Cloudflare logo

Cloudflare Zero Trust and Application Security

Cloudflare · Cloud and Network Security

Protect websites and applications and give people secure access, all on one global network.

Draft summary. This page summarises what the vendor's product family is generally known for. Each claim is pending confirmation against vendor documentation.

Overview

Cloudflare places its network between users and the internet, and between visitors and your applications. It absorbs DDoS attacks, filters malicious web traffic with a web application firewall, manages bots and speeds up delivery with caching and DNS.

Its Zero Trust products give employees and contractors access to internal applications and the web through identity checks and filtering, as an alternative to traditional VPN. Both sides are managed from one dashboard.

Primary capability
Application protection and Zero Trust access on a global network
Deployment models
SaaSPending vendor confirmation
Management effort
LowPending vendor confirmation

Customer challenges and business value

  • Public sites attract attacks

    Denial-of-service floods, bots and application attacks can take a public service down or scrape its data.

  • VPN grants too much access

    Once connected, a user often reaches far more of the network than their job requires.

  • Slow or fragile web delivery

    Users far from the origin server see slow pages, and traffic spikes can overwhelm infrastructure.

What this helps you achieve

  • Public applications stay available under attack
  • Access to internal apps granted per application and per identity
  • Faster, more resilient web delivery

Key capabilities

  • DDoS protection for websites, applications and networksPending vendor confirmation
  • Web application firewall and API protectionPending vendor confirmation
  • Bot managementPending vendor confirmation
  • Zero Trust network access and secure web gatewayPending vendor confirmation
  • DNS, content delivery and cachingPending vendor confirmation
  • Email security and data loss prevention optionsPending vendor confirmation

Technical architecture and deployment

Where the product sits in a typical security architecture, and what it connects to.

Data sources

  • Public web traffic
  • Employees and contractors
  • Applications and APIs

This product

Cloudflare global network

Outputs and actions

  • Filtered traffic to origin
  • Access decisions
  • Logs to SIEM
Generic placement for this category. Actual data sources and integrations depend on the product and your environment.

Integration ecosystem

Categories of systems this type of product commonly connects to. Specific connectors and versions are confirmed with the vendor.

  • Identity providers and single sign-onPending vendor confirmation
  • Cloud hosting and origin serversPending vendor confirmation
  • SIEM and log platformsPending vendor confirmation
  • Endpoint management and device posture toolsPending vendor confirmation

Common use cases

  • Protecting a public website or API from DDoS and bots
  • Replacing VPN with per-application access
  • Filtering web and DNS traffic for staff
  • Improving performance for a global audience

Frequently asked questions

Is Cloudflare a CDN or a security product?

Both. It began as content delivery and now covers application security and Zero Trust access. We help choose which services fit your needs.

Where does the information on this page come from?

This page is a draft summary of what the vendor's product family is generally known for. Capabilities, deployment models and integrations are marked as pending until they are checked against vendor documentation. Ask us for a confirmed scope for your environment.

Cato Networks logo

Cato SASE Cloud

Cato Networks · Cloud and network

Unified SD-WAN and cloud-delivered network security (SASE)

Talk to an expert about Cloudflare Zero Trust and Application Security

Share your environment and requirements. We will confirm product details with the vendor and help you decide.

Request a consultation