VPN replacement with Access and Tunnel
Replace broad network VPN with per-app identity, posture, and connector-based private access.
Open designSolutions
Reusable Cloudflare One designs.
Architecture patterns, rollout plans, validation checks, and operating notes for common security and networking outcomes.
Bring your IdP or use Cloudflare-native identity
Pick the right login model for employees, admins, contractors, partners, and cross-account teams.
Open designSafe workforce AI adoption
Discover AI apps, allow sanctioned tools, restrict uploads, and apply prompt-level DLP.
Open designDLP for SaaS and browser traffic
Baseline sensitive data flows, tune confidence, and enforce on high-risk destinations first.
View guidanceBranch modernization with Cloudflare WAN
Connect sites with IPsec/GRE, apply route controls, steer traffic to Gateway, and test failover.
View module mapClientless partner access
Use Access and Browser Isolation where installing a device client is not possible or desirable.
Browse notesSecure AI agent tool access
Put MCP portals and tool access behind Zero Trust policy, service auth, and request logging.
View module map