Cloudflare follows Zero Trust best practices to secure access to all self-hosted applications for all users, whether remote or in-office.

Specifically, we use our own Zero Trust Network Access (ZTNA) service (Cloudflare Access) to verify identity, enforce multi-factor authentication (MFA) with hardware keys, and evaluate device posture for every request.

This posture evolved over several years and has enabled Cloudflare to better protect our growing workforce more effectively and advise customers based on our own experiences.