Cloudflare Partners With Browsers on Privacy Protocol, But Structural Risks Remain Elevated

What happened

Cloudflare announced a collaboration with Mozilla, Google, and Microsoft to develop a privacy-preserving protocol for bot-human traffic differentiation. The initiative underscores Cloudflare's role in shaping internet infrastructure and aligns with the AI-driven traffic narrative in our base case. However, the news does not alter the near-term fundamental picture: NET trades at 320x EV/EBITDA with negative GAAP earnings, and the 10-K flags macro-driven churn, slowing pipeline conversion, and the impending JD Cloud renewal. While the protocol may eventually create a new revenue stream, the next 6 months are dominated by execution risk on AI monetization and reliability issues. As such, the collaboration is strategically positive but underwhelming relative to valuation.

Implication

The collaboration enhances Cloudflare's competitive moat and positions it as a standard-setter for bot management, which could support higher RPO growth over 12-18 months. However, with the stock near our base case $185, the upside is capped absent a guide raise. Monitor for accelerated current RPO growth as a leading indicator. For now, the risk of outages and China expiration outweighs protocol-level news.

Thesis delta

The browser collaboration reinforces the long-term platform stickiness narrative but does not address the outsized risk from the March 2026 JD Cloud expiration or the potential for widespread outage recurrence. The near-term thesis remains cautious; the partnership is a positive data point but insufficient to shift our rating from Potential Sell. We need to see pooled-of-funds revenue manifesting above the 20% of ACV level or a raised FY2026 guide before reconsidering.