Cloudflare Enterprise normally means a direct contract with Cloudflare, negotiated at volume and priced for large organizations. xCloud already holds that contract. The addon lets you put a single domain behind it for $5 a month, with none of the negotiation and no minimum commitment.

It runs on Cloudflare for SaaS. Your domain joins xCloud’s Cloudflare account as a custom hostname, so you keep your current DNS provider, leave your nameservers where they are, and add one CNAME record. Everything after that happens in your xCloud dashboard: cache rules, WAF toggles, purge, analytics, security events. You will never need to log into Cloudflare.

Below is the whole process, from buying the addon to reading your first security report.

What Cloudflare Enterprise does for your site #

Once a domain is verified, its traffic stops going straight to your server and starts coming through Cloudflare’s edge network. That changes a few things:

• Static files like images, CSS, and JavaScript are served from whichever Cloudflare location is nearest your visitor.
• Dynamic pages can be cached at the edge too, which cuts the wait before the first byte arrives. xCloud turns off local page caching when you enable this so the two do not fight each other.
• Cloudflare’s managed WAF rulesets sit in front of the site and catch emerging threats, including zero-days.
• Layer 7 DDoS attacks can be met with Under Attack Mode, which makes every visitor pass an extra check before reaching the site.
• Noisy traffic gets filtered: rate limiting on IPs that exceed the threshold, browser integrity checks on malformed requests, and a switch to block known AI crawlers.
• Images are compressed at the edge, Early Hints let browsers start fetching assets sooner, and ScrapeShield scrambles email addresses so bots cannot harvest them.
• Request counts, data transfer, and security events are reported back into your dashboard.

Activation is per domain rather than per site, per server, or per plan, so you can cover the domains that need it and leave the rest alone.

Pricing #

$5 per month, per domain. Each subscription covers one domain. Every domain and subdomain will count as separate domain. If you want several domains protected, subscribe to each one and manage them together from the Addons page.

Note: We are not providing support additional domains yet, but will be available very soon.

Prerequisites / required permissions #

• The team must be billing-enabled and eligible to purchase addons.
• The site must already exist under a server.
• The domain must be available to configure at its DNS provider.
• For manual DNS setup, the user needs DNS access for the domain.
• Production/staging must have the Cloudflare Enterprise configuration in place before domains can activate successfully.

Step 1: Activate the Cloudflare Enterprise Addon #

From your dashboard, first click on the ‘Addons’ button and then find the ‘Cloudflare Enterprise’ Addons and click on the Enable button. 

Step 2: Enable Cloudflare Enterprise on your site #

Next click on the enable button and proceed. You can activate Cloudflare Enterprise on any domains for just $5/month.

Next, choose the domain from the dropdown of the popup and click on the Pay button to pay proceed with enabling Cloudflare for this site.

You can also open the feature from a specific site at Site → Cloudflare Enterprise. Before any domains are added, the site page shows an empty state and an Enable Cloudflare Enterprise button.

Step 5. Configure the DNS Setup #

Once you are done with the payment you will see that the Cloudflare Enterprise is activated on your domain and added to the dashboard. If you have Cloudflare integrated, you will see the domain is activated instantly. If the domain is not added with Cloudflare, you will see a status showing ‘Pending Verification’. 

Next, click on the three dot icon and click on the ‘Manage’ option from the menu to complete the DNS verification and configure the Cloudflare Enterprise Addon.

Next under the Domain tab you can click on the ‘CNAME Records’ option from the dashboard. xCloud opens a DNS instructions modal showing the exact records the customer should add at their DNS provider.

Once you click on the ‘CNAME Records’, you will be able to get the records that you need to configure with your domain provider.

Once, you add the records on your domain provider, go to the Domain status tab and click on the refresh button.

It will show you the domain as active. Now you can proceed to configure other Cloudflare enterprise settings.

Step 6: Configure Cloudflare settings #

Now visit domain where you have activated the Cloudflare enterprise, and click on the ‘Cloudflare Enterprise’ option from the dashboard. Here you will see the domain you have activated for listed under the Domains tab

Next, go to the ‘Overview’ tab, here you will get the option of ‘Purge Cahce’. You can clear all cached content from Cloudflare and forces content to be fetched directly from your server right from your xCloud dashboard.

7. Configure optimization settings #

Next, open Settings tab. Here you will get Optimization options for your site. These settings apply to all Cloudflare Enterprise domains on the current site.

Optimization options:

Setting	What it controls
Early Hints	Sends 103 Early Hints so browsers can preload linked assets before the final response arrives.
ScrapeShield	Obfuscates email addresses on the website to reduce harvesting by bots/spammers.
Caching	Caches static content such as images, CSS, and JavaScript on Cloudflare’s global CDN.
Edge Page Caching	Caches dynamic pages at the edge for faster TTFB; local page caching is bypassed automatically to avoid conflicts.
Image Optimization	Uses Cloudflare Polish-style image optimization.
SSL Cipher	Controls the SSL/TLS cipher profile used between visitors and the Cloudflare edge.

8. Configure security settings #

Next, under the Security section below the optimization settings comes with many security options. These cover WAF and abuse-protection behavior for the site’s Cloudflare Enterprise domains.

Security options:

Setting	What it controls
Web Application Firewall	Blocks emerging threats, including zero-days, using Cloudflare managed WAF rulesets.
Rate Limiting	Applies managed challenges to IPs exceeding the managed request threshold.
Browser Integrity Check	Blocks requests with suspicious or missing HTTP headers commonly used by abusive bots.
Under Attack Mode	Last-resort Layer 7 DDoS protection; visitors must pass additional validation before accessing the site.
AI Crawler Blocking	Blocks known AI crawlers from scanning or collecting site content.

You can toggle on or off each of the option according to your preferences. Click Save Changes after changing any toggle or select. xCloud persists the settings for the site.

Step 10: Review Analytics: request summary #

Next Open Analytics. The default view is Request Summary.

Analytics includes:

• Range selector: Last 30 minutes, Last 6 hours, Last 12 hours, Last 24 hours, Last 7 days, and Last 30 days.
• Request summary cards: Total Requests, Served by Cloudflare, and Served by Origin.
• Time-series chart area.
• Cache status section.
• Top tables for request sources such as content types, paths, hosts, device types, countries, and edge status codes.

Step 11: Review Analytics: data transfer summary #

Under the ‘Analytics tab you will Use the toggle in the Analytics header to switch from Request Summary to Data Transfer Summary.

Step 12: Review Security events #

Next, go to the Open the ‘Security’ tab to view Cloudflare security-event reporting. Security event reporting includes:

• Range selector using the same time windows as Analytics.
• Total Events card.
• Events By Services summary.
• Time-series security-event chart area.
• Top event tables: IP addresses, user agents, paths, countries, hosts, and HTTP methods.

Step 13: Manage all Cloudflare Enterprise domains from the global addon page #

You can manage all your domains from one place under the ‘Addons’ page. You can just click on the three dot icon of each of the domain and Also you can delete any domain from the subscription as well from here.

FAQ #

Do I need my own Cloudflare account? #

No. Your domain joins xCloud’s Cloudflare account as a custom hostname. Everything is managed from your xCloud dashboard, and you never log into Cloudflare.

Do I have to change my nameservers? #

No. Keep your domain at its current DNS provider. You only add the CNAME records xCloud shows you in the DNS instructions modal.

How much does it cost? #

$5 per month, per hostname. Each subscription covers a single domain. Subdomains are counted separately, if you want to use Cloudflare Enterprise for each domain

Is it per site, per server, or per domain? #

Per domain, and that includes subdomains. Every hostname you want behind Cloudflare Enterprise needs its own $5/month subscription, so example.com, www.example.com, and shop.example.com would each be a separate purchase.

Why does my domain say “Pending Verification”? #

It means the CNAME records aren’t visible yet at your DNS provider. Add the records shown under Domain → CNAME Records, then open the Domain Status tab and hit refresh. If your Cloudflare account is already integrated with xCloud, the domain activates instantly and you can skip this.

Will this conflict with xCloud’s page caching? #

No. When you turn on Edge Page Caching, xCloud automatically bypasses local page caching so the two layers don’t fight each other.

Do the settings apply to one domain or all of them? #

The Optimization and Security toggles apply to every Cloudflare Enterprise domain on the current site. Remember to click Save Changes after any toggle or dropdown change.

How do I clear the Cloudflare cache? #

Open the Cloudflare Enterprise section for the domain, go to the Overview tab, and use Purge Cache. It clears all cached content and forces the next request to fetch from your server.

Can I remove a domain later? #

Yes. On the Addons page, click the three-dot icon next to the domain and delete it from the subscription.

What happens if I delete the CNAME records? #

Traffic stops routing through Cloudflare’s edge and the domain drops out of verification. Add the records back and refresh the Domain Status tab to bring it live again.

How long does activation take? #

After DNS is pointed correctly, xCloud tries to activate the domain immediatly, if the Cloudflare account integrated with xCloud. But if you are using a domain with a different domain provider, you need to configure the DNS with your provider then refresh the status on xCloud.

Can a domain be removed? #

Yes. Use Remove from the domain row. xCloud warns that traffic may become unreachable if DNS is still pointed to Cloudflare Enterprise after removal.

Is the Cloudflare Enterprise addon refundable? #

No. Like all xCloud addons, the Cloudflare Enterprise addon is non-refundable once the subscription is activated. Addon purchases are final, so please review the domain, pricing, and billing details before you subscribe. You can read the full policy in the xCloud Refund Policy.