When your website takes orders, bookings or payments, basic protection isn't enough. Business detects many sophisticated bots, gives you 100 custom firewall rules and rate limits that can hold an attacker off for a day, and is the plan Cloudflare backs with a 100% uptime SLA. Try it with Tremhost guiding the setup.
Free for 15 days. No card, no payment. On day 16 your site moves to Cloudflare Free and keeps working. Questions first? Talk to our team in Harare.
Basic protection handles the obvious threats. The costly problems for an established business are the ones that look like normal traffic.
Simple bots are easy to spot. The ones that scrape your prices, hoard stock or hammer your login and checkout behave like real shoppers, and simple filters let them through.
Mobile networks often put many customers behind one shared IP address. A crude rate limit can block your real customers along with the attacker.
Every hour your checkout or booking form is unavailable is an hour of orders and enquiries that go to a competitor.
Banks, payment providers and corporate clients may ask how your website is secured. You need a clear, specific answer.
Once your website runs through Cloudflare, every request passes through Cloudflare's network before it reaches your server. Business applies everything Pro does, then adds sharper bot detection, finer control over rules and rate limits, flexible DNS setup and an uptime SLA.
Your hosting, your application and your email stay where they are. Cloudflare changes the route traffic takes and what is allowed through.
Six reasons established businesses choose Business over Pro, and what each one changes.
On Business, Super Bot Fight Mode identifies many sophisticated bots and lets you act on traffic that is definitely or likely automated. Bot Analytics shows you what is hitting your site.
Fewer scrapers and automated abuse get through to your store or forms.
SourceFive times Pro's 20 rules, with regex matching for precise patterns, such as a particular kind of request to your API or checkout.
Complex sites get rules that fit how they actually work.
SourceFive rate-limiting rules, counting windows of up to 10 minutes, timeouts of up to a day, custom counting expressions, and counting by IP with NAT support for customers who share an address.
Abusers are held off for hours, with less risk of blocking customers behind a shared IP.
SourceCloudflare's Business plan comes with a 100% uptime SLA and service credits for Cloudflare's network.
Availability of the Cloudflare layer is a written commitment.
SourceBusiness supports partial (CNAME) setup, so you can keep your current DNS provider and send only the hostnames you choose through Cloudflare.
Less disruption for organisations whose DNS is managed elsewhere.
SourceUse a custom certificate if your organisation or a partner requires one, alongside Cloudflare's universal certificates.
You can meet certificate requirements without giving up Cloudflare's protection.
SourceBusiness also includes everything in Pro: the Cloudflare Managed and OWASP rulesets, Polish image compression and APO for WordPress.
Three facts that matter for your website, taken from Cloudflare's own pages.
Cloudflare's network page lists 348 cities, including Harare. Requests are handled at a Cloudflare location instead of all travelling to your server.
Cloudflare network mapCloudflare describes its DDoS protection as “unmetered and unlimited” at layers 3, 4 and 7, on all plans.
Cloudflare DDoS protection docsCloudflare lists PCI and SOC 2 Type II on its Business plan page. Ask your auditor how that maps to your own obligations.
Cloudflare Business plan pageChecked on 1 November 2026. Cloudflare can change its plans and figures.
Cloudflare provides the network. Tremhost is the team you talk to, in Harare.
Tremhost is a Zimbabwean company based in Harare. You deal with a team in your time zone that supports Zimbabwean businesses every day.
Our team helps you with the DNS change. Open a support ticket and we'll take you through it.
You get your own Cloudflare dashboard, so you can see what is being blocked and change settings yourself.
Pay by Visa, Mastercard, EcoCash, InnBucks, ZimSwitch or Omari.
For organisations that want more, Tremhost also offers managed security and Armor SOS for hacked sites.
Four steps from order to protection. The setup step is the only one that takes any real work.
Open the Cloudflare Business trial in the Tremhost cart. It's free, and no card is needed.
Log in to your Tremhost client area, or create an account, and confirm the order. No payment is taken.
Our team helps you with the DNS change. That is either a nameserver change, after you check the DNS records Cloudflare finds, or a partial (CNAME) setup that keeps your current DNS provider. Nameserver changes can take up to 24 hours.
Use your own Cloudflare dashboard and Bot Analytics to see what is reaching your site, and test checkout, logins, payment callbacks and email. On day 16 your site moves to Cloudflare Free.
Activation isn't instant. Business starts protecting your site once your domain or hostnames are active on Cloudflare.
All three plans include unmetered DDoS protection. The differences are in how much control you have, how well sophisticated bots are caught, and what Cloudflare commits to.
| Feature | Free | Pro | Business |
|---|---|---|---|
| DDoS protection (layers 3, 4 and 7)Source | Unmetered | Unmetered | Unmetered |
| Managed WAF rulesSource | Cloudflare Free Managed Ruleset | Free ruleset, plus Cloudflare Managed and OWASP Core Rulesets | Same as Pro |
| Custom WAF rulesSource | 5 | 20 | 100, with regular expressions |
| Rate-limiting rulesSource | 1 rule, 10-second window and timeout | 2 rules, windows up to 1 minute, timeouts up to 1 hour | 5 rules, windows up to 10 minutes, timeouts up to 1 day, IP with NAT support, custom counting |
| Bot protectionSource | Bot Fight Mode: simple bots | Super Bot Fight Mode: definitely automated traffic | Super Bot Fight Mode: many sophisticated bots, definitely and likely automated traffic, Bot Analytics |
| Image optimisation (Polish)Source | Not included | Included | Included |
| APO for WordPressSource | $5 a month add-on | Included | Included |
| Partial (CNAME) DNS setupSource | Not included | Not included | Included |
| Custom SSL certificate uploadSource | Not included | Not included | Included |
| Uptime SLASource | Not listed | Not listed | 100%, with service credits |
| PriceSource | $0 | $9 a month through Tremhost ($20 a month billed annually from Cloudflare) | $200 a month through Tremhost ($200 a month billed annually, or $250 monthly, from Cloudflare) |
Full setup is a DNS change: Cloudflare scans your records, you check them, then you change your nameservers. Cloudflare says the scan isn't guaranteed to find every record, so the check matters. On Business you can use partial (CNAME) setup instead and keep your DNS provider. Our team helps you choose and make the change.
Visitors see the same website. Test checkout, payment-gateway callbacks and API integrations during the trial. Your server sees Cloudflare's IP addresses unless it reads the forwarded visitor IP, which matters for IP allow-lists and logs. Pages that must never be cached, such as carts and account pages, should be checked too.
Not if your DNS records are right. Email (MX) records can't go through Cloudflare's proxy and stay DNS-only. Compare your mail records with your current DNS before you switch, or use partial setup and leave your DNS untouched.
Business has more to tune than Pro: custom rules, rate limits and bot settings. You don't have to know it all on day one. Our support team can talk you through the settings that matter for your site.
The trial is cancelled automatically on day 16. You aren't charged and nothing renews. Your domain moves to Cloudflare Free, so your site keeps working, with Free's DDoS protection and managed ruleset. If you want to keep Business, order Armor Shield at $200 a month.
Yes. Business includes APO for WordPress and Super Bot Fight Mode's WordPress setting. For WooCommerce and other stores, test cart and checkout pages during the trial.
Yes. Cloudflare sits in front of your hosting, so it works with cPanel hosting at Tremhost or elsewhere. Your files, databases and mailboxes stay where they are.
Yes. Sophisticated bot detection helps against scraping and automated abuse of login and checkout, regex rules and longer rate limits protect high-value pages, and the SLA covers Cloudflare's side of availability. It doesn't replace your payment provider's own fraud checks.
Yes. You don't move hosting to use Cloudflare. With partial setup on Business, you don't even have to move your DNS.
Do nothing. The trial ends on its own, you are never charged, and on day 16 your domain moves to Cloudflare Free, so your site keeps working. If you later want to leave Cloudflare altogether, our team will help you put your DNS back the way it was.
Can't find your answer? Open a ticket or contact us.
Business is Cloudflare's plan for organisations whose website is commercially important. It includes everything in Pro, then adds detection of many sophisticated bots, 100 custom rules with regex, longer rate limits, partial (CNAME) setup, custom certificate upload and a 100% uptime SLA.
Through Tremhost, Cloudflare Business (Armor Shield) is $200 a month, billed in US dollars. Bought directly from Cloudflare, Business is $200 a month billed annually, or $250 month to month (checked 1 November 2026).
Yes. The 15-day trial is free, needs no card and takes no payment. It is cancelled automatically on day 16, so you can't be charged by accident, and your site moves to Cloudflare Free and keeps working.
Business adds detection of many sophisticated bots and likely-automated traffic, Bot Analytics, 100 custom rules instead of 20 (with regex), 5 rate-limiting rules with longer windows and day-long timeouts, partial DNS setup, custom certificates and a 100% uptime SLA. See the comparison table.
Cloudflare lists a 100% uptime SLA with service credits on its Business plan. It covers Cloudflare's network, not your hosting server, and it applies to trial accounts and to accounts provided through Tremhost. Tremhost's own service levels are in our SLA.
Yes. Business supports partial (CNAME) setup: your DNS stays where it is and you point only the hostnames you choose to Cloudflare.
Super Bot Fight Mode on Business identifies many sophisticated bots and lets you allow, challenge or block both definitely and likely automated traffic. The dedicated Bot Analytics tool shows what is reaching your site.
Yes. It suits stores that face bot traffic, scraping or login abuse. Test your checkout and payment callbacks during the trial, and keep your payment provider's fraud tools switched on.
Yes. Business supports custom certificate upload as well as Cloudflare's universal certificates.
Yes. Polish image compression and APO for WordPress are included, as they are on Pro.
No security product can promise that. Cloudflare filters traffic before it reaches your server. You still need to keep software updated, use strong passwords and keep backups. Ask about managed security for help with the rest.
Yes. Cloudflare's Business plan includes chat and ticket support, and that applies to trial accounts and accounts provided through Tremhost. Tremhost is your local first point of contact.
Cloudflare lists Harare among its network locations. Which location serves a visitor depends on how their internet provider routes traffic.
It's free and needs no card. On day 16 your site moves to Cloudflare Free and keeps working. Start the Business trial, connect your domain, and judge it by what it stops and how your site holds up.
Smaller site or blog? The Cloudflare Pro trial may be all you need.
Cloudflare is a trademark of Cloudflare, Inc. This page is published by Tremhost, not by Cloudflare.
