Cloudflare Docs
Cloudflare for Platforms
Cloudflare for Platforms
Edit this page on GitHub
Set theme to dark (⇧+D)

Cloudflare for SaaS

Cloudflare for SaaS allows you to extend the security and performance benefits of Cloudflare’s network to your customers via their own custom or vanity domains.

As a SaaS provider, you may want to support subdomains under your own zone in addition to letting your customers use their own domain names with your services. For example, a customer may want to use their vanity domain app.customer.com to point to an application hosted on your Cloudflare zone service.saas.com. Cloudflare for SaaS allows you to increase security, performance, and reliability of your customers’ domains.

​​ Benefits

When you use Cloudflare for SaaS, it helps you to:

  • Provide custom domain support.
  • Keep your customers’ traffic encrypted.
  • Keep your customers online.
  • Facilitate fast load times of your customers’ domains.
  • Gain insight through traffic analytics.

​​ Limitations

If your customers already have their applications on Cloudflare, they cannot control some Cloudflare features for hostnames managed by your Custom Hostnames configuration, including:

  • Argo
  • Early Hints
  • Page Shield
  • Spectrum
  • Wildcard DNS

​​ How it works

As the SaaS provider, you can extend Cloudflare’s products to customer-owned custom domains by adding them to your zone as custom hostnames. Through a suite of easy-to-use products, Cloudflare for SaaS routes traffic from custom hostnames to an origin, set up on your domain. Cloudflare for SaaS is highly customizable. Three possible configurations are shown below.

​​ Standard Cloudflare for SaaS configuration:

Custom hostnames are routed to a default origin server called fallback origin. This configuration is available on all plans.

Standard case

​​ Cloudflare for SaaS with Apex Proxying:

This allows you to support apex domains even if your customers are using a DNS provider that does not allow a CNAME at the apex. This is available as an add-on for Enterprise plans. For more details, refer to Apex Proxying.

Advanced case

​​ Cloudflare for SaaS with BYOIP:

This allows you to support apex domains even if your customers are using a DNS provider that does not allow a CNAME at the apex. Also, you can point to your own IPs if you want to bring an IP range to Cloudflare (instead of Cloudflare provided IPs). This is available as an add-on for Enterprise plans.

Pro Case

​​ Availability

Cloudflare for SaaS is bundled with non-Enterprise plans and available as an add-on for Enterprise plans. For more details, refer to Plans.

​​ Next steps

Get started Learn more