Compare moats
Up to three covered companies, band by band. Every call is a curated editorial judgment, never a disclosed figure — and every band carries its cited basis.
| Cloudflare | Oracle | Montage Technology | |
|---|---|---|---|
| Moat rating | wide The band is earned by a measured share gap on a hard-to-rebuild asset, not asserted. W3Techs' 17 September 2026 survey (w3techs.com/technologies/overview/proxy) puts Cloudflare in front of 25.8% of all websites, an 85.0% share of the reverse-proxy market, against Amazon CloudFront at 5.5%, Fastly at 3.0% and Akamai at 2.1% - roughly fifteen times the nearest rival. The FY2025 10-K filed 2026-02-26 describes what a challenger would have to reproduce to contest that: a network that 'spans more than 330 cities in over 125 countries worldwide and interconnects with over 13,000 networks globally', architected to 'run every service on every server in every city' - capacity and peering accumulated city by city over a decade, not bought in a quarter. The position has been monetised without margin decay: SEC XBRL fundamentals on this site show GAAP gross margin inside a 74.5-78.7% band in every fiscal year from FY2017 to FY2025 while revenue grew from $134.9M to $2,167.9M, and Cloudflare's Q4/FY2025 results release of 2026-02-10 (cloudflare.com/press/press-releases/2026/cloudflare-announces-fourth-quarter-and-fiscal-year-2025-financial-results/) reports remaining performance obligations up 48% and new annual contract value up nearly 50% year over year. What stops this being a certainty rather than a judgement: the dominant share sits in application services, while SASE and developer compute are contested by vendors the 10-K itself concedes hold 'substantially greater financial, technical, and other resources.' | wide Oracle's FY2026 10-K (fiscal year ended May 31, 2026) describes an installed base in which "substantially all customers opt to purchase software support contracts when they purchase an Oracle software license"; that entrenchment shows up externally as the #1 DB-Engines database ranking (August 2026, first of 435 systems) and $638B of contracted Remaining Performance Obligations at Q4 FY2026 (press release, June 10, 2026) — a durable, multi-decade lock on mission-critical enterprise data layers. | narrow The 2026 interim results announcement (published 2026-08-28) cites Frost & Sullivan that in 2024 'the global memory interconnect chip market was highly concentrated, with the top three players accounting for 93.4% of total revenue; we ranked first globally with a market share of approximately 36.8%', and reports H1 2026 gross margin of 65.3%, up 4.87 percentage points. That is a real and profitable position, but its durability is not established: the 2025 annual report (https://www.hkexnews.hk/listedco/listconews/sehk/2026/0424/2026042404088.pdf) warns that 'Early-mover advantages are critical to our ability to capture market share. If competitors launch next-generation products ahead of us during product cycles, we may lose substantial market share', says the DDR5 iteration cycle 'has shortened to 12 to 18 months', and says Samsung Electronics, SK Hynix and Micron Technology 'collectively account for more than 90% of the global server DRAM market'. The lead has to be re-won every sub-generation, in a market whose top three suppliers held 93.4% of 2024 revenue and whose server-DRAM end market three companies hold more than 90% of. And on July 15, 2026 Seoul prosecutors searched the Group's South Korean office in an investigation of a potential competition-law violation (no charges as of the announcement). Narrow, not wide. |
| Moat type | cost scale The FY2025 10-K states the mechanism outright, and it is a unit-cost curve rather than a user-to-user network: 'We have chosen to utilize this idle capacity to create a free tier of service which has generated substantial global scale for us. In turn, this scale makes us attractive partners for Internet Service Providers (ISPs) globally, which reduces our co-location and bandwidth costs. As our network grows, these dynamics become even more powerful.' The same section explains why the curve applies to every line rather than one: the architecture lets Cloudflare 'deploy standard, commodity hardware' and run 'every service on every server in every city', so a new product reaches 330+ cities at near-zero incremental capital. That is what lets the filing claim Workers is offered 'at prices that are highly competitive with public cloud vendors' while FY2025 GAAP gross margin still printed 74.5%. Switching costs (traffic routed through Cloudflare, DNS delegated to it) and threat-intelligence feedback from aggregate traffic sit on top, but the filing-stated primary source is cost falling as the network grows. | switching costs The core moat is the cost of moving mission-critical databases and back-office suites: the FY2026 10-K notes substantially all license customers attach support contracts and that Oracle's Multicloud Database offerings run Oracle AI Database inside other hyperscalers' clouds — monetizing the installed base even when the customer's infrastructure leaves; the KLAS 2026 EHR report shows the same dynamic in health IT, where roughly a third of Oracle Health customers want to leave but feel unable to do so. | efficient scale The filing locates the protection in the cost and time of entry, not in exclusive IP: 'Memory interconnect chips feature high entry barriers in terms of R&D capabilities and technical expertise. New entrants require years of intensive R&D to keep pace with the latest industry standards and product iteration cycles, while also completing stringent product validation and qualification processes', and the chips must 'undergo rigorous qualification processes from server CPU vendors and memory modules manufacturers before they can be deployed at scale in commercial applications'. The products are built to open standards ('Leveraging open industry standards, we have established ourselves as a market leader in memory interconnect'), so rivals can and do build compliant parts; what keeps the field small is a market the report's Frost & Sullivan data estimate at USD1,579 million for 2025, in which the top three held 93.4% of 2024 revenue. Montage's role as JEDEC spec owner of DDR5 RCD, MDB and CKD chips is its head start inside that oligopoly, not a lock that excludes the other two. |
| Leadership | clear leader Leadership is measured, not inferred. W3Techs on 2026-09-17 records an 85.0% reverse-proxy market share against 5.5% for Amazon CloudFront and 2.1% for Akamai, and makes Cloudflare the largest authoritative-DNS provider at 18.5% of all websites versus 9.9% for the next-placed GoDaddy Group. The FY2025 10-K reports the enterprise side moving the same way - 4,298 large customers at 2025 year-end against 3,497 a year earlier and 2,756 in 2023 - and the Q4/FY2025 results release (cloudflare.com/press/press-releases/2026/cloudflare-announces-fourth-quarter-and-fiscal-year-2025-financial-results/) cites the largest annual contract value deal in company history at about $42.5M per year. The band is for the application-services core the share data covers; in SASE and in serverless compute Cloudflare is a challenger to larger incumbents, and no independent placement naming Cloudflare in those markets was obtained for this profile. | co leader Split by line: clear leader in database (DB-Engines August 2026 ranks Oracle #1 and Oracle-owned MySQL #2 of 435 systems); one of the largest enterprise-application vendors ($15.9B FY2026 SaaS revenue, competing with SAP, Salesforce, Workday and Microsoft per the FY2026 10-K); but in cloud infrastructure a ~4%-share fast-growing challenger behind Amazon (28%), Microsoft (20%) and Google (15%) per Synergy Q2 2026 data (The Register, 2026-08-01), and #2 in US acute-care EHR behind Epic (KLAS 2026). | co leader Frost & Sullivan, as cited in the interim announcement, ranks Montage first in 2024 memory interconnect chips at approximately 36.8%, with the top three at 93.4%. The two unnamed rivals therefore out-earn Montage combined, and its margin over second place is not disclosed. The company says it 'maintained our global leadership in the DDR5 generation' and calls itself 'one of the only two suppliers of DDR5 Gen 1 MRCD/MDB chips in the world'. In 2024 PCIe Retimers it is second at around 10.9%, in a market where 'the top two companies captured 96.9%'. It is first by revenue in its core market, but inside a three-way oligopoly rather than clear of it. |
| Pricing power | moderate Evidence cuts both ways, which is why this is not the top band. For it: GAAP gross margin has never left a 74.5-78.7% band across FY2017-FY2025 (SEC XBRL fundamentals on this site) even as revenue compounded 16x, and the Q4/FY2025 results release (cloudflare.com/press/press-releases/2026/cloudflare-announces-fourth-quarter-and-fiscal-year-2025-financial-results/) shows customers committing more rather than less - RPO +48% year over year and new ACV up nearly 50%. Against it: FY2025's 74.5% is the lowest reading in that nine-year series, a large permanent free tier anchors the entry price, the 10-K positions Workers 'at prices that are highly competitive with public cloud vendors', and the competition risk factor warns that larger rivals can 'sell products and services with which we compete at zero or negative margins, offer fee waivers and reductions or other economic and non-economic concessions', with competitive pressure that 'may result in price reductions, fewer subscriptions, reduced revenue and gross margin'. | moderate Strong in the installed base — the FY2026 10-K states substantially all license customers purchase support contracts, a recurring stream customers rarely drop — but the same 10-K lists "total cost of ownership" first among key competitive factors and describes intense competition across every segment; AI-infrastructure deals are won against hyperscalers and neoclouds, and Q4 FY2026 SaaS grew a moderate 10% versus 93% for IaaS (press release, June 10, 2026). | moderate Margins are high and rising. The 2025 annual report (https://www.hkexnews.hk/listedco/listconews/sehk/2026/0424/2026042404088.pdf) gives gross margin of 62.2% in 2025 against 58.1% in 2024, and the interim gives 65.3% for H1 2026, with interconnect chips at 69.3%. But the interim attributes the increase 'mainly' to 'the increase in the proportion of sales revenue of products with higher gross profit margin', which is mix, not price. The buyer side is concentrated. The annual report says the five largest customers took 77.2% of revenue and the largest 29.7%, and it warns that 'significant customer pricing demands or intensified competition, may lead to volatility in our market share and a decline in revenue'. Separately, on July 15, 2026 the Fair Trade Investigation Division of the Seoul Central District Prosecutors' Office began a search and seizure at the Group's South Korean office over 'a potential competition law violation'. Per the Group's July 16, 2026 announcement (https://www1.hkexnews.hk/listedco/listconews/sehk/2026/0717/2026071700057.pdf), none of the Group, its directors or employees had been charged. The Standard (https://www.thestandard.com.hk/finance/article/337444/Montage-Technology-shares-drop-229pc-amid-fair-trade-violation-suspicions, 2026-07-16) reports that prosecutors raided Montage, Renesas Electronics and Rambus 'on suspicion of violating fair trade acts and manipulating prices'. |
| Summary | Cloudflare sells security, performance and connectivity as services delivered from one global anycast network rather than from boxes at a customer's edge. The FY2025 10-K frames the market as a consolidation away from enterprises that 'string together a diverse set of on-premises hardware boxes from different vendors' and away from 'stringing together multiple point-cloud solutions that only address specific network needs', toward one integrated provider it calls the Connectivity Cloud, and places Cloudflare as 'a leader in this Connectivity Cloud category'. The economics are unusual: idle capacity funds a free tier, the free tier buys global traffic scale, that scale makes Cloudflare a peering partner ISPs want, and peering cuts colocation and bandwidth cost - a loop the filing says 'become[s] even more powerful' as the network grows. Independent measurement confirms where that loop has already settled the market: W3Techs on 2026-09-17 shows an 85.0% reverse-proxy share and the largest authoritative-DNS footprint at 18.5% of all websites. Commercially the company ended 2025 with roughly 332,000 paying customers in more than 190 countries and 4,298 large customers, up from 2,756 two years earlier, with no customer above 10% of revenue. The contested half of the story is the growth half: the SASE platform competes with established cloud-security, email-security and SD-WAN vendors, and the developer platform competes for storage and compute against hyperscalers, markets where the 10-K's own risk factors concede rivals have greater name recognition, larger customer bases and 'more mature products and services developed for large customers'. The core is defended; the adjacencies are being fought for, and FY2025 gross margin at a nine-year low of 74.5% is the first visible cost of building GPU capacity for that fight. | Oracle pairs the deepest switching-cost franchise in enterprise software — the #1-ranked database (DB-Engines, August 2026) plus Fusion/NetSuite back-office suites, with support attach near-universal per the FY2026 10-K — with a late but explosive push into AI cloud infrastructure: Q4 FY2026 IaaS revenue grew 93% to $5.8B and RPO reached $638B (up 363% YoY), mostly large-scale AI contracts (press release, June 10, 2026). The two reinforce each other via multicloud — Oracle Multicloud AI Database grew 404% in Q4 running inside rival clouds. The offsets: in cloud infrastructure Oracle is still a ~4%-share challenger behind AWS/Microsoft/Google (Synergy Q2 2026 data via The Register), the AI buildout drove FY2026 free cash flow to negative $23.7B, and the Cerner-based Oracle Health business has lost US hospital share for three straight years (KLAS 2026). | Montage is a fabless designer of interconnect chips for servers and PCs: DDR5 memory interface chips (RCD/DB), MRCD/MDB for high-bandwidth MRDIMM modules, CKD clock drivers for PC modules, module supporting chips (SPD, PMIC and TS), PCIe Retimers and CXL MXC memory-expander controllers, plus a smaller Jintide x86 server-CPU line built 'With the x86 cores that we procured from Intel'. Its edge is standards leadership in a concentrated niche. It invented the DDR4 '1+9' buffered architecture that was 'ultimately adopted as a JEDEC international standard', it is JEDEC spec owner of DDR5 RCD, MDB and CKD chips, and Frost & Sullivan, as cited in the interim, ranks it first in 2024 memory interconnect chips at approximately 36.8%, with the top three at 93.4%. It extended into PCIe Retimers on in-house SerDes IP and, on the same Frost & Sullivan data, ranked second in 2024 at around 10.9%, as a self-described new entrant. H1 2026 revenue was RMB3,335 million, up 26.7%, with interconnect-chip gross margin of 69.3%. The weaknesses are structural. Per the 2025 annual report, its direct customers for memory chips are module makers in a server DRAM market that three companies hold more than 90% of, and the five largest customers took 77.2% of 2025 revenue. South Korea accounted for RMB2,925 million of RMB5,456 million in 2025 revenue. And on July 15, 2026 the Seoul Central District Prosecutors' Office searched the Group's Korean office in an investigation of a potential competition-law violation. |
| Chain position | Cloudflare sits between end users and whatever hosts the application - origin data centre, public cloud or SaaS - so it is a control layer in front of infrastructure rather than infrastructure a workload runs on, which the 10-K argues is the point: customers 'concerned about being locked in to any one public cloud provider' want policy enforced by 'an independent and integrated services provider'. Two AI-era roles follow from that position. As a supplier, the filing describes 'ongoing deployment of graphics processing units (GPUs) across our global network of servers' behind Workers AI, Vectorize and AI Gateway, putting inference next to the user instead of in a region. As a gatekeeper, the application-services suite now exists in part to 'easily identify, block and control access from AI crawlers and AI agents and operators' and underpins announced efforts to let content creators monetise how those crawlers reach their work - which makes Cloudflare a toll point between AI model builders and the open web. | Supply-chain role in AI: OCI sells GPU compute for AI training and inference — the Q4 FY2026 press release attributes most of the $85B sequential RPO increase to large-scale AI contracts (some with customer-prepaid or customer-supplied GPUs totaling $75B) and guides FY2027 total revenue to $90B — making Oracle a primary capacity supplier to AI model builders. | Upstream fabless chip supplier. Per the 2025 annual report, memory interface and supporting chips go to memory module manufacturers ('our direct customers being memory module manufacturers'), and PCIe Retimers go to server OEMs/ODMs as direct customers, with cloud providers as end users. Wafer fabrication, packaging and testing are outsourced, and the five largest suppliers were 79.4% of 2025 purchases. |
| Products (share / barrier) |
|
|
|
| Long-horizon vote | +0.38 at weight 0.20 · swarm neutral Editorial prior, not backtested. | +0.30 at weight 0.20 · swarm bullish Editorial prior, not backtested. | +0.13 at weight 0.20 · swarm neutral Editorial prior, not backtested. |