Cloudflare Access

Augment or replace your traditional VPN. Modernize application security with Zero Trust.

Enforce default-deny, Zero Trust rules for users accessing any application, in any on-premise private network, public cloud, or SaaS environment.

Connects users faster and more safely than a VPN and integrates flexibly with your identity providers and endpoint protection platforms. Try it forever for up to 50 users with our Free plan.

Security shield zero trust blue

Granular application access control without lateral movement. Users can seamlessly access the resources they need and are blocked from those they do not.

Security shield ddos protection blue

Enforce consistent role-based access controls across all SaaS and self-hosted applications -- cloud, hybrid, or on-premises.

User multi blue

Accelerate remote access and reduce reliance on VPN with ZTNA delivered on Cloudflare's globally distributed, DDoS-resistant edge network.

Protect any app

  • Cloudflare is both identity and application agnostic, allowing you to protect any application, SaaS, cloud, or on-premises with your preferred identity provider.
  • Apply strong, consistent authentication methods to even legacy applications with IP firewall and Zero Trust rules.

Enforce device-aware access policies

Teams access improvement plan spot illustration
  • Before you grant access, evaluate device posture signals including presence of Gateway client, serial number, and mTLS certificate, ensuring that only safe, known devices can connect to your resources.
  • Integrate device posture from Endpoint Protection Platform (EPP) providers including Crowdstrike, Carbon Black, Sentinel One, and Tanium.
Learn more
Teams access improvement plan spot illustration

Read our step-by-step guide to replace your VPN with Cloudflare

Slide 1 of 4

Enable identity federation across multiple identity providers

teams-access-third-party-users
  • Integrate all of your corporate identity providers (Okta, Azure AD, and more) for safer migrations, acquisitions and third-party user access.
  • Enable one-time-pins for temporary access.
  • Incorporate social identity sources like LinkedIn and GitHub.
teams-access-third-party-users

Connect users flexibly, with or without a client

  • Facilitate web app and SSH connections with no client software or end user configuration required.
  • For non-web applications, RDP connections, and private routing, utilize one comprehensive client across Internet and application access use cases

Visibility meets simplicity

  • Access allows you to log any request made in your protected applications - not just login and log out.
  • Aggregate activity logs in Cloudflare, or export them to your cloud log storage or SIEM provider.
Slide 1 of 4

Yesterday's approach

Default trust, lateral movement

In the traditional 'castle-and-moat' model, organizations put applications behind on-premise hardware, and then forced users through a remote acccess appliance (like a VPN) to secure their traffic.

The default trust granted by VPNs invite attackers to move laterally and spread harm across your network. Plus, backhauling traffic through VPN clients leads to sluggish performance and in turn, less productive users.

As attackers become more sophisticated, apps and data move to the cloud, and hybrid work becomes the norm, these risks become too great to ignore.


Modern approach

Zero Trust Network Access (ZTNA)

Instead of a VPN, users connect to corporate resources through a client or a web browser. As requests are routed and accelerated through Cloudflare’s edge, they are evaluated against Zero Trust rules incorporating signals from your identity providers, devices, and other context.

Where RDP software, SMB file viewers, and other thick client programs used to require a VPN for private network connectivity, organizations can now privately route any TCP and UDP traffic through Cloudflare’s network where that traffic is accelerated, verified, and filtered in a single pass for optimal performance and security.

Cloudflare Access (ZTNA) and SASE

Zero Trust application access is an important part of the Secure Access Service Edge (SASE) network security model.

Learn how Cloudflare Access fits into Cloudflare’s SASE offering, Cloudflare One, and our broader approach to transforming security and connectivity.

Learn more

Securing applications is just one step towards Zero Trust. Learn where to go next.

Resources

Product Brief: Cloudflare Access

Summarizes key features and benefits of Cloudflare's Zero Trust Network Access service, Cloudflare Access.

Download datasheet
Thumbnail - Cloudflare One Resources - SASE Whitepaper
Considering VPN replacement? Compare 3 remote access approaches

Yes, you really can replace your VPN with Zero Trust Network Access. Download this technical whitepaper to compare alternative remote access approaches and find the best option for your organization.

Download whitepaper
Cloudflare One Week 2022 - Replace your VPN
How to augment or replace your VPN with Cloudflare

Offloading key applications from your traditional VPN to a cloud-native ZTNA service like Cloudflare Access is a great place to start with Zero Trust

Read blog post
Cloudflare Zero Trust, SASE and SSE
Zero Trust Roadmap

Learn how to transform your security with Zero Trust with practical steps and implementation timelines in this vendor agnostic roadmap.

Start your Zero Trust journey
A Bridge to Zero Trust
PDF: Cloudflare Zero Trust

Cloudflare Zero Trust is a security platform that increases visibility, eliminates complexity, and reduces risks as remote and office users connect to applications and the Internet. In a single-pass architecture, traffic is verified, filtered, inspected, and isolated from threats.

Download
Developer Week
The Zero Trust Guide to Developer Access

Zero Trust Network Access can empower your technical teams to work faster, while strengthening the security of your build environment.

Download whitepaper
SaaS Remote Work
Zero Trust for SaaS Apps

Cloudflare's Zero Trust platform enables your organization with visibility into and policy controls over SaaS applications. Learn how Cloudflare helps you discover shadow IT, apply Zero Trust access policies, and data protection controls for SaaS apps.

Download solution brief
Cloudflare Zero Trust, SASE and SSE
Foundational concepts: Zero Trust, SASE and SSE

Understand the Zero Trust, SASE and SSE capabilities included in the Cloudflare One platform.

Read blog post

Helping organizations worldwide progress towards Zero Trust

Secure access to your corporate applications without a VPN.