some of the technology improvements are driving this reacceleration. I guess maybe dig in a little bit more specifically there. How do you think some of these changes are impacting your ability to land larger deals? You gave a number of examples this quarter and obviously there was a large deal last quarter. And then maybe as a quick follow up, could you give us an update on some of the partner momentum and perhaps is that helping with some of these large deals as well?
Yeah, thanks, Matt. I think that we for a long time were very much a product led growth company where we let the products stand for themselves. And that was the primary thing that we did. And I think as a product led growth company, you can get to you know, big, big ish deals, million dollar deals, but it's really hard if you're signing five, 10, 20, last quarter, our first hundred million dollar deal. It's hard to do that just with pure product led growth. And so what I think I have been just really, really impressed by the work that Michelle, that Mark, that our entire go to market team has done to really build the relationships with buyers where they understand the total capability of the platform. And so every time you hear that somebody is signing up for a pool of funds deal, what they're really betting on is they're betting on cloud flair, they're betting on the broad product suite that we have, and they're betting on the ability for us as a team to continue to execute. And that I think is coming through quarter after quarter after quarter. And it's been I think it's been just really astonishing to see how we upgrading our team now have, you know, the real go to market athletes to be able to go out, explain the value that cloud flair has, explain how the ROI for our products are. And then they're leading that and then the great products are what follow behind. In terms of partners, you know, Mark and the sales team have really sort of reoriented cloud flair to be a partner first sales strategy. And you can see that our partner growth from the partner sales channel is growing faster than the rest of the business. I don't think that we'll ever get to, you know, 90% plus that you see from the likes of a Cisco or even a Zscaler. But I do think that we were under what is the right level for us and that that will continue to outpace the rest of innovation. I'm spending a lot more of my time interfacing with partners, understanding, you know, what their priorities are, making sure that we are a good partner to them. And that is just have to be key as we continue to go up market and find those larger and larger deals. The partners are behind many of the large deals that we have. They'll continue to, we will continue to prioritize them. And the leadership that Michelle and Mark have brought in to run our partners organization is truly, truly, truly world class. Thanks, Matthew.
The next question comes from Gabriella Borges with Goldman Sachs. Your line is open. Hey, good afternoon. Thank you,
Matthew. I wanted to revisit your comment on paper crawl and specifically catalyzing adoption. So talk a little bit about what the friction points can be in some of these conversations, particularly with the AI core and the front-chain models. And is the decision maker for an Act 4 type product the same decision maker as an Act 1, Act 2 product? How do you build sponsorship across different property organizations to catalyze Act 4? Thank you.
Yeah, so I wasn't surprised that publishers were excited about what we were doing. And we literally haven't encountered a publisher that wasn't 100% all in on what we were proposing. And it's been just amazing to build those relationships. I was surprised by the reaction from the AI companies. I thought that they would kick and scream quite a bit more than they did. And quite the opposite. I think they all understand fundamentally that content, original content, valuable content, is the fuel that runs their engines. A way of thinking of this is, there are really three legs of the stool that you need to have in order to be an AI company. You've got to have GPUs or TPUs or whatever that is. And someone like OpenAI reportedly spends over $10 billion a year on that GPU access. You've got to have great talent that understands this new area from a research and scientific perspective. And we've all seen the headlines about how between Facebook and OpenAI and Apple and others, that there's this real war for that talent. And the AI companies are spending billions of dollars on salaries for that. But the third thing that you need is you need great content. You need great original content. And forever, or for quite some time, there's just been an assumption that that will be free. And in the world of search engines, maybe that was okay. But we aren't building search engines anymore. We're building answer engines. And the difference between a search engine and an answer engine is a search engine directs you to that content where you can go and the content creator can monetize it. An answer engine answers without you having to leave. And so there has to be some value creation back to content creators that isn't just based on traffic. And again, I know with a notably few set of exceptions, the AI companies understand that. And I think that you can see that reflected in some of the comments that have come out of the major tech companies, as they said, we have to make sure that we support the ecosystem. The key point, though, and I think this is this is what is the most important work that we have to do. The key point is that there needs to be a level playing field. It can't be that one company has a unique advantage in getting content where others don't. And so what we are now really working on is making sure that as we figure out what the market looks like going forward for this, that it is a level playing field, that new startups have an opportunity to exist. That just because you're a legacy provider doesn't give you some unique access to content that others that others don't have that there's a way to make sure that if you're small, you pay less. And if you're big, you pay more. And in an ideal case, there are lots of sellers into this market, the content creators, and there are lots of buyers into this market and and it can help facilitate that. I think it's interesting. In terms of the other half of your question in terms of who the who the buyer here is, you know, I think at first for paper crawl, you know, the answer is that the buyer is going to be either relatively, you know, limited, relatively limited set of the AI companies that are out there today. Or more likely, you know, it's going to be actually sort of what is going on in terms of a transaction as a piece of content is access. And that's true, whether it's access for training or whether it's access as part of delivering an answer as part of an answer answer engine. That that you see from some of the companies that are out there. And so I think it's actually it is a it is a different sort of transaction. But it is one where we feel like we have relationships with the right people. We're having the right conversation. And again, my my biggest surprise of the last several weeks has been that the AI companies actually are saying, yes, we need to figure out a way to support the ecosystem. But we need to make sure that there's a level and fair playing field. And again, I think that's a place where class layer can help play a really pivotal role.
Yeah, makes sense. Thank you. The the follow up here is on media within the board of construct of publishing and your comments that this has been on the penetrated in the past. Talk to us a little bit more about how media goes from being a less attractive vertical for you to more attractive vertical, particularly given some of your curious about challenges with renewals in the CDM space and pricing and negotiations and things like that.
You know, I think. It may be that this is so strategic that that we really just won't optimize on how do we extract as much from media companies. You know, I think we've looked if you look at cloud large business writ large, not just media companies. One of the things that I think investors have often had questions about is why do we have a free service? Like, why would we give service away for free? And there's a huge number of benefits that we get from that. But it very well may turn out to be the case. That the collection of free users using cloud flare end up being more valuable than the collection of enterprise users using cloud flare. Because that content which is there is something which has unique access that long tail of content with with gems that are part of it. It's something that as AI companies need to build powerful systems that that really represent the sum total of human knowledge. They need to have access to those those gems. And if we can do something where, you know, you sign up for cloud flare and it's less about you paying us and more about us actually helping you get paid. That's actually, I think, something which is incredibly powerful, regardless of what what you know, revenue we're able to capture for, you know, our act one act two or three services.
Thanks for the detail. The next question comes from Patrick Colville with Scotiabank. Your line is open.
All right. Thank you for taking my question. This one is for Matthew. We had a very large foundation model vendor publicly call out cloud flare as a third party sub processor. So I thought was really interesting, given the Undoubtedly explosive growth we're seeing in that category in 2025. So I guess not to go into specifics of that relationship. But can you talk about how cloud flare Can deepen its relationships with foundation model vendors and then which products can cloud flare. Into these foundation model vendors. Thank you.
Yes, thanks. Thanks, Patrick for I think was it was an interesting question. Um, as you said before, you know, our best estimate is that about 80% of the major AI companies are cloud flare customers today and they they they use us across A couple different services and I'll highlight. I'll highlight to. So the first is security. The challenge. If you put up a foundational model is every time that somebody runs a request against that model. It has real cost to you, you know, and as measured in not fractions of pennies, but often in pennies. And so if somebody who can find a way to Run request against your model at a very high volume or in a way that you can't control or in a way that is automated and not actually what your subscriber is doing. Or if they can find a way to do things like longer credit cards that the credits and the tokens on these AI models. Now act almost as a currency that allow people to take stolen credit cards and turn that turn it into effectively cash. All of those are unique security threats. That that makes cloud flare just a great partner for those AI companies that we can sit in front of That that I think is is is where most of them start with us. What we are finding, though, is that increasingly Because of the fact that we have deployed GPUs across our entire network and made it so that we can do inference. As close as possible to their users as we are all going from, you know, seeing these chat GPT like systems as as miracles. And starting to take them for granted. There's a real need for them to get the best performance as possible. And one of the most effective ways of doing that is moving the inference closer to where the user is at the same time increasingly as we see regulations spring up around the world. The targeting AI companies, they need to keep the inference tasks as close to users as possible to meet those regulatory needs and so cloud flare workers AI. Gives them the ability to run inference tasks as close as possible to to to users, we would not be today the right place for, you know, a one of the really massive LLM to run because those in many cases will will require Multiple different machines working in coordination is that it is a it is a more complicated task, but for smaller models. We're finding that cloud flare is the best place for anyone who's building that to run that and over time. We're investing in making our systems able to support larger and larger and larger models. And so I think that we are unique in being able to do inference on a global scale almost anywhere in the world. And that is a place where If the AI companies start coming to us for security, they quickly then learn that they can get benefits from some of our workers products as well. Does that make sense.
Crystal clear and you know congrats on on that partnership. It's, it's undoubtedly really exciting. I guess my follow up. Can I just ask about one of the big news items of the week. We clearly have earnings is a big news item, but the power buying cyber rock was the other one. Our thinking is that the strategic rationale is for power to have a play in the genetic AI security, I guess. Can you mind us how cloud that thinks about agenda case security and Whether that can turn the, I guess, the financial meter at some point this year or was it more of a kind of 2026 thing.
Yeah, you know, I think, first of all, You can dispute that that Palo Alto Networks is just an iconic company and doing a great job. Mark Anderson. You know, built a lot of their, their go to market engine for us and their company that we have long looked up to. They have a very different strategy. For R&D than we do, where a lot more of their ideas through through acquisition and what we hear from customers is that when you try to stitch together a bunch of things you end up You know, not really with a platform, but with a Frankenstein and that and that that creates actually seems and gaps in security. It also just makes it makes for a very Sort of complicated and expensive set of systems to try and try and stitch together. For us, you know, we really will never say never that we won't do a big acquisition, but, but I think we really have an incredibly high hurdle rate. For any anything that we do in terms of acquisitions and we really believe in internal innovation internal R&D. First and foremost, and so we Everything when we talk about how we can power the agentic web security is inherently going to be a big piece of it. And those agents, because so much of the internet already sits behind Fosler those agents are going to flow through us. And so providing the guardrail providing the rule enforcement. Those are all products that we already have in market. That are that are that are there and waiting for as these systems develop and and again, I think that the problem isn't isn't the product. The problem is, is just, you know, we're, we're, we're all living a little bit in the future. Of what of what this is going to be, but we have the technology. We have the product and we have got that through our own internal and seamless development as opposed to through a series of R&D acquisitions.
Excellent. Thank you, Matthew and keep up the good work.
The next question comes from Adam Borg with Stiefel. Your line is open.
Awesome. And thanks so much for taking the question. Maybe just for Matthew on app to with SASE. So it was great to see you moving into the visionary quadrant. Gotner single vendor SASE magic quadrant this year and you talked earlier about a win back deal that you lost 18 months ago. So maybe just take pictures, talk a little bit more about Cloudflare one competitively what you're hearing from customers that are seeing in the market. Thanks so much.
Yeah, I, you know, I, I think that when we think about Gartner and Forrester, you know, our, our, our strategy, like I tell the team regularly if the very first time we we appear on one of those those charts were on the top right that we waited too long to launch the product. We like to get products in the market as quickly as possible, get user feedback from our broad set of users and innovate faster than than anyone else. And so if you measure effectively the hypotenuse of any of the change for us in any of these charts, you see that that we have that's sort of the fastest way to measure Cloudflare's innovation and I'm proud of the team at how rapidly they're they're innovating in this in this space. We love the fact that when customers give us a chance in this space that that we have, you know, a great ability to win those customers because we're faster because we're easier to deploy because we can deliver a much higher ROI to customers. When we're in the mix, we like the fact that we we win and oftentimes we're winning back deals that we earlier had had lost or we're taking deals actually away from those first generation SASE or Zero Trust vendors that are that are in the market. And so I think what has held us back has been really awareness and both the the partner first motion which Mark and the go to market team are putting in place as well as things like showing up in in Cartner and Forrester that we're we're you know today we're now neck and neck with with Zscaler in the space. I think that's the indication of how we're going to perform and it reminds me a lot of with our Act One products, you know, when we first launched, you know, people would say, oh, you'll never be able to catch, you know, Imperva. They invented WAF. You'll never be able to do that or you'll never be able to catch, you know, Arbor or whoever, you know, within that space. We we're just really good at innovating and I think over time that plus an underlying cost advantage is the recipe for winning in a category.
That's great. Maybe just as a super quick follow up, obviously, given the 20% of the Internet you cover, you've talked in the past about crystal ball that you see any commentary on the macro that you're seeing. Thanks so much.
You know, I think that I think that it's that there is somewhat of a just a disjointedness out there where we're seeing, you know, places where there's really strength and performance and we're seeing others that are that are struggling and I'm I'm I feel very fortunate that even as we have kind of a very uncertain world, people are continuing to see the value that Cloudflare can bring to how we can accelerate their businesses, deliver real security and and I think that we continue to be able to perform regardless of what the crystal ball shows. Excellent. Thanks again.
The next question comes from James Fish with Piper Sandler. Your line is open.
Hey guys, nice quarter. Thanks for the questions here, but I know we talked about AI all the time, but maybe just shifting off of AI a little bit. Is there a way to think about more the broader workers platform directly in terms of how you guys are thinking about capturing workloads that had previously been on a hyperscaler or on trimis versus kind of brand new workloads? What are you seeing on that work? Workers core side of things.
Yeah, you know,
Jim,
the it's. It is there. There are a certain set of of of workloads that just work really well on us and what what we found is. Oftentimes, the best way to get our foot in the door is not to say hey, move your whole application. But to say take one function that's a part of your application that is that is particularly mission critical or particularly latency sensitive. And and move that one function over and so that that then tends to get people familiar with the workers platform. And once they see how they can save significant amounts of money, they can get much better performance. They can have, you know, inherent security. From it, even if it's just moving one function over out of out of a larger application that let us have a toe in the door that let's us build that that relationship. Over time, and I think that what we've what we've learned is that as we do that. It then becomes easier for us to say, okay, let's look at some of the really big spend that's out there and how we can transition that away from from the hyperscalers. And so, you know, we think that with our sort of act one product. You can get, you know, seven figure deals with our act two, five, eight figure deals with our act three products. We really think that there, there are a lot of nine figure deals. That are out there as we are as we are able to take from from hyper scalers or Thomas likes to say that the best way to win $100 million deal. Is to have it save save the customer $100 million off what they were spending with with one of the hyper scalers and and that I think it's going to be a big Driver of us winning more of those workloads. As we talked about investor day also, you know, we've we've Mark has formed a speedboat with with Ali cabal who Previously ran workers on the product side. She said that she really wanted to go and dive in and and and run this from The go to market side and and she and the team that she's assembled are just extraordinary at targeting specific customers. Helping them see how they can get benefits moving away from one of the hyper scalers to cloud layer and winning more and more of those customers. And so I think that's that's something that's really been been working extremely well over the last few quarters.
Got it. And just as a follow up. I know you guys talked about the state when but we're all certain to think about, you know, the end of the federal cycle here and the impact of those. So I guess, what are you guys seeing on on this Fed ramp. Aspect that you guys have had for a few years now. What are you guys seeing in terms of trends and what that could look like heading into your end. Thanks, guys.
Yeah, so Fed ramps a priority for for us. We're on track to get get to the point that we've met all the requirements before the end of this year. And once we do that, we can we are unrestricted in terms of the business that we can go after in the federal government.
And the final question comes from the line of Roger Boyd with UBS. Your line is open.
Awesome. Thank you for taking the question. I wanted to come back to pull funds and I'm just wondering if you could provide a little more color around the trends you're seeing both from a bookings perspective, but also consumption perspective and. Just run a level set where we are in terms of the offsetting headwinds and tailwinds. It feels like it's becoming more of a net tailwind here, but we love to get your perspective. And I guess the second part of it is. The standout metric to me was a three point improvement to dollar net retention in the quarter. So what degrees should we attribute the success there to some of the ramping consumption against pool funds. Thanks.
Yeah, let me get started. So pool funds deals with our largest customers represented low double digit in the in the second quarter up from less than 3% a year ago. So significant progress. As we get more mature, we get better visibility and how we track, I would say, across all pool of funds deals we are tracking on if not slightly ahead of target. And one of the results you see because of that is that variable revenue coming from consumption of existing customers was a good contributor to the outperformance in the second quarter. And with that, the tailwind we saw in DNR. We've been talking about bottoming out. We've seen that that that would happen. And now with the superior execution on pool of funds and us getting more comfortable with this go to market instrument, we are seeing there, we are harvesting the tailwinds of that business.
Right and Roger, I don't have anything to add other than I appreciate you asking a question that Thomas could answer. So I wasn't alone strutting and fretting up here on the stage.
You're most welcome.
This concludes the question and answer session. I'll turn the call to Matthew Prince for closing remarks.
I'm incredibly proud of the entire cloud for team and how we've been executing over over this, you know, just really interesting time. Lots of things are changing and how the internet works. Lots of things are changing in terms of AI and the fact that we can be at the center of all of these amazing trends and help shape what that future looks like is something that just makes me more excited about cloudflash future than I've ever been. So thank you to the entire team. Thank you to our customers. We'll see you all back here next quarter.
This concludes today's conference call. Thank you for joining. You may now disconnect.