Introducing Cloudflare Access: Like BeyondCorp, But You Don’t Have To Be A Google Employee To Use It

This post introduces Cloudflare Access, a perimeter-less access control solution for cloud and on-premise applications. It acts as a unified reverse proxy that enforces access control by ensuring every request is authenticated (integrating with identity providers like Google, Azure AD, and Okta, and supporting TLS client authentication), authorized (via configurable access policies for groups and users), and encrypted (using HTTPS, eliminating the need for VPNs). Features include easy policy changes, session duration modification, user session revocation, and centralized logging. It can be paired with Argo and Argo Tunnel for enhanced performance and security, and integrated with the Web Application Firewall for legacy application protection. Access is powered by Cloudflare's global network.