Cloudflare

Securing data in SaaS to SaaS applications

Sep 24, 2025Michael Tremante, Bill Sobel, Ed Conolly
Securing data in SaaS to SaaS applications
SummaryAI, from the source post

Introduces a new SaaS to SaaS proxy solution that addresses security blind spots in integrations between SaaS applications. The solution leverages Cloudflare's reverse proxy network to sit in front of SaaS applications, enabling data owners to gain visibility into data access, instantly shut off access, and detect anomalies. It also details two deployment approaches: one for data owners using vanity hostnames and another for SaaS vendors using Cloudflare for SaaS. A key technical innovation is the use of 'key splitting' to cryptographically divide bearer tokens into two fragments, Part A and Part B, where Part A is given to the integration and Part B is stored by Cloudflare. This prevents either fragment from being usable alone, enabling secure token management, instant revocation, and audit trails without storing complete credentials.

More from the Account Access Management & Permissions trail