Cloudflare Registrar Review 2026
Overall 9.2Evaluated from Cloudflare Registrar's published documentation and the pricing rows we track for it, not from hands-on account testing, then scored on renewal pricing, WHOIS privacy, DNS tools, security, support, transfer experience, and TLD coverage. How we test and what we have tested so far →
Verdict
At-cost renewal pricing, exceptional DNS, and strong security make Cloudflare Registrar the best long-term value for technical users.
Score breakdown
How to read these scores. The numeric scores on this page are derived from our published methodology weights applied to documented registrar facts. They are not the output of hands-on purchase, transfer and support testing, which we have not yet run. Treat them as a structured summary of the facts, not as a test result. The facts and prices underneath them each carry their own source and date.
| Category | Score (0–10) | Bar |
|---|---|---|
| Overall | 9.2 | |
| PricingEditorial judgementWe hold no verified .com price for Cloudflare Registrar, so this score is not backed by pricing we collected. | 9.8 | |
| RenewalsEditorial judgementWe hold no verified .com price for Cloudflare Registrar, so this score is not backed by pricing we collected. | 10.0 | |
| Pricing transparencyEditorial judgementNo verified catalogue for Cloudflare Registrar, so first-year-versus-renewal behaviour is unmeasured here. | 9.5 | |
| WHOIS privacyFrom published documentationWHOIS privacy: Free, included; redacted by default. | 9.5 | |
| DNSFrom published documentationDNS: Industry-leading anycast DNS with deep developer tooling. | 10.0 | |
| Security / 2FAFrom published documentationTwo-factor authentication: TOTP and security keys (WebAuthn). | 9.5 | |
| SupportFrom published documentationPublished support channels: Ticket support, Community, Enterprise plans for phone. Channel availability is documented; we have not published timed response measurements. | 7.0 | |
| Transfer experienceEditorial judgementWe have not published transfer timings for this registrar. This score reflects documented transfer policy and our reading of it, not a measured run. | 9.0 | |
| TLD / ccTLD coverageFrom published documentationCoverage per the registrar's own material: Limited TLD list focused on common gTLDs and select ccTLDs. We hold no verified prices to corroborate it. | 6.5 | |
| Developer tools / APIFrom published documentationA public API is documented, alongside bulk management tools. We score the documented surface, not measured API reliability. | 9.5 | |
| Beginner UXEditorial judgementNo usability testing has been published for this registrar. This is a judgement from the account interface and documentation. | 7.0 |
Why this score? At-cost renewal pricing, exceptional DNS, and strong security make Cloudflare Registrar the best long-term value for technical users.
Reading the labels. Measured Derived from pricing we collected and verified ourselves. From published documentation Traced to a fact recorded from the registrar's own published material. Editorial judgement A judgement. We have not published a measurement behind this number.
- Developers
- At-cost renewals
- Cloudflare DNS users
- First-time domain buyers
- Wide ccTLD coverage
- Premium TLDs
Pricing
| TLD | First-year | Renewal | 10-year cost | Transfer | WHOIS privacy | Checked |
|---|---|---|---|---|---|---|
| .com | $10.44 | $10.44 | $104.40 | $10.44 | Free | 2026-05-12 |
| .net | $11.79 | $11.79 | $117.90 | $11.79 | Free | 2026-05-12 |
| .org | $10.69 | $10.69 | $106.90 | $10.69 | Free | 2026-05-12 |
| .io | $36.30 | $36.30 | $363.00 | $36.30 | Free | 2026-05-12 |
| .ai | $73.50 | $73.50 | $735.00 | $73.50 | Free | 2026-05-12 |
| .co | $24.50 | $24.50 | $245.00 | $24.50 | Free | 2026-05-12 |
These figures are sample data, not read from this registrar's own pricing page, so they are not on a refresh cadence, they are flagged for review past 90 days instead. Rows here span 41 days between oldest and newest, which means part of this catalogue was re-read more recently than the rest. 12 of 12 rows are individually past the 90-day review line. Freshness describes when we last read a price, not whether it is right. How we check prices · freshness data
How we verified this pricing
Cloudflare Registrar does not publish a per-TLD price table; it sells and renews at cost, charging only the registry's wholesale fee plus the ICANN fee with no markup. We confirmed the at-cost model from Cloudflare's own developer documentation. The per-TLD figures here are therefore model-derived (registry wholesale + ICANN $0.18) rather than read off a Cloudflare price list, so the record stays verified=false until each registry wholesale fee is independently sourced.
Source: https://developers.cloudflare.com/registrar/
Last verified: 2026-06-22
Renewal pricing explained
Editorial judgementWe have not verified any Cloudflare Registrar price against its own published pages, so there is no renewal analysis here to give. The general point still applies: a first-year price is paid once and a renewal is paid every year after it, so the renewal is the figure that decides what a domain costs to hold.
Until we can read this registrar's prices ourselves, compare the renewal column in its cart against the verified figures on our cheapest-renewals page rather than against its advertised first year.
WHOIS privacy
From published documentationCloudflare Registrar documents its WHOIS privacy as: Free, included; redacted by default.
Included at no charge is the right answer in 2026, and it is close to universal among reputable registrars: which makes a registrar that still charges for it the outlier rather than this one being generous.
What privacy does is replace your name, postal address, phone number and email in the public record with the provider's forwarding details. What it does not do is hide the registration from the registrar, the registry, or a court order, and it does not stop a domain being linked to you by other means. Since GDPR, most registries also redact personal data by default regardless of what the registrar sells, so for many extensions the privacy product is a smaller addition than it was. Our WHOIS-privacy sub-score for Cloudflare Registrar is 9.5, based on the documented policy.
DNS tools
From published documentationCloudflare Registrar describes its DNS as: Industry-leading anycast DNS with deep developer tooling.
Anycast means the same DNS records are answered from many locations at once, which shortens lookups for distant visitors and absorbs traffic that would overwhelm a single server. It is the meaningful difference between a DNS product and a DNS checkbox. We have not recorded ALIAS or ANAME support here. That matters if you need the apex of your domain to point at a platform hostname rather than an IP address, which most hosted site builders and store platforms ask for: check before committing.
A public API is documented, so DNS records here can be managed from a script rather than a dashboard. Remember that the registrar and the DNS host do not have to be the same company: you can keep a domain here and point its nameservers anywhere. Our DNS sub-score for Cloudflare Registrar is 10.0, based on documented capability rather than measured resolution times.
Security and 2FA
From published documentationCloudflare Registrar documents TOTP and security keys (WebAuthn) for account access.
Hardware security keys are the meaningful distinction here, and almost nothing else in this category offers them. A key proves it is talking to the real site before it releases anything, so it defeats the phishing page that captures a code from an app and replays it within the minute. If you hold domains worth stealing, this is the single feature most worth moving for.
Whatever the method, the registrar account is the domain's real perimeter: anyone inside it can change nameservers and start a transfer. Turn on the strongest option offered, keep the registrant email on an account with its own two-factor, and check the domain lock is set. Our security sub-score for Cloudflare Registrar is 9.5, based on the methods it documents rather than on a penetration test.
Support channels
From published documentationCloudflare Registrar publishes 3 support channels: ticket support, community, enterprise plans for phone.
Live channels are available but not around the clock, so a problem outside business hours waits. For a domain that fronts a business, weigh that against the price difference before choosing on cost alone.
What we have not done, and will not imply: we have not timed responses on these channels or run test tickets. The support sub-score of 7.0 reflects the channels published and their stated hours, not measured response times. Treat published availability as a claim by the registrar until someone has tested it.
Transfer experience
MeasuredTransferring a .com in to Cloudflare Registrar costs $10.44 against its renewal of $10.44. For most gTLDs a transfer adds a year to the registration rather than resetting it, so that fee buys a year rather than only paying for the move.
The process itself is the same everywhere and the constraints are ICANN's, not the registrar's: unlock the domain, get the authorization code from the losing registrar, and enter it at the gaining one. A gTLD cannot be transferred within 60 days of a registration, a previous transfer, or a change to the registrant contact, that last one catches people who tidy up their WHOIS details first and then find the domain locked for two months.
We have not run a transfer in or out of Cloudflare Registrar, and we do not have testing notes for it. Everything above is computed from prices we verified or from ICANN's published transfer policy, not from watching a transfer complete.
TLD and ccTLD coverage
Limited TLD list focused on common gTLDs and select ccTLDs
Developer and agent access
The most agent-ready API in the set: the only registrar here with scoped, revocable API tokens and a published OpenAPI reference, on a generous account-wide limit. No sandbox, you test against the live account.
- Auth model
- API key + scoped API tokens
- Scoped API tokens
- Yes(1 of 7 measured)
- OAuth delegation
- No(0 of 7 measured have it)
- Outbound webhooks
- No
- Sandbox
- None published(3 of 7 measured have it)
- Machine-readable API spec
- developers.cloudflare.com/api/(1 of 7 measured)
- Rate limit
- 1,200 requests / 5 min per account
- Account-level audit logs
- Yes(1 of 7 measured)
Cloudflare Registrar API documentation · API availability read from the registrar's documentation.
Figures in brackets are Open Domain Data's 2026-Q3 landscape edition, over the 7 registrars it measures, not the registrars this site tracks. Full API-access comparison.
No official MCP for the registrar. Cloudflare ships MCP servers for other parts of its platform and its Registrar API is the most agent-ready in the set (scoped tokens, a published OpenAPI reference), but there is no first-party MCP that drives domain registration or management.
Cloudflare Registrar API-capability facts and the cohort figures beside them derived from Open Domain Data (CC BY 4.0), dataset version registrar_api_capabilities@2026.06, registrar_landscape@2026-Q3, agent_capability_signals@2026.05. Open Domain Data publishes neutral facts under an open license; it does not produce or endorse this site's scores and rankings.
DNS capabilities
Upstream facts from Open Domain Data, shown with the source behind each field. These are capabilities, not our assessment: our own view of Cloudflare Registrar's DNS is in the score breakdown.
| Capability | Cloudflare Registrar |
|---|---|
| DNSSEC | Supported Independently testedOne-click DNSSEC on Cloudflare-hosted zones; DS records exposed for the registrar to publish. developers.cloudflare.com/dns/dnssec/ · checked 2026-05-27 |
| ALIAS / ANAME at the apex | Yes |
| DNS records over an API | Yes Independently testedFull DNS records API (list/create/update/delete) confirmed against a live zone. developers.cloudflare.com/api/resources/dns/ · checked 2026-05-27 |
| Minimum TTL | 60s |
| Record types | AAAAACNAMEMXTXTSRVCAANS |
CAA records are supported by every registrar in this dataset, Cloudflare Registrar included, so the row is stated here once rather than repeated as a distinction that does not exist.
Record last checked upstream: 2026-05-27 · overall basis: Independently tested
Open Domain Data publishes this table for 7 of the 23 registrars this site tracks. A registrar missing from it has not failed a check: the upstream catalog has not covered it yet. See the data page for the dataset versions in use.
Cloudflare Registrar DNS capability facts (DNSSEC, record types, minimum TTL, API record management) derived from Open Domain Data (CC BY 4.0), dataset version dns_capabilities@2026.06. Open Domain Data publishes neutral facts under an open license; it does not produce or endorse this site's scores and rankings.
RDAP endpoint
RDAP is the structured, JSON successor to WHOIS, and this is where Cloudflare Registrar answers it. Look a domain up without querying it yourself, or read what RDAP is.
- Base URL
- https://rdap.cloudflare.com/rdap/v1/Independently testedBase URL from the IANA registrar-ids registry; aligned to the registrars-dataset rdap_base. Endpoint live-probed 2026-06-25 (cloudflare.com) and returned a valid RDAP domain object. www.iana.org/assignments/registrar-ids/registrar-ids-1.csv · checked 2026-06-25
Every registrar in this dataset, Cloudflare Registrar included, reports the same two things, so they are stated here once rather than as rows implying a difference: conformance rfc7483, the base RDAP response format, and an endpoint published in the IANA registrar-ids registry, which is what makes it discoverable without knowing it in advance.
Record last checked upstream: 2026-06-25
Open Domain Data publishes this table for 7 of the 23 registrars this site tracks. A registrar missing from it has not failed a check: the upstream catalog has not covered it yet. See the data page for the dataset versions in use.
Cloudflare Registrar RDAP endpoint facts derived from Open Domain Data (CC BY 4.0), dataset version rdap_metadata@2026.06. Open Domain Data publishes neutral facts under an open license; it does not produce or endorse this site's scores and rankings.
Abuse and security contacts
Where to report a compromised domain, phishing, or a vulnerability. Upstream facts from Open Domain Data, with the record each was read from.
| Contact | Cloudflare Registrar |
|---|---|
| Abuse email | From public sourcesAbuse contact published on Cloudflare's abuse page. www.cloudflare.com/abuse/ · checked 2026-05-25 |
| security.txt (RFC 9116) | Published From public sourcesRFC 9116 security.txt present at the .well-known path. www.cloudflare.com/.well-known/security.txt · checked 2026-05-25 |
| Published abuse policy | www.cloudflare.com/abuse/ |
"Not established" and "not published" are different facts and are kept apart here. Two registrars in this dataset return an HTTP 403 anti-bot response at the security.txt path, which is not the same as the path returning 404. Every ICANN-accredited registrar is required to publish an abuse contact and to act on reports; where this table cannot show one, check ICANN Lookup for the registrar abuse contact in the registry record.
Record last checked upstream: 2026-05-25
Open Domain Data publishes this table for 7 of the 23 registrars this site tracks. A registrar missing from it has not failed a check: the upstream catalog has not covered it yet. See the data page for the dataset versions in use.
Cloudflare Registrar abuse and security contact facts derived from Open Domain Data (CC BY 4.0), dataset version registrar_security_contacts@2026.06. Open Domain Data publishes neutral facts under an open license; it does not produce or endorse this site's scores and rankings.
- At-cost renewal pricing, no markup on wholesale
- Best-in-class DNS performance
- Strong security defaults
- Smaller TLD selection than full-service registrars
- Support is ticket-based for non-enterprise
- No phone or live-chat support outside Enterprise
Alternatives
Compare and switch
FAQ
Is Cloudflare Registrar a good domain registrar?
Does Cloudflare Registrar offer free WHOIS privacy?
What 2FA options does Cloudflare Registrar support?
Does Cloudflare Registrar have an API?
How much does a .com renewal cost at Cloudflare Registrar?
Has Cloudflare Registrar been hands-on tested?
Changelog
- 2026-05-27Facts updated to remove the outdated 'transfer-only' claim.
- 2026-05-27: Full review refreshed.
- 2026-06-22: Pricing re-checked.
Corrections are applied within 7 business days and noted here: corrections policy. Site-wide record: /changelog/.
Sources
- https://www.cloudflare.com/products/registrar/, pricing, read from this page
- ICANN accredited registrar list, accreditation
- https://en.wikipedia.org/wiki/Cloudflare, company background
- https://www.best-domain-registrars.com/methodology/, how this score was produced
Registrar identity facts (name, website, country, accreditation status) derived from Open Domain Data (CC BY 4.0), dataset version registrars@2026.06. Open Domain Data publishes neutral facts under an open license; it does not produce or endorse this site's scores and rankings.