Get a recommendation
Tell us your requirements and our advisors will help you compare and shortlist the best-fit options, free and unbiased.
A real human, fast
Someone on our team replies within one business day, no bots, no ticket queue.
Routed to the right team
Buying, selling, partnering, or investing, you reach the people who can actually help.
Independent & unbiased
No pushy sales. Just honest guidance grounded in the ecosystem.
Tailored to your context
Tell us what you need and we shape the next steps around it.
Who are you? Pick the option that fits best.
Zero trust network access to replace legacy VPNs
Updated
Cloudflare Access is a zero trust network access (ZTNA) product for securing self-hosted, SaaS and non-web applications. The vendor positions it as a way to replace legacy VPNs, verifying identity and device posture on each request.
Administrators define policies that say who can reach which application. When a user connects, Cloudflare checks the identity provider, device posture and context against the policy before allowing the request. App connectors link internal resources to the Cloudflare network, so users reach them without a VPN.
Cloudflare Access is used by IT and security teams that need to protect internal and SaaS applications for employees and third parties. The free plan is aimed at teams under 50 users or proof-of-concept tests.
Cloudflare Access has a free plan at $0, capped at 50 users, with community support and 24 hours of log retention. Pay-as-you-go is $7 per user per month billed annually, with no user cap and 30 days of logs. The Contract plan is custom priced and billed annually, with logs kept up to 6 months. The vendor says paid plans include a 100 percent uptime guarantee.
Cloudflare Access supports multiple identity providers at once and generic SAML and OIDC connectors. It also integrates with third-party endpoint protection providers for device posture. The vendor page does not name specific providers.
Perimeter 81, now part of Check Point, packages ZTNA with firewall and gateway features as a SASE product. NordLayer is a business VPN and network access product. Zscaler is a larger security service edge platform. Tailscale and Twingate are mesh and ZTNA products aimed at simpler private network access. Cloudflare Access differs by running on Cloudflare's network with a permanent free tier.
Pricing Model
Freemium
Starting Price
$0/mo
Free Options
Free version, Free trial
| Feature | Free | Pay-as-you-go | Contract |
|---|---|---|---|
| Up to 50 users | , | , | |
| Community support | , | , | |
| 24 hour log retention | , | , | |
| No user cap | , | , | |
| 30 day log retention | , | , | |
| 100 percent uptime guarantee | , | , | |
| Custom per-user pricing | , | , | |
| Logs up to 6 months | , | , | |
| Billed annually | , | , |
API Types
SDK Availability
Verify SDK availability in vendor's documentation.
Developer Features
No reviews yet. Be the first to review Cloudflare Access.
Have a question about Cloudflare Access? Ask the community.
Compliance Standards
SOC 2 Type II
EnterpriseISO 27001
EnterpriseGDPR Compliant
GlobalHIPAA
HealthcarePCI DSS
FinanceCCPA
PrivacyFedRAMP
GovernmentCSA STAR
CloudDeployment & Data
Data Residency Options
Verify with vendor for your specific region requirements.
Zero Trust Network Access (ZTNA) to replace corporate VPNs
Zero trust network access and business VPN
Quick comparisons
