A scan of European company websites suggests the region’s CDN layer is far more concentrated than many operators may assume. Of 44,143 companies in CipherCue’s tracked dataset with a detected content delivery network, 39,547—or 89.6%—were identified as using Cloudflare.
That figure is not a measure of the entire European web. It excludes companies that serve directly from their origins, covers eight countries, and is based on CipherCue’s own website fingerprinting. The cohort also leans toward small and midsize businesses, a segment where Cloudflare’s free tier is particularly relevant. Still, it highlights a material shared-dependency risk at the internet’s front door.
A front-door dependency
CDNs sit between users and a company’s origin infrastructure. They commonly cache content, terminate TLS connections, filter traffic and route requests to the underlying application. That makes them useful for performance and security—but also makes the chosen provider a common point of failure.
CipherCue detected Cloudflare across 89.6% of its CDN-using sample. Its next-largest identified providers were Amazon at 3,112 companies, Fastly at 1,299 and Akamai at 396. Those counts cannot simply be added: a company may use more than one vendor. Amazon’s figure also has an important classification caveat, since AWS hosting signals can be harder to distinguish from an intentional CloudFront deployment.
The geographic spread was broad. Cloudflare’s detected share ranged from 78.8% in Spain and Ireland to 95.6% in the Netherlands. The UK had the largest absolute total, with 15,846 CDN-using companies identified behind Cloudflare. Even Germany, the lowest of the larger markets in the dataset, came in at 81.4%.
For context, W3Techs reported Cloudflare at 84.1% of websites where a reverse-proxy provider could be identified as of July 28, 2026. The methodologies and populations differ, but both point to unusually strong concentration among sites that put a CDN or reverse proxy in front of their web properties.
Resilience is not the same as independence
The finding matters because a CDN can improve an individual company’s resilience while increasing ecosystem-wide correlation. If a dominant edge provider has an outage, businesses with unrelated applications, customers and hosting stacks can become unavailable at the same time.
Cloudflare has published postmortems for several customer-affecting incidents over the past 15 months, including disruptions in November and December 2025 and a February 2026 incident involving withdrawal of some customer-owned IP prefixes. Cloudflare said the November and February events were not cyberattacks. The causes described—such as a permissions-related configuration issue and automation acting on a faulty API response—are reminders that ordinary operational changes can have wide effects when deployed across a large shared platform.
This is not unique to Cloudflare; every large infrastructure provider can experience software, configuration or control-plane failures. The difference is blast radius. Provider concentration turns a vendor incident into a market-level availability event.
What operators should do
A second CDN is not automatically the answer. Multi-CDN architectures add cost and complexity, and failover systems that are never tested can introduce their own outage paths. But teams should make the exposure explicit.
Start by documenting which public endpoints depend on a single edge provider, including marketing sites, authentication flows, APIs and customer portals. Then distinguish between mitigation options: static-content failover, independent DNS and traffic-management controls, origin readiness, cached maintenance experiences, and contractual support or incident-communication arrangements.
The practical test is not whether a company uses a CDN, but what still works if that CDN is unreachable or misbehaving. For European businesses, the data suggests that answer may be more correlated with their peers’ outcomes than they expect.
What to watch next
The key question is whether Cloudflare’s lead persists as more companies adopt alternative edge, security and sovereign-hosting options—or whether its convenience and integrated product stack further consolidate the market. Better public measurements, especially ones that separate CDN use from cloud-origin hosting and track enterprise deployments, would make that question easier to answer.
