Cloudflare Zero Trust

Secure access to internal services without VPNs using Cloudflare's Zero Trust platform (Access, Tunnel, Gateway, and WARP).

When to Use

• Replacing VPN access to internal web applications, SSH, or RDP.
• Enforcing identity-aware access policies on internal tools (dashboards, admin panels).
• Exposing on-premises or private-network services securely to remote teams.
• Filtering DNS traffic to block malware, phishing, and shadow IT.
• Enforcing device posture checks (managed devices, OS version, disk encryption).

Prerequisites

• Cloudflare account with Zero Trust plan (free tier supports up to 50 users).
• A domain on Cloudflare (for Access application hostnames).
• Identity provider configured (Google Workspace, Okta, Azure AD/Entra ID, GitHub).
• cloudflared CLI installed on the server hosting internal services.