Cloudflare director Ledbetter sells $3.4m in stock

Cloudflare reported Q4 2025 revenue growth of 34% year-over-year, a 48% increase in remaining performance obligations and roughly 50% growth in new annual contract value. Director Carl Ledbetter sold 15,000 Class A shares on Mar 18, 2026 at $227.05 for $3,405,750 under a Rule 10b5-1 plan and now directly owns 938,073 shares. Baird upgraded to Outperform (PT $260), TD Cowen reiterated Buy (PT $265) and Cantor Fitzgerald remained Neutral, while Cloudflare announced post-quantum encryption across its SASE platform and deeper SentinelOne Logpush integration—supporting growth/AI narratives but with noted valuation concerns.

Analysis

The structural move to combine network-level controls with endpoint telemetry materially raises switching costs for enterprises that standardize on a single vendor stack. That creates a multi-year revenue-mix lever: higher ARPU through bundled telemetry + security services, plus the potential to sell higher-margin managed services to MSSPs and large cloud customers. Expect gross retention and contract length to matter more than headline new bookings in determining multiple expansion over 12–36 months.

Macro sensitivity is the key hidden risk: a repricing of rate-cut expectations or a geopolitical de‑risking event will increase discount rates and compress growth multiples quickly — tech names with stretched expectations are vulnerable to 20–40% drawdowns inside 3–6 months. Operational execution is the other pivot — post-quantum and telemetry integrations will drive stickiness only if channel tooling and professional services scale; failures here shift the story from durable ARR to one-off product sale.

The insider trade under a Rule 10b5-1 plan should be treated as noise for short-term signaling but still increases available float and could pressure liquidity on weak prints. On the flip side, partners that ingest high-fidelity telemetry (SIEMs, observability platforms, cloud infra) are likely to win incremental cross-sell — this creates a corridor where cybersecurity and observability equities decouple from pure CDN/edge peers.

As a contrarian nuance: consensus fears of valuation fatigue may be overstated if the company can convert a small incremental percentage of customers into premium telemetry tiers — a 2–3% uplift in enterprise ARR mix could justify an outsized multiple re-rating over 12–24 months. Watch concrete adoption metrics (telemetry attachment rate, new ACV from managed services) as binary catalysts that will either validate or vaporize the current premium.

Key Decisions for Investors

• Pair trade (12 months): Long S equity or 12-month 15–25% OTM calls (size 1–2% NAV) paired with short NET 6–12 month 20% OTM call/put ratio or short equity (size 1% NAV). Rationale: play endpoint/telemetry monetization vs valuation vulnerability; target asymmetry 2.5:1 if NET re-rates down 25% while S rerates up 20%.
• Directional hedge (6–9 months): Buy a NET put spread 30%/50% OTM (bullish cost control) sized at 1% NAV to protect against multiple compression should macro rates reprice; target payoff 3–4x premium if shares gap down on a macro shock.
• Event-driven long (9–18 months): Buy S 12-month 20% OTM calls (or outright equity small position) to capture continued telemetry/SIEM adoption; size 1–2% NAV with 4–6x upside if telemetry ARR attachment accelerates and ACV growth beats consensus.
• Risk control: Establish a stop/trim on NET exposure at a 15–20% adverse move or if telemetry attachment rate in the next quarterly release exceeds 20% (in which case unwind short leg).