Cloudflare Gateway

Zero Trust security for Internet browsing — no backhauling required. Free for up to 50 users. Scalable to 100,000s of users.

Cloudflare’s secure web gateway keeps your data safe from malware, ransomware, phishing, command & control, Shadow IT, and other Internet risks over all ports and protocols. Log every user interaction with rich details.

Get Started Free Contact Sales

Block phishing and malware before they strike, and contain compromised devices before they cause breaches.

Point traffic to Cloudflare from corporate devices, with client support for Windows, Mac, iOS and Android.

Traffic inspection with a policy builder that offers advanced control to filter how data flows.

Block threats on the Internet, known and unknown

Block access to known bad, risky, or unwanted destinations at the DNS or HTTP level with our massive corpus of threat intelligence.
Security, content and application-based categories make building policies and auditing security or compliance incidents easy.
Not sure whether to allow or block something? Just add Browser Isolation to keep all risks faraway from your endpoints with one click.

Control the flow of data in and out of your organization.

Gain the benefits of data loss prevention (DLP) without the complexity with file type controls that can stop users from uploading files like documents and spreadsheets to unsanctioned apps and sites like social media.
Prevent malicious downloads with AV scanning and by blocking users from downloading active types of files like executables and libraries.

Slide 1 of 3

"Algolia is growing pretty fast. We needed a way to have visibility across our corporate network without slowing things down for our employees. Gateway gave us a simple way to do that."
Adam Surak
Director of Infrastructure & Security

Faster Internet access

Existing firewall or secure web gateway solutions haul user requests to centralized scrubbing centers for inspections, slowing down user access.
Cloudflare’s edge network operates in 250 locations around the world, which means it's always close to your users and the resources on the Internet they need.
It uses Anycast with a 100% uptime SLA, which means you never have to configure where user-initiated traffic is routed or worry about outages.

SaaS application control

Cloudflare’s logging capabilities allow you to discover unsanctioned use of SaaS applications, and easily build a policy to block access to such applications.
Integrate users and role-based groups from your identity provider into Cloudflare to limit access to specific subdomains and functions of SaaS applications.

Near real-time monitoring of traffic across your organization.

Cloudflare’s logs provide visibility into your Internet and web traffic — across all users, devices, and locations.
In under five minutes, you can push logs directly into your SIEM or cloud storage platform of choice.

Sign up free for up to 50 users

How it works

Legacy approach

Teams need to connect to the Internet to do their work. Legacy approaches attempted to force that traffic, which is mostly encrypted, through appliances that could not scale with complex and costly implementations to mitigate hardware failure or software upgrade downtime.

Cloudflare for Teams

Cloudflare replaces always outdated boxes with one global network. And in one platform, we unite once-distinct point products including Secure Web Gateway (SWG), DNS Security, and Remote Browser Isolation (RBI) with Cloud Access Security Broker (CASB) and Data Loss Prevention (DLP) use cases.

Cloudflare Gateway and SASE

A secure web gateway is an important component of the Secure Access Service Edge (SASE) network security model. Learn how Cloudflare Gateway integrates seamlessly with the other security and connectivity tools in Cloudflare’s SASE solution, Cloudflare One.

Learn more