20 Oct 2021 | Learn where ZTNA and IAM overlap and Cloudflare's perspective on how to apply both to advance Zero Trust Register now

Cloudflare One

Secure Access Service Edge

Cloudflare’s SASE, Cloudflare One, is a Zero Trust network-as-a-service platform that dynamically connects users to enterprise resources, with identity-based security controls delivered close to users, wherever they are.

Fix your cracking corporate perimeter

Cloudflare One helps you move away from the old model of network infrastructure — centralized corporate data centers secured by an on-premise network perimeter.

Make the Internet secure, fast, and reliable for your business

Cloudflare One

Cloudflare One supports Secure Access Service Edge (SASE) by combining network connectivity services with Zero Trust security services on a purpose-built global network.

Replace expensive, proprietary circuits with a single global network that provides built-in Zero Trust functionality, DDoS mitigation, network firewalling, and traffic acceleration.

Learn more about Network Services

Connect users to resources simply and securely with no VPN. Block lateral movement, ransomware, malware, and phishing.

Learn more Zero Trust Services

Why Cloudflare

Simple deployment and management

Every Cloudflare One service runs in every one of our 250+ cities around the world. No need to manually integrate multiple point products as you progress to a SASE model.

Consistent security and speed anywhere on Earth

Every Cloudflare data center provides single-pass traffic inspection and routing, giving users anywhere on Earth the same protection — without losing speed due to latency or the ‘trombone effect.’

Connects to what you already use

Cloudflare runs the world’s most powerful, most-peered network, and Cloudflare One supports the identity, endpoint, and cloud providers you already use. Easy to use, integrate once.

Learn more about Zero Trust integrations and network onramps.

How it works

Cloudflare One provides the security and connectivity tools you need to connect users, applications, and branch offices in a work-from-anywhere world.

Zero Trust Network Access

Connect any user to any application and private network faster and more securely than a VPN by enforcing identity- and context-based rules and limiting lateral movement.

Explore more

Secure Web Gateway

Block known and unknown Internet threats — and easily control data flows — by enforcing DNS, HTTP, network, and browser isolation rules with unlimited SSL inspection.

Learn more

Firewall as a Service

Control access — and block DDoS attacks and other threats — by enforcing stateful inspection rules on all inbound and outbound traffic, while maintaining fast performance.

Read more

WAN as a Service

Enable any-to-any connectivity with faster performance, built-in security, and increased resiliency by replacing your legacy WAN architecture with our global private backbone.

Discover Magic WAN

Cloudflare Global Network

Sitting less than 50ms away from 95% of Internet users, our network operates in 250+ cities with 100 Tbps+ capacity, 9800+ interconnects, and a 100% uptime SLA.

Explore our network

Clientless Access

Onboard any user or device in minutes — including third-parties and BYOD — with secure browser-based access to self-hosted and SaaS applications, beyond just HTTP.

Learn about one use case

Device Client

Onboard Windows, macOS, iOS, Android, ChromeOS, and Linux devices for secure client-based access to any application, private network, or Internet destination.

Read our documentation

IP Tunnels

Onboard entire public and private IP subnets via BGP Anycast route announcements with GRE tunnels, or our own Tunnel connector in cloud or on-prem environments.

Learn more

Direct Connection

Onboard your network infrastructure physically or virtually within 1600+ co-location facilities — rather than over the public Internet — for a more reliable and secure experience.

Explore how it works

Business Outcomes

Reduce attack surface by up to 91% when you isolate high-risk browsing from end user systems and isolate application access from networks.

10 → 1

Lower TCO and accelerate your business by consolidating up to 10 point products into one platform


Onboard new employees and contractors up to 60% faster when you connect users to resources through Cloudflare instead of a VPN

Slide 1 of 4

Cloudflare One Resources

Analyst report: Availability and buying options in the emerging SASE market

This in-depth research report from Enterprise Management Associates (EMA) reviews packaging, pricing, and security capabilities of nine SASE vendors, including Cloudflare.

Get the report
6 Considerations for Your SASE Setup

Secure Access Service Edge (SASE) adoption may seem intimidating, but it doesn't have to be. Read this infographic to learn 6 initial steps you can take.

View Infographic
Succeeding with SASE - Whitepaper

Download this white paper to learn what Secure Access Service Edge (SASE) is, how it secures your network, and how Cloudflare delivers SASE with Cloudflare One.

Download Whitepaper

Start your network transformation journey