Cloudflare acquires BastionZero to extend Zero Trust access to IT infrastructure

Cloudflare acquires BastionZero to extend Zero Trust Network Access (ZTNA) to infrastructure resources like servers, Kubernetes clusters, and databases. This integration aims to replace traditional bastion hosts and PAM solutions by providing native access management for protocols like SSH, RDP, and Kubectl. BastionZero's approach uses OpenPubkey for identity binding to cryptographic keys, enabling SSO for infrastructure access with multiple roots of trust. Key additions include frictionless privileged access management (PAM) with ephemeral credentials, a DevOps-focused approach for securing SSH connections with session recording, and clientless RDP. Future features will be integrated into Cloudflare One, with initial functionality included in the free tier for organizations under 50 users.