Securing data in SaaS to SaaS applications

What this post added

Introduces a new proxy-based approach for securing SaaS-to-SaaS integrations, inspired by the Salesloft breach. This involves two deployment models: one for data owners using vanity hostnames to proxy traffic to SaaS applications, and another for SaaS vendors to proxy traffic to their own services. Both models leverage Cloudflare's reverse proxy network for visibility, anomaly detection, and access control. A key technical innovation is the use of 'key splitting' to cryptographically divide bearer tokens into two fragments, with one fragment stored at the edge and the other with the integration, preventing complete tokens from being stored and enabling rapid revocation.