About Cloudflare Zero Trust
Cloudflare Zero Trust is the security offering from Cloudflare that combines zero trust network access, a secure web gateway and remote browser isolation. It is meant for teams that want to control who can reach internal applications and what employees can reach on the internet, without relying on a traditional VPN.
The vendor site could not be read when this entry was prepared, so details are limited to the product's core scope. As a proprietary service run on Cloudflare's own network, it is managed from a cloud dashboard rather than hosted by the customer. Cloudflare has historically offered a free tier alongside paid plans, and current limits are listed on its pricing page.
Key features
- Zero trust network access to internal apps
- Secure web gateway for internet traffic
- Browser isolation for risky sites
- Managed through a cloud dashboard
Good fit for
- →Replacing a corporate VPN
- →Filtering web traffic for remote teams
- Tags
- security
- zero-trust
- ztna
- secure-web-gateway
- browser-isolation
- cloudflare
Cloudflare Zero Trust: questions and answers
- What is Cloudflare Zero Trust used for?
- Cloudflare Zero Trust is Cloudflare's zero trust suite offering network access control, a secure web gateway and browser isolation for teams protecting users and internal apps. It is a good fit for replacing a corporate VPN and filtering web traffic for remote teams.
- Is Cloudflare Zero Trust free?
- Yes. Cloudflare Zero Trust has a free plan, and paid plans start at $7 per seat per month.
- Is Cloudflare Zero Trust open source?
- No. Cloudflare Zero Trust is proprietary (closed-source) software and can't be self-hosted. Open-source alternatives to Cloudflare Zero Trust include Pomerium, OpenZiti and Octelium.
- What are some alternatives to Cloudflare Zero Trust?
- Cloudflare Zero Trust competes with Zscaler, Netskope and Tailscale. For open-source options, see Enlisted's ranked list of open-source Cloudflare Zero Trust alternatives.
Open-source alternatives to Cloudflare Zero Trust
See all
Pomerium
Security
Pomerium is an identity and context-aware access proxy.
Apache-2.0vs Cloudflare Zero Trust★ 5k
OpenZiti
Networking & VPN
The parent project for OpenZiti. Here you will find the executables for a fully zero-trust
Apache-2.0vs Twingate★ 4.4k
Octelium
Networking & VPN
A next-gen FOSS self-hosted unified zero trust secure access platform that can operate as
AGPL-3.0vs Tailscale★ 4.1k
NetBird
Networking & VPN
Connect your devices, users, and agents into a secure WireGuard®-based overlay network wit
OSSvs Tailscale★ 30k
OAuth2 Proxy
Auth & Identity
A reverse proxy that provides authentication with Google, Azure, OpenID Connect and many m
MITvs Cloudflare Zero Trust★ 15k
Infisical
Security
Infisical is the open-source platform for secrets, certificates, and privileged access man
OSSvs Doppler★ 30k
SaaS alternatives to Cloudflare Zero Trust
See all
Zscaler
Security
Cloud security platform for zero trust internet and private application access
SaaS
Netskope
Security
Security service edge platform covering CASB, secure web gateway and data protection
SaaS
Tailscale
Networking & VPN
Mesh VPN and zero trust network that connects devices without manual configuration
SaaS
Twingate
Networking & VPN
Zero trust remote access service positioned as a replacement for business VPNs
SaaS
NordLayer
Networking & VPN
Business VPN and network access security for remote and hybrid teams
SaaS
Prisma Access
Security
Palo Alto Networks cloud-delivered secure access service edge
SaaS

