This page lists the default account limits for rules, applications, fields, and other features. These limits may be increased on Enterprise accounts. To request a limit increase, contact your account team.
| Feature | Limit |
|---|
| Applications count | 500 |
| Audit Logpush jobs | 5 |
| Email addresses per rule | 1,000 |
| Group count | 300 |
| Group size | 1,000 |
| IP addresses per rule | 1,000 |
| mTLS root certificates | 50 |
| Service tokens count | 50 |
| IdP count | 50 |
| Rules count per application | 1,000 |
| Rules count per group | 1,000 |
| Domains per application | 5 |
| Infrastructure targets | 5,000 |
| Feature | Limit |
|---|
| DNS policies per account | 500 |
| Network policies per account | 500 |
| HTTP policies per account | 500 |
| Egress policies per account | 500 |
| Resolver policies per account | 500 |
| DNS locations | 250 |
| Source IP CIDRs per DNS location | 1,500 |
| Concurrent streams for HTTP/2 connections | 256 |
| Proxy endpoints | 500 |
| Source IP CIDRs per proxy endpoint | 2,000 |
| Lists | 100 |
| Entries per list (Standard users) | 1,000 |
| Entries per list (Enterprise users) | 5,000 |
| DNS Logpush jobs | 5 |
| HTTP Logpush jobs | 5 |
| Feature | Limit |
|---|
| Custom entries | 25 |
| Exact Data Match cells per spreadsheet | 100,000 |
| Custom Wordlist keywords per spreadsheet | 200 |
| Custom Wordlist keywords per account | 1,000 |
| Dataset cells per account | 1,000,000 |
| Feature | Limit |
|---|
| Tunnels per account | 1,000 |
| IP routes per account | 1,000 |
Active cloudflared replicas per tunnel | 25 |
| Feature | Limit |
|---|
| DEX Tests per account | Zero Trust Free: 10
Zero Trust Standard: 30
Zero Trust Enterprise: 50
|
| Remote captures per day | Zero Trust Free: 100
Zero Trust Standard: 200
Zero Trust Enterprise: 800
|
| Feature | Limit |
|---|
| Active certificates | 10 |
| Certificates generated per day | 3 |
| Custom certificates | 5 |
| Feature | Character limit |
|---|
| Application name | 350 |
| Group name | 350 |
| mTLS certificates name | 350 |
| Service token name | 350 |
| IdP name | 350 |
| Target name | 255 |
| Application URL | 63 |
| Team domain | 63 |
| Gateway API policy expression | 140,000 |
| Feature | Character limit |
|---|
| Device profile expression | 10,000 |
| Combined Split Tunnel and Local Domain Fallback entries per device profile | 1,000 |
