Hims is already a Cloudflare customer · This is what's next

hims, expanded on Cloudflare.

Hims already runs the edge, bot, and WAF tier on Cloudflare. This demo shows what's possible by consolidating Fastly and Cloudinary onto the platform — and unlocking new capabilities like AI symptom-to-treatment matching that don't exist on hims.com today.

Pages Workers AI Vectorize R2 Images Workers for Platforms Realtime
// hims.com today (observed from response headers)
Cloudflare + Fastly + Cloudinary + AWS origin
  • Edge / Bot / WAFCloudflare ✓
  • Mid-tier cacheFastly + Varnish
  • Image CDNCloudinary
  • Origin computeAWS (CloudFront, S3)
  • Symptom discoveryQuiz / keyword
  • Vendors in path4+
// Consolidated on Cloudflare
One platform, fewer vendors, new capabilities
  • Edge / Bot / WAFCloudflare (kept)
  • Mid-tier cacheTiered Cache (replaces Fastly)
  • Image CDNR2 + Images (replaces Cloudinary)
  • Origin computeWorkers + D1 + KV
  • Symptom discoveryWorkers AI + Vectorize
  • Vendors in path1

Eliminate two vendors from the request path. Reduce egress to $0/GB on images. Add AI-native capabilities that don't exist today — without changing the edge already in production.

Hims & Hers serves millions of subscribers across 50 states, shipping personalized care 100% online.

2M+
Active Subscribers
$1.5B
2024 Revenue
50
States Served
24/7
Provider Access
NEW — Workers AI + Vectorize

AI Symptom-to-Treatment Matching

Describe what's on your mind. Workers AI generates embeddings on the same Cloudflare edge that already serves hims.com. Vectorize searches the treatment catalog. Results in under 50 ms — and PHI never leaves the edge boundary already in production.

Try:
1
Patient describes their concern
2
Workers AI · bge-base-en-v1.5 generates embedding
3
Vectorize searches treatment catalog
4
Results in <50 ms from nearest edge
Live · No signup required

This isn't a slide.
It's a live Worker.

The matcher above is calling a real Pages Function right now — generating real embeddings on Workers AI, querying a real Vectorize index, served from the nearest of Cloudflare's 330+ cities. Every step shows real latency on the same network already serving hims.com.

No PHI persisted anywhere
Real Workers AI inference
Sub-50ms p50 globally
hims-on-cloudflare.pages.dev
POST /api/match
→ Workers AI embed 62 ms
→ Vectorize query 11 ms
→ Compose response 3 ms
Total ~76 ms
GET /api/health
→ AI: ✓ Vectorize: ✓ D1: ✓
Served from R2 + Cloudflare Images

Personalized care, delivered fast

Sample treatments from the Hims catalog — image hosting on R2 (zero egress), transforms via Cloudflare Images, page served from Pages.

Hair

Finasteride + Minoxidil

Daily oral + topical regimen. Clinically proven for hair loss.

From $22/mo
Weight Loss

GLP-1 Weekly Injection

Provider-prescribed weight management with personalized check-ins.

From $199/mo
Sexual Health

Sildenafil (Generic Viagra)

FDA-approved, prescribed online, shipped discreetly.

From $2/dose
Mental Health

Anxiety & Depression Care

Therapy + medication, 100% online, with licensed providers.

From $85/mo
Built for healthcare at the edge

HIPAA-ready. Already bot-protected. Globally fast.

Bot Management — live today

The __cf_bm cookie is already issued on every hims.com response. Scraper protection for provider listings and pricing is in production now.

WAF + DDoS — live today

Every property — hims.com, forhims.com, forhers.com, api.forhims.com — already returns server: cloudflare. The protection layer is here.

+

Smart Placement for PHI

Pin sensitive workloads in-region automatically when Workers are introduced — without rewriting application code.

+

AI Gateway audit logs

Every Workers AI inference logged for compliance review. Built-in token caching and rate limits, no model vendor lock-in.

Architecture

What's already on Cloudflare. What could be next.

Every component is labeled honestly: kept (already on Cloudflare today), consolidate (move an existing third-party vendor onto Cloudflare), or new (capability that doesn't exist on hims.com yet).

CDN + WAF + DDoS

Edge already in production

Every hims.com, forhims.com, forhers.com, and api.forhims.com request returns server: cloudflare. The edge layer is already here.

Status: kept ✓
Bot Management

Already mitigating bots

Response headers show the __cf_bm cookie — Cloudflare Bot Management is already active in front of the storefront.

Status: kept ✓
Tiered Cache

Retire the Fastly + Varnish layer

Headers show via: 1.1 varnish and x-served-by: cache-pao-… — there's a Fastly mid-tier behind Cloudflare. Tiered Cache + Cache Reserve can replace it.

Consolidate
R2 + Images

Replace Cloudinary

Product photos and before/after content currently flow through cloudinary.forhims.com. Move object storage to R2 (zero egress) and transforms to Cloudflare Images.

Consolidate
Workers

Move quiz + commerce APIs to the edge

The intake quiz, cart, and subscription APIs at api.forhims.com are already fronted by Cloudflare. Run the logic on Workers next to the edge they already terminate at.

Consolidate
Workers AI + Vectorize

AI symptom-to-treatment matching

Semantic discovery across the treatment catalog. Privacy-first inference at the edge. Live in this demo above.

New capability
Workers for Platforms

Provider workspaces

Isolated per-provider compute for clinical tools and EMR integrations — at the same edge already serving the storefront.

New capability
Cloudflare Realtime

Provider video consults

Low-latency 1:1 video for telehealth visits — no SFU servers to operate, deployed at the same edge.

New capability
D1 + KV + Durable Objects

Edge-native session state

Quiz progress, cart, subscription metadata co-located with the Workers that read them. No connection pooling.

New capability
The business case

Consolidate the stack. Unlock what's next.

−2
Vendors removed

Retire Fastly + Varnish (mid-tier cache) and Cloudinary (image CDN) — both consolidate into products already on the Cloudflare contract.

$0
Image egress

R2 has zero egress. Imagery currently flowing through Cloudinary becomes flat-rate on the existing Cloudflare bill.

<50ms
AI symptom match

Workers AI + Vectorize surface the right treatment in real time — and PHI never leaves the edge that's already in production.

1
Vendor in the path

Edge, cache, images, compute, AI, and bot mitigation under a single contract, single dashboard, single trust boundary.

What stays · What consolidates · What's net-new
  • Stays: CDN, WAF, DDoS, Bot Management — production today, no migration risk.
  • Consolidates: Fastly + Varnish → Tiered Cache. Cloudinary → R2 + Cloudflare Images. Quiz/commerce APIs → Workers.
  • New — AI symptom matching. Workers AI + Vectorize, edge-private. Live above.
  • New — Provider video consults. Cloudflare Realtime replaces SFU stacks (Twilio, Vonage).
  • New — Provider workspaces. Workers for Platforms for per-provider isolated compute.
  • New — Edge-native session state. D1 + KV + Durable Objects co-located with Workers.

Ready to explore the next phase?

Hims is already running the edge tier on Cloudflare. This demo was built and deployed in under 2 hours on top of it. Let's talk about what consolidating Fastly and Cloudinary — and unlocking AI-native capabilities — could look like as the next chapter of an existing partnership.