Good afternoon. My name is Emma, and I will be your conference operator today. At this time, I would like to welcome everyone to the Cloudflare Q4 2021 earnings call. All lines have been placed on mute to prevent any background noise. After the speaker's remarks, there will be a question-and-answer session. In the interest of time, we ask that you limit yourself to one question and one follow-up. If you would like to ask a question during this time, simply press star followed by the number one on your telephone keypad. If you would like to withdraw your question, again, press star one. Thank you. Jayson Noland , you may begin your conference.
Thank you for joining us to discuss Cloudflare's financial results for the fourth quarter 2021. With me on the call, we have Matthew Prince, Co-founder and CEO, Michelle Zatlyn, Co-founder, President, and COO, and Thomas Seifert, CFO. By now, everyone should have access to our earnings announcement. This announcement, as well as our supplemental financial information, may be found on our investor relations website. As a reminder, we'll be making forward-looking statements during today's discussion, including, but not limited to, our customers, vendors, and partners' operations and future financial performance, anticipated product launches, and the timing and market potential of those products, the company's anticipated future revenue, financial performance, operating performance, non-GAAP gross margin, non-GAAP net income, non-GAAP net income per share, shares outstanding, non-GAAP operating expenses, free cash flow, non-GAAP tax expense, dollar-based net retention rate, paying customers, and large customers.
These statements and other comments are not guarantees of future performance, but rather are subject to risks and uncertainty, some of which are beyond our control, including, but not limited to, the extent and duration of the impact of the COVID-19 pandemic and adverse conditions in the general domestic and global economic markets. Our actual results may differ significantly from those projected or suggested in any forward-looking statements. These forward-looking statements apply as of today, and you should not rely on them as representing our views in the future. We undertake no obligation to update these statements after this call. For a more complete discussion of the risks and uncertainties that could impact our future operating results and financial condition, please see our filings with the Securities and Exchange Commission, as well as in today's earnings press release.
Unless otherwise noted, all numbers we talk about today, other than revenue, will be on an adjusted non-GAAP basis. All current and prior period financials discussed are reflected under ASC 606. You may find a reconciliation of GAAP to non-GAAP financial measures in our earnings release on our investor relations website. For historical periods, a GAAP to non-GAAP reconciliation can be found in the supplemental financial information referenced a few moments ago. We would also like to inform you that we will be participating in the JMP Securities Technology Conference on March 7th, the KeyBanc Emerging Technology Summit on March 8th, and the Morgan Stanley Technology, Media, and Telecom Conference on March 9th. Now, I'd like to turn the call over to Matthew. Thank you, Jayson.
In the immortal words of Bill and Ted, "We had a most excellent quarter." In Q4, we achieved revenue of $194 million, up 54% year- over- year. We added 156 new large customers, those that spend more than $100,000 a year with us, ending the year with 1,416 large customers, up 71% year- over- year. Our dollar-based net retention ticked up to a record 125%, improving 6 percentage points from a year ago. For the full year, we earned $656 million, up 52% year- over- year. 2021 becomes our 5th straight year with 50% or greater compounded growth. I'm proud of two things. First, over those five years, our growth has actually accelerated.
Second, and probably more important, our growth has been relentlessly consistent. We've dialed in our business. We understand and are in control of its levers. You can see that in metrics like our gross margin. While talk across the industry is about increasing costs and pricing pressure, we achieved a gross margin of 79%. That remains above our long-term target gross margin range of 75%-77% and creates some opportunities. We expect to use this exceptional gross margin as a weapon to take business from competitors more vulnerable than we are to pricing and cost pressures. It also allows us to bundle together products into an overall platform no competitor can match. In Q3, we had our first quarter as a public company with positive operating margins. This is our second. It won't be our last.
That said, as I talked about last quarter, we are not in a rush to be significantly profitable. Over the years, our team has asked me about profitability. The story I told them was to imagine every year you saw your neighbor shoveling money into a machine. A year later, a lot more money came out. Year after year, the money kept piling up and getting shoveled back in. If one year you looked out your window and didn't see your neighbor shoveling all the money back into the machine, you'd worry, "What's wrong with the machine?" To be clear, there is nothing wrong with our machine. We will continue to shovel money back in to drive innovation and reach new customers as long as we can achieve exceptional growth. We think of managing our operating margin a bit like that game Flappy Bird, not too high, not too low.
For as long as we can, we want our operating margin to hold just above breakeven and right where it's been for the last two quarters. In other words, we've done something wrong if we beat significantly on EPS. Cash flow, on the other hand, nobody is gonna complain if there's more cash in your bank account at the end of the quarter than there was at the beginning. We're proud that this is Cloudflare's first quarter since we've been public to be free cash flow positive. It also won't be our last. We know this is a business that can generate significant cash flows when we want. In the short term, we expect we'll see negative cash flows for the next two quarters as we invest in our network and redesign our physical offices for a post-COVID world.
By the second half of the year, we forecast we'll be free cash flow positive. We admire and seek to emulate other companies that came before us and had significant cash flows while holding operating margins at breakeven. We feel very dialed in and confident in our business as we come out of the uncertainty of the last two years. What's our secret? It's not one thing, it's many. It starts with innovation. When we talk to customers, what they appreciate about Cloudflare is our relentless innovation. It expands our market and ensures that customers can use us to be the complete future of their corporate network. Beyond new products, we leverage economies of scale and network effects to drive our business and innovate more efficiency.
Yes, the supply chain has gotten harder, but we've leveraged our relationships, hyper-efficient procurement team, and fully software-defined network to keep driving our costs down. Network effects are spawned by networks, and we run one of the largest networks in the world. As customers join our network, our network gets better and more efficient. If you want to understand how we've been able to continue to drive our business at this rate, this virtuous cycle is where to look. Because it's a flywheel, this efficiency allows us to continue to invest in products. Our team loves launching new products, and we're planning at least seven innovation weeks full of new products in 2022, further extending our network, introducing new capabilities, and growing our TAM. The products we announced in 2021 are already thriving.
For example, we had over 200,000 domains sign up for our email routing service, and seemingly overnight have become a major email security provider. R2, our zero egress object store, has had more than 9,000 signups for its closed beta, including some incredible logos. They represent hundreds of petabytes of storage and demonstrate the palpable excitement around our Workers developer platform. We're on track for R2 to progress to open beta in Q2, and then be generally available in the second half of 2022. While our bias is toward internal product development, we will make strategic acquisitions when we find teams and products that can complement what we've built. I'm excited to announce today that we've acquired Vectrix, a startup that has built the easiest to use, most powerful CASB we've seen.
CASBs, cloud access security brokers, are a category of services that give visibility and control over data stored in SaaS applications. They can be powerful tools, but their Achilles heel has always been their complex setup. The Vectrix team impressed us with how quickly they could onboard any new customer, regardless of size, and instantly give them visibility into all the service providers where the customer's data was stored. As such, their product is a natural add-on to every current Cloudflare customer. They remind me of Cloudflare and our philosophy since our earliest days. The Vectrix team and technology further rounds out our Zero Trust platform, giving visibility not only for data flowing across the network, but now also data at rest in service providers. We believe it makes Cloudflare Zero Trust a no-brainer comprehensive security solution for any company, and we're thrilled to have the Vectrix team on board.
Let me highlight some great wins we had with Zero Trust and other products over the quarter. A global Fortune 500 telecommunications company signed a $1 million annual contract for over 100,000 Zero Trust seats. This customer initially started on a self-service plan with fewer than 500 seats two years ago. This win shows how the ease of use of our service and ability to land customers with individual teams within organizations can efficiently turn them into major customers over time. A Fortune 500 media company signed a $250,000 annual contract for more than 10,000 Zero Trust seats. It was a competitive deal, but ultimately they selected us for being the most flexible and innovative solution on the market.
What's great about wins like these is that there's an opportunity for us to expand the customers across our entire platform. You earn your place as a platform one feature at a time. Customers often work with us to solve a problem, and then over time, give us the chance to compete for more of their business. We saw exactly that with other customers this quarter. For instance, a Fortune 500 financial services company expanded their use of our platform by signing a $900,000 three-year expansion deal, bringing their annual contract value to over $1.5 million. They described us as "future-proof." It's an example of us bundling our platform to give them access to a broad set of our features while minimizing procurement friction.
A Fortune 1000 shipping and logistics company signed a similar platform bundle deal, which more than doubles their three year contract value to $3 million. They specifically appreciated how Cloudflare was a single vendor they could turn to to deliver the future of their corporate network. A Fortune 500 pharmaceutical company signed a $750,000 three year deal for network security. It continues to be true that as companies migrate their on-premises hardware solutions, they continue to turn to Cloudflare to build the future of their networks. As we come out the other side of COVID, we're seeing more and more companies rethink their network design and moving to the cloud and away from on-premises boxes. A Fortune 500 retailer moved away from two competitors in order to take advantage of Cloudflare Workers.
While the competitors had promised similar functionality, they found it simply didn't work as promised. They signed a three-year, $1.2 million contract. Our Workers platform, which has been in production now for 4.5 years, continues to extend its lead with developers. You didn't have to be a Fortune 500 company to sign a big deal with us this quarter. One of the most innovative payment startups signed a three-year, $1.5 million contract for our network security products. They appreciate Cloudflare Workers and the flexibility it provided them to service a broad set of merchants worldwide. Finally, in our business, we need to stay on top of cybersecurity issues globally. We are therefore watching the situation in Ukraine closely. Modern warfare increasingly includes the cyber battlefield.
While they don't generate meaningful revenue, we have onboarded a number of Ukrainian businesses, news outlets, and government organizations in anticipation of potential attacks. While we hope the current tensions will resolve peacefully, we have experience mitigating nation-state cyberattacks, and we are prepared to defend our customers and network, whatever may come. Before I turn it over to Thomas, I wanted to thank the entire Cloudflare team for all your hard work and dedication. It was a most outstanding quarter and a most outstanding year. I'm excited for what we're going to achieve together in 2022. With that, Thomas, take it away.
Thank you, Matthew, and thank you to everyone for joining us. We delivered another excellent quarter and wrapped up an incredible year. In 2021, we achieved multiple records and milestones and ended the year with accelerated revenue growth. Large customer additions continue to outpace top-line revenue growth, and we achieved a record 125% dollar-based net retention rate in the fourth quarter. We continue to deliver over 50% compound annual growth rate on revenue since 2016 and remain profitable since the third quarter. These achievements reinforce our track record of delivering strong revenue growth at scale with increasingly strong unit economics benefiting from the inherent strengths of our business. Turning to revenue. Total revenue for the fourth quarter increased 54% year-over-year to $193.6 million.
The growth in revenue was driven by another quarter of strong customer demand, both in terms of new logo acquisition as well as expansion within our existing customer base. We ended the fiscal year with revenue of $656.4 million, representing an increase of 52% year-over-year. As I just mentioned, this makes it our 5th year of delivering at least 50% compound annual growth rate on revenue since 2016, a testament to the consistency and durability of our business model. From a geographic perspective, in Q4, we saw continued strength in both the U.S. and internationally. The U.S. represented 52% of revenue and increased 52% year-over-year. EMEA represented 27% of revenue and increased 60% year-over-year. APAC represented 14% of revenue and increased 29% year-over-year.
We are pleased to see growth accelerate in APAC and see EMEA repeat as our highest growth geography. EMEA continues to benefit from a number of Data Localization Suite wins driven by the increasing focus on GDPR and data privacy regulations. Turning to our customer metrics. We exited the quarter with 140,096 paying customers, representing an increase of 26% year-over-year. We ended the year with 1,416 large customers, representing an increase of 71% year-over-year. We added 156 large customers in the quarter and 588 large customers in the fiscal year. We're also providing an annual update on a few key large customer metrics, including large customer revenue contribution.
Our large customers have not only grown in numbers, but also their average spend with us, causing their revenue contribution to continue to climb through the year. For fiscal 2021, large customers represented 54% of total revenue, compared to 46% of total revenue in 2020. For the full year, we're also breaking out our large customers into cohorts of those with spend greater than $500,000 and $1 million. We ended the year with 121 customers that spent over $500,000 with us, a 70% increase year over year. We ended the year with 56 customers that spent over $1 million with us, a 75% increase year- ove- year.
The significant expansion from our large customers contributed to a record dollar-based net retention rate of 125%, representing an increase of 100 basis points sequentially. We continue to see broad-based strength across our customer base and robust traction and growth in our large customer cohorts, which continues to outpace top-line revenue growth. Gross retention remains over 90%, and customer expansion continues to be fueled by compelling unit economics and increasingly favorable customer acquisition costs. We will keep investing heavily in building our enterprise portfolio and developing a world-class go-to-market strategy to position us for the massive opportunity ahead. Moving to gross margin. Fourth quarter gross margin was 79.2%, consistent with last quarter. Network CapEx represented 10% of revenue in the fourth quarter.
In 2021, we added roughly 29,000 paying customers, representing an increase of 26% year-over-year. Traffic volumes have also increased significantly. In the fourth quarter, traffic volumes grew by 88% compared to the same quarter last year. Despite these significant increases, we were able to maintain network CapEx as a percentage of revenue at 11% and a high gross margin of 78.6% for fiscal 2021. This underscores the resiliency of our network and our ability to use gross margin as a strategic weapon to gain market share. Going forward, we plan to accelerate investments in our global network and expect network CapEx to be 12%-14% of revenue for fiscal 2022. Turning to operating expenses. Fourth quarter operating expenses as a percentage of revenue was flat sequentially and decreased 4% year-over-year to 78%.
We had another strong hiring quarter where we saw our total number of employees increase 36% year-over-year, bringing our total number of employees to approximately 2,440 at the end of the quarter. Sales and marketing expenses were $86 million for the quarter. Sales and marketing as a percentage of revenue decreased 1% sequentially, decreased to 44% from 46% in the same quarter last year. Research and development expenses were $37 million in the quarter. R&D as a percentage of revenue stayed flat sequentially and decreased to 19% from 20% in the same quarter last year. General and administrative expenses were $28 million for the quarter. G&A as a percentage of revenue stayed flat sequentially and decreased to 14% from 16% in the same quarter last year.
We saw continued operating leverage in the fourth quarter, with operating margins improving 550 basis points year-over-year. Operating income was $2.2 million compared to an operating loss of $5.5 million in the same period last year. Q4 was our second consecutive quarter of achieving operating profit. As a reminder, we intend to grow our operating expenses in line with revenue, stay near or at break even, and reinvest excess profitability back into the business to address the enormous opportunity in front of us. Turning to net income and the balance sheet. Our net income in the quarter was $131,000, or net income per share of zero cents. Tax expenses for the fourth quarter was $1.9 million.
We ended the fourth quarter with $1.8 billion in cash equivalents, and available for sale securities. Free cash flow was $8.6 million, or 4% of revenue, compared to negative $23.5 million, or 19% of revenue in the same period last year. Operating cash flow was $40.6 million in the fourth quarter, or 21% of revenue. This represented an increase of $47.5 million sequentially and an increase of $49.4 million year- over- year, helped by strong cash collection and growth of new and existing business. We are very pleased to have achieved our first free cash flow positive quarter as a public company.
Going forward, we expect to see some variability in the first half of 2022 as we continue to invest in building refurbishments and network capacity, but we do expect to return to positive free cash flow in the second half of 2022. Remaining Performance Obligations, or RPO, came in at $624 million, representing an increase of 14% sequentially and 63% year-over-year. Current RPO was 77% of total RPO. The strength we saw in the fourth quarter across top line, bottom line, and RPO, in combination with our rate of innovation that allows us to continuously expand TAM, gives us confidence and visibility heading into the new year.
For the first quarter, we expect revenue in the range of $205 million-$206 million, representing an increase of 48%-49% year-over-year. We expect operating income to be in the range of $500,000-$1.5 million, and we expect a net income per share of $0-$0.01, assuming approximately 348 million common shares outstanding. We expect tax expense of $1.7 million. For the full year 2022, we expect revenue in the range of $927 million-$931 million, representing an increase of 41%-42% year-over-year.
We expect operating income for the full year in the range of $10 million-$14 million, and we expect net income per share over that period in the range of $0.03-$0.04, assuming approximately 352 million common shares outstanding. We expect a tax expense of $8 million. In closing, it has been a remarkable year for Cloudflare as we finish our second full year as a publicly traded company. I would like to thank our customers, partners, and the community for their endless trust and support in us. I want to thank all Cloudflare employees for their continued dedication to innovate and deliver in serving our customers and global community. We've built a culture of relentless innovation, a powerful platform, and a successful go-to-market strategy grounded by an exceptionally efficient and durable business model.
This positions Cloudflare at the forefront of a tremendous opportunity as the corporate network transitions to the cloud and developers line up to build on our edge. In 2022, we'll continue to invest in innovative new products and expand our total addressable market by turning point solutions into features of our global network. I'm extremely proud of what we have accomplished, and I'm excited for this year. With that, I'd like to open up for questions. Operator, please poll for questions.
At this time, I would like to remind everyone to limit themselves to one question and one follow-up. If you would like to ask a question, press star one on your telephone keypad. Your first question today comes from the line of Phil Winslow with Credit Suisse. Your line is now open.
Hey, thanks, guys, and congrats on a great end to a great year. Wanted to focus on two initiatives that were announced in the fall. First was, you know, the global backbone. Wondering if you could give us a sense for, you know, just the strategic thought behind building that out, sort of an overlay, so to speak, on top of the virtual backbone that you have in place that we know Cloudflare for. Then also just Cloudflare for Offices. How does that complement what you're doing on the global backbone side in terms of, call it, being the most global but also the most local?
Yeah, Phil, thanks for the question. We are always looking at our network and asking ourselves, "How can we make it faster? How can we make it more reliable, and how can we make it more efficient?" I think the backbone is one of the things that checks all three of those boxes. We have enough traffic across our network that it is now more efficient for us, meaning it is less expensive for us to run over our own private connections than it is over the public internet in many cases. On top of that, every time you add another provider, and especially when you add a provider that you have complete control over, that allows you to optimize for the performance and reliability.
With our own backbone, because we sit at both sides of that, we can actually do things that you can't do over the public internet. We can support larger packet sizes, we can actually support protocols that aren't supported across, you know, the standard internet. That allows us to really live up to our mission of helping build what is literally a better internet and give our customers an experience they can't find anywhere else. In terms of Cloudflare for Offices, what we have heard from our customers is that as they want to take advantage of all of our different services, they wanna be able to plug into us as easily as possible.
We are trying to offer on-ramps to them to be able to get onto our network, and take advantage of our Zero Trust offering, make sure that their offices are protected from attack and make that as easy as just plugging in a patch cable. One of the things that we saw in the second half of 2021 was a real increase in cyberattacks directed directly at the network offices. It used to be once upon a time that DDoS attacks only went after, for example, your corporate, you know, marketing website. Now that more and more people are relying on virtual desktops, they're relying on Zero Trust network initiatives, attackers are smart to that and know that they can cause more harm, and therefore extract larger ransoms by going after the networks themselves.
If we can make it so that you as one of our customers really never touches the public internet, you go straight from your office and router there to ours, that isolates you from attackers. We think that that's something that is extremely attractive. Again, it's checking all those boxes, being more cost-effective for us to run, being more reliable, being more performant, and in addition to that, really being more secure. I think those things all line up and again, I think we've seen, especially with Cloudflare for Offices, early success in terms of adoption, and it's somewhere that we continue to invest in and we're very excited about.
Great. Thanks. Then a quick follow-up for Thomas. Obviously you continue to have success in larger deals with enterprises. When you look at your just the go-to-market motion, how are you feeling in terms of productivity and ramp time of the new hires, and how are you thinking about that coming into this new year? Thanks.
Yeah. Very optimistic. We've seen that despite the growth we've seen over the last couple of years, and despite the fact that we successfully move up the enterprise stack to larger and larger customers with larger and larger ACVs, that we've been able not only to keep the productivity of the quota carrying employees, but also the ramp curve, getting them to full productivity has not changed. Our average sales cycle still continues to be under 90 days. That's, you know, when we talk about the durability and the consistency of the business model, that's one of the impressive vectors that we've been able to keep those productivity levers despite the fact that the go-to-market motion has successfully migrated to larger and larger accounts.
Great. Thanks, guys. Keep up the great work.
Your next question comes from the line of Matt Hedberg with RBC Capital Markets. Your line is now open.
Oh, great. Thanks for taking my questions, guys, and all of my congrats as well on a really strong year. You know, Matthew, you called out a lot of really exciting Workers deals this quarter, which is really good to see. I think it's one of the things that we all sort of are excited about longer term. I'm wondering at this point, now that it's been out for a number of years, is there some way that you can help us understand maybe usage trends or penetration of Workers in your base?
Yeah, you know, Matt, we're extremely excited about how Workers is being adopted across our customer base. We still see that north of 20% of new enterprise deals include Workers at some level. But I think what's even more exciting is that as we go down market and look at individual developers, because, you know, the people who actually have, you know, their hands on keyboards are the most important, we see an enormous amount of excitement there. A couple of different things. You know, I think that this is the year that we will pass through, you know, what a critical milestone of developers, which is how do you get to 1 million developers that are using the Workers platform?
We see a clear path to that over the course of 2022, and I think that that's gonna be a really exciting milestone for us. I think the other piece is that we're starting to see companies that are being built entirely on Workers. There was actually a startup company called Zaraz, which was built entirely using Workers to optimize the marketing stack and build a much more secure, much more performant and much more privacy-friendly sort of marketing whether that's, you know, pixels or tags that are on pages, build that in a way that was much more friendly. We met that team. They worked with us closely.
They were incredibly helpful in giving us feedback, and it was actually a company that we acquired two quarters ago. Again, small team, not a meaningful bit, but what I think is important there is that the developers of the future are betting, you know, their whole companies on Workers. This Zaraz is not the only example of this. We see more and more companies that are starting with Workers as their development platform. The nature of development platforms is that they do create a flywheel where as developers build tools, as they build out an ecosystem, that makes it so more and more developers get involved. We're excited about what's going on with Workers.
We are continuing to invest in that. I think that whole team is just really thrilled with the adoption that we're seeing so far. It's you know I think it's still early days, but very exciting for both big customers and small.
That's really good to hear. That's. I think we're all excited about what that can do longer term. You know, I guess as a follow-up, you know, you guys had a great response to the Log4j security incident, I guess. You know, can you talk about sort of, you know, could this be a positive demand driver for you all when we look to 2022 and beyond as people sort of understand the importance of your global network?
Well, I think there are a couple things about that that were really interesting. The first is, I think it's sometimes underappreciated the scale of Cloudflare, what effectively is our sensor network. We were able to, after the Log4j vulnerability was reported, look back across our network, which, you know, is comprised of millions and millions of sites, you know, with a huge diversity in terms of geography, in terms of size and scale. We were able to see some of the very first exploits of that. What's interesting about that is it turned out, in fact, we had the data that was two days before anyone else that was out there.
It turned out that we actually caught the researchers themselves testing the vulnerability. We are able to see exactly how that was the case. I think our ability to see what is going on live on the internet is really the diversity of the traffic gives us visibility into things that just comes earlier and allows us to react faster. I think the second bit is that because of the way that we have worked with the research community, we are a very trusted partner in that space. We got early warning of the attack, and we were able to very quickly react to be able to protect our customers.
I think that ability to react quickly is not only a factor of having the information, but then having a programmable platform, which again, Workers is at the heart of, that allows us to very quickly adapt and roll out a response. We recognize that this was probably the worst vulnerability to come out in at least the last five years. We made the call to provide a level of protection even to our free customers because, again, we think that building that goodwill amongst the larger community is the right thing to do. That was very much recognized by our customers going forward.
I think over the longer term, you know, this is the sort of vulnerability that really is the best evidence of why you need a Zero Trust platform. The fact that we've got a platform that sees more than anyone else, that is more responsive than anyone else, that is more trusted in the security and research community than anyone else, is able to react quickly and has as much goodwill in the community as anyone else, I think speaks extremely highly of our team, what we've built, and our ability to continue to execute in the Zero Trust space. You know, again, I think that these are the sorts of things that add up to winning in this space over time. People know that we're not just, you know, a fly-by-night security company that's a flash in the pan.
They know that we're a good part and a good steward of the overall internet ecosystem. What we hear from customers is they want to invest behind companies like that, and I think that that's gonna be a real tailwind for our Zero Trust business.
Thanks, Matthew. Well done, guys.
Your next question comes from the line of James Fish with Piper Sandler. Your line is now open.
Hey, guys. Impressive quarter and guide there. Wanted to go back to Phil's question actually on Cloudflare for Offices. It was the solution that I think Matthew even highlighted could be the sleeper for 2022 versus kind of what else got announced during Speed and Birthday Weeks. Really just wanted to ask directly how the adoption and deployment of Cloudflare for Offices has been going and how that ties into kind of overall Cloudflare One adoption and getting to that, you know, magic 4+ solutions you guys like to see per customer.
Yeah, I think that the nature of the office's product is that, you know, you have to install equipment in buildings around the world. Right now we are really focusing on those customers that are sort of the early examples of people who can use that. Those customers tend to be big Cloudflare adopters already. A large Fortune 500 technology, consumer technology company uses us for a number of other things, wanted us to effectively become their corporate network. We prioritize them in terms of Cloudflare for Offices. We're learning quickly from what their adoption rate is, and then we'll roll out based on that.
A large, international, Fortune 500 mining company, again, large customer of Cloudflare already, was already routing a lot of their traffic through us, was a natural addition for Cloudflare for Offices. I think what we will do is prioritize, and what we have been doing is prioritize those customers where we have existing deployments, and use. What's often the case, though, is that those customers are sharing some physical space in some of their offices with other customers, and that starts to then create what is the target list for who are the next adopters of Cloudflare for Offices.
I think that it will roll out based more on demand, and us building toward where customers are asking for it, rather than us just deploying, you know, equipment and hoping for the best. I think that that's a more sensible way of us doing it. What we have done, though, is secure all the technical infrastructure, both the right to be in the buildings that we think are the most important buildings and the connectivity to those buildings, in order to be able to light up buildings as customers demand it. I think it's still a big piece of what's going on.
I think it ties in a lot with our Magic Transit , Magic WAN offering, and then is a great on-ramp for customers that are using our Zero Trust offering. I still think it's gonna be kind of one of the underfocused on, but really maybe under-heralded, but really important aspects of what we're building and will deliver in 2022.
Makes sense and appreciate that color. You guys highlighted a lot of large wins this quarter, and it looks like the spending for these large net wins kind of ticked up quite a bit on top of moving into what it sounded like some more Tier 1 kind of verticals like healthcare, telco, and financial services, that it implies really your customer quality actually improved even within the large enterprise base that you guys talk about. I'm not sure if this is Thomas or you, Matthew, but how are you guys feeling about this pipeline and extra reach into really the cream of the crop here of Fortune 500 customers in your 2022 guide?
You know, it'd be interesting to look back over the last four quarters, but I think that's actually been a trend that's been going on for quite some time. In financial services, healthcare, insurance, you know, government, we've seen you know, just increased penetration and a real understanding of what Cloudflare is doing. I think our awareness in the market has ticked up measurably, and we're able to use that. Then the second piece is that as we land with a customer, then we're able to expand very quickly over time.
Based on the broad set of products that we have, I think that we feel really good that a significant percentage of the Fortune 500 will use Cloudflare for something over the course of the next five years. What our real important challenge is to make sure that we get those customers to use us for as broad a set of our products and platform as possible. I think that's actually the bit that really stood out for me this quarter, was that we were seeing more and more of our large customers saying, you know, "I want a site license. I'll commit to spending a certain amount with you, and we'll true it up every year.
We want to be able to really invest behind what that overall platform is, and I don't want to get tied up in procurement every time you launch a new feature and I want to add it on." I think that's really exciting. There are very few companies that have the breadth of products to be able to get that from their customers. I think that the fact that our customers are pulling us in that direction and asking us for those types of licenses speaks really well for the future of our business.
Yeah. James, what I would add is that we've always been really well diversified. Even if you go back to our S-1 at the IPO, you could see that the representation across all critical verticals was really, really strong. Even in a quarter like the fourth quarter, there was no one customer larger than 5% of revenue. What you see is that we are more successful landing new big logos because of all the product and feature strengths that Matthew mentioned, but that we are able to accelerate revenue with the existing customers in those verticals. You know, that is reflected in our DBNR.
Wonderful, guys. Thanks again.
Your next question comes from the line of Keith Weiss with Morgan Stanley. Your line is now open.
Excellent. Thank you, guys, and congratulations on a great quarter and a great year. I wanted to dig in a little bit to kind of I think what Matthew Hedberg was asking. Any way you could give us sort of more of a sense or sort of a more tangible sense of what the major revenue contributors were to this quarter and sort of to that strength? To what degree, I mean, ideally, like a percentage of revenue, what degree is stuff like Cloudflare One and the Workers product significant contributors to that revenue outperformance today versus being kind of the forward avenues of growth? Because it sounds like they're really starting to contribute en masse. Then I have a follow-up question for Thomas.
Sure, Keith. First of all, you know, I think when we talk about Cloudflare One, Cloudflare One is really a collection of a number of our different products. It is saying, how can you use not just WAF, not just DDoS, not just CDN, not just, you know, our access or gateway products, but how can you use those all together in order to build what is sort of the ideal future corporate network? What we see is customers are buying into that vision, and when they ask for using the broader set of our platform. I think that what we're excited by is that more and more customers are using the broader set of our platform. That's great.
What we're also equally excited by is there are very few that have fully bought into the entire vision, and that's not that they don't buy the vision. They actually are super excited about that vision. But it's just that, you know, we keep announcing new products and releasing new things, and that gives us the opportunity to sell more to those existing customers. I think that that's why you've seen over the course of the last year our dollar-based net retention continue to tick up, is that we have just done a great job at selling more to those existing customer base.
I think something like Workers, again. I think it's hard for us to break out how much of a sale it's responsible for because it does end up in a bunch of different deals as a way to give us the flexibility and programmability to win those deals. What we are seeing independently is that we're starting to see a real uptick in people who are using sort of just Workers and that they are starting to generate meaningful bills just from using the Workers platform itself. But it is still, I think something that we think of as sort of if act one was, you know, the CDN, WAF, DDoS, DNS, those types of products.
Act two is our Zero Trust products, which I think we're square in the middle of and where a lot of our growth is coming from. I think Act 3 is Workers, and that still, I don't think has hit really the hockey stick, sort of point in the growth curve.
Got it. That's super helpful, Matthew. I really appreciate that. Then, Thomas, you talked about network CapEx expanding as a percentage of revenues, which is on top of a base. Revenues are obviously growing very fast next year. Can you help us understand how much of that is in turn into, like, the core kind of network capacity, if you will? Is there a pickup that's associated with some of the newer initiatives, if you will? Like, is Offices having an impact there, or R2 going GA, is that having an impact on the level of CapEx?
I think the first answer is that if you go back over the last five years, we have rather consistently spent about 11%-12% of revenue for network traffic. The new guidance is 12%-14%. It's a slight uptick. There is only a modest amount of R2 investment in this number. You know, you heard it already from Matthew, the ability of our business model that we can invest behind the demand curve. You know, we've been talking about this for a while on the go-to-market side, is also true for products like Cloudflare for Offices. We don't invest freely in idle capacity and hope that we fill it over time.
We follow demand expansion with existing customers, as you heard from Matthew, is the first priority. There's little investment in this guidance that is ahead of demand that we hope we generate. There's very little at this point for R2 and Offices because we can follow demand. It's more about getting the core capacity to where it needs to be, making sure that we move the network further out, closer to the eyeballs we want to connect. You know, also be thoughtful about some larger strategic customers that are moving business our way, that we are well prepared for that.
Got it. Excellent. Thank you so much, guys.
Your next question comes from the line of Shaul Eyal with Cowen and Company. Your line is now open.
Thank you. Good afternoon, guys. Congrats on the ongoing strong performance. Also, thanks for the transparency on large customers metrics. I was about to ask both, you know, Matt Hedberg and Keith questions, both from a different direction, but I get the point, Matthew. Maybe from a different perspective, you called out some Workers wins and, you know, the displacements this quarter. Can you, Matthew, provide us maybe with some more color? Who is it that you are displacing in recent months with that product?
Yeah. You know, I think that there are sort of two different directions that product displaces. So the first is, for some users, what they use Workers for is to make our products the most configurable version in the world. So if you want the most configurable firewall or the most configurable DDoS mitigation service or the most configurable DNS service, Workers is a way to extend those services to make them highly programmable and highly configurable.
I think there are a number of what we would think of as point solutions, people who are in the, you know, DNS or DDoS or CDN or WAF or firewall space that Workers allows us to help make our platform do exactly what they always dreamed and wished that their platforms could do. That I think is, especially for larger and larger customers, something that is really just catnip and makes them extremely excited for using us. I think the other place where we see a lot of displacement, which is sort of a different type of use case, and probably the one that is more exciting over the long term, is people who are moving away from other traditional public cloud vendors.
What we see is that, first of all, the public cloud is moving from a world where, you know, you were effectively renting a VM on a box somewhere, and you had to manage the operating system and the software and everything else to what is a much more managed, what is known in the industry as a serverless platform. I think when you look out, you talk to developers, Workers is one of the serverless platforms that they are the most excited about. We see regular win head-to-head with, you know, competing with sort of an AWS Lambda , or a Google or Microsoft cloud function. Those types of services we compete really well on, and we try and compete on all of the different factors that matter.
Performance obviously, but actually that's the least important of that. Consistency and reliability, which we do a great job because our cold start, we have literally zero milliseconds cold start time. The ability for us to be, you know, extremely cost effective. If you do a head-to-head comparison with Workers, running the same workload versus the public cloud, we even with the margins that we have, we're extremely cost competitive because it's just a better architecture of how we've designed it. Ease of use, making it really easy, and I think that there's been over Q4 some really incredible developments, and you're gonna see more over the coming quarter in us really just making Workers the easiest to use serverless platform that's out there.
As Thomas referenced, I think we're increasingly seeing more and more especially large sophisticated customers who, because of government and regulatory requirements around data localization and data sovereignty, that they need to store and process data locally. The fact that we can say in, you know, more than 100 countries around the world, we can keep your users' data in their home country, not only to be stored there, but actually processed there, that's something that no other cloud provider can compete with. If that's something that from a regulatory perspective is important to you, those are deals that we are winning more and more. We're excited about the adoption of Workers. Again, I think it's sort of a two-trick pony.
It is both really good at being able to help us make all of our existing products as configurable as possible, but then it is also extremely good as a true cloud computing platform that developers are building entire businesses on.
Understood. Thank you for the great color. Maybe can you talk about your plans to set up new points of presence in 2022, as you know, without a doubt as we're seeing, the network keeps expanding fairly quickly. Maybe you can quantify how many POPs you think about establishing this year.
Shaul, I have to confess, I hate the term POP because no normal people know what it means. It's not even how we really think about the world. What we are trying to do is directly interconnect with as many networks around the world as possible. You can turn up a whole bunch of POPs, but if they're not connected to networks, they don't give you any real benefit. We have traditionally talked about the cities that we are in, and we continue to expand that. What we have not done, 'cause again, it doesn't really matter to our customers, is break down within those cities how many individual facilities we're in.
What we are in most major cities now is in multiple different facilities. In certain cities now we'll have multiple individual availability zones in order to make sure that we have you know a high degree of availability. We are continuing to go into more and more networks around the world, and I think that you know we're on track to be in you know every U.S. state before the end of the year. I think that we continue to be in the vast majority of major cities with over 2 million people in them. We continue to invest in getting connected to all of the networks in the world.
What's unique about us is that we continue to have it so that every day our phone rings with network providers around the world who are inviting us to be directly in their networks. That's unique, and it's unique because of the broad set of services we provide, the broad set of customers that we have. I think that is part of what explains how we've been able to achieve and maintain and actually improve on our gross margins even as our traffic rates have continued to increase. That's really differentiated from anyone else in the space.
Sure, sure. Matthew, thank you so much. Keep up the great job.
Thank you.
Your next question comes from the line of Sterling Auty with JP Morgan. Your line is now open.
Yeah, thanks. Hi, guys. I'm just gonna ask one question. Matthew, you gave the example of the Fortune 500 pharmaceutical company network security win worth about $750,000. When I think about a Fortune 500 company, I usually think about them spending tens of millions of dollars on firewalls, for example. What I'm wondering is the opportunity when you go in and replace those physical appliance, is it a fraction of the spend that those customers need to make? Or are you just so early that this is just the very tiny beginning in terms of that opportunity with a customer like that?
I think we're super early. I think that we are going to continue to be able. What we have seen with customers is that we typically win with deals and then are able to expand them over time as they adopt more and more of our platform. We don't ask people. You know, one of Thomas's favorite points to remind me to bring up is that we're not a rip-and-replace solution. We are happy to go in and put ourselves in the mix with other firewall vendors and be very complementary to them over time, or load balancers or WAN optimizer, whatever it is.
What often will happen is a customer will say to us, "Listen, our existing network is working okay for us, but we've got this far-flung office that we need to take care of," or, "We're worried about contractors, and we wanna keep them separate from the rest of our network. Maybe you can help us with that." What then tends to happen is they have such a good experience with that that they see that as a replacement time is coming up on their hardware equipment, that they say, "Well, maybe we can just replace that with Cloudflare." Over time, we win that war of attrition. I think there were really two kind of head fakes for the hardware business over the last you know, four years.
One was the Trump tax cuts that really incentivized moving forward CapEx spend and probably kind of artificially buoyed some of the hardware manufacturers that are out there. The second was really COVID, where you know, people weren't you know, they may have planned on moving to a zero trust architecture, moving to a cloud architecture, but when COVID hit, they were like, "All bets are off. I'm gonna buy just more of whatever I have right now." I think that was a little bit of a head fake for some of the hardware space. What we're seeing, though, is that as people are coming out, as IT organizations are seeing sort of a light at the end of the COVID tunnel, they're saying, "We now...
Now it's time for us to go back and actually invest in what we think of as the long-term architecture. Increasingly what we hear from the largest customers in the world and industry analysts is that what it is that we're building is that future of the corporate network. I think more and more, you know, customers are gonna continue to expand over time and including that pharmaceutical company.
Understood. Thank you.
Emma, can we take one more analyst, please?
Excellent. Your last question comes from the line of Amit Daryanani. Your line is now open.
Perfect. Thanks for squeezing me in. You know, I guess I'll stick with one question as well. You know, last quarter there was a fair bit of talk around the R2 offering, which, you know, it sounds like you're gonna get ready for GA soon. Can you just talk about what has the customer feedback been for R2 in the last 90 days? And I think since you started talking about this, AWS did lower their egress fees a fair amount. So I'm curious if that changed anything from your perspective as well.
Yeah. Well, you know, actually they didn't lower their egress fees all that much, but I am flattered that they're paying attention, and I think they have a long way to go in order to catch up with the rest of the industry. I think the leaders in the space actually have been folks like Oracle and Google who have said that they will have much more dramatic egress lowering. I think it's only a matter of time before AWS will follow that as well. If we can be a part of catalyzing that for the industry, I think that's a huge win. What we've heard though from the feedback on R2 has been terrific.
We've been running it in a private beta. We've had customers on board. They've given, you know, great feedback on the places that it's working extremely well. What we're optimizing right now is just making sure that we have exactly the same performance characteristics that we would expect and that customers expect from S3, and we think that architecturally we'll be able to meet or beat that over time. We're excited by our ability to deliver this. I'm looking forward to the day that I can share the logos of who we're talking about bringing data over. But we have hundreds of petabytes of data that we are confident will, as R2 goes GA, be able to move over to our platform.
I think that again, it's exciting for the revenue that will generate. What I think it's really exciting for is two other things, that it really will help catalyze our overall Cloudflare Workers growth, and it becomes a fundamental component of that computing platform. That then secondly, that it's gonna help unlock the cloud because I think that other cloud providers will have to respond to this, and it is a win for the entire industry if we're able to drive what have been these egregious egress fees down. What we wanna make sure is that customers can choose products based on whoever is the best out there, and we are confident that we've got a platform that can win on the performance, security, reliability, and cost side.
I am excited for how we are positioned to be delivering on our value proposition going forward. Our entire team I'm proud of for what they've built and that we got AWS to blink a little is something that I think is good for the entire industry.
Absolutely. Perfect. Thanks a lot for your time.
This concludes today's Q and A session. I now turn the call back over to the company for closing remarks.
Thank you so much to everyone for tuning in to the earnings call. As I said at the beginning, it has been a most excellent quarter for us. There's a ton of hard work that goes in behind the scenes to not just get ready for these earnings calls, but more importantly, service our customers, build great products, and deliver on the value of our mission, which is to help build a better internet. I just wanted to thank every one of our customers, every one of our investors, and most importantly, every one of our employees for what was an incredible Q4 and an incredible year. We're already hard at work in 2022, and we look forward to tuning in to give you the updates on what we did in Q1. Thank you so much.
This concludes today's conference call. Thank you for attending. You may now disconnect.