Preview Mode
Documentation
Cloudflare extends inline security controls to deliver simple, preventative cloud security. Announcement >

Cloudflare Gateway

A cloud-native, low-latency Secure Web Gateway (SWG)

With visibility into approximately 20% of the web, Cloudflare’s unmatched network scale protects employee Internet browsing and blocks breach-causing threats.

BENEFITS OF CLOUDFLARE GATEWAY
Lightning bolt icon
Accelerate user Internet access

No more traffic backhauling. Our single-pass inspection is 50% faster than SWG alternatives.

Shield with checkmark icon
Block known and unknown threats

Cloudflare's DNS and HTTP telemetry and threat detection models catch more risks.

View icon
Monitor traffic across your network

Stack in-line Zero Trust services to provide holistic Internet traffic visibility across users, devices, and locations.

Wrench icon
Easy implementation and management

Streamline policy building and auditing with predefined categories.

How it works

Inspect browser traffic from our global network

Our Secure Web Gateway runs everywhere in Cloudflare’s global network, letting you inspect traffic wherever employees work.

It also runs in-line with our data loss prevention and remote browser isolation — offering secure browsing with no disruptions.

Learn how Gateway works within Cloudflare’s SASE platform

ANALYST RECOGNITION
Gartner logo
Cloudflare named in 2024 Gartner® Magic Quadrant™ for Single-Vendor SASE

We believe this recognition is a testament to Cloudflare’s “light branch, heavy cloud” architecture and its ability to help global, cloud-minded enterprises accelerate their network modernization.

Forrester logo
Cloudflare a Strong Performer in The Forrester Wave™: Security Service Edge Solutions, Q1 2024

Cloudflare received the highest score in the global network criterion. We believe this recognition validates our commitment to build SASE “the right way,” converging network and security services on a composable, programmable connectivity cloud.

KuppingerCole Analysts logo
Cloudflare named a "Leader" in 2023 KuppingerCole Leadership Compass for SASE

Through its 2023 SASE market analysis, KuppingerCole Analysts AG cited several Cloudflare strengths such as our large globally distributed presence and sophisticated traffic acceleration, massive backbone capacity, 100% uptime guarantee, and innovative Remote Browser Isolation.

What our customers are saying

“Algolia is growing pretty fast. We needed a way to have visibility across our corporate network without slowing things down for our employees. Gateway gave us a simple way to do that.”

Director of Infrastructure & Security — Adam Surak

TOP GATEWAY USE CASES
DDoS ransomware icon
Protect against phishing and ransomware

Block attacks with proactive filtering and inspection policies across many security categories.

Building icon
Secure distributed remote offices

Protect office users across any location with DNS filtering or more advanced inspections.

Gear icon
Protect remote workers

Keep users safe on the open web, regardless of where they work.

Helping organizations worldwide progress towards Zero Trust


Threat protection features across full Zero Trust platform
Free Plan
Best for teams under 50 users or enterprise proof-of-concept tests.

$0 forever
Get started
Pay-as-you-go
Best for teams over 50 users solving narrow SSE use cases and do not require enterprise support services.

$7/user/month
Get started
Contract Plan
Best for organizations building toward a full-featured SSE or SASE deployment that also desire maximum support.

Annual custom price per user
Talk to an expert

Threat Protection

Comprehensive security categories
Comprehensive security categories
Block by ransomware, phishing, DGA domains, DNS tunneling, C2 & botnet, and more.

Recursive DNS filtering
Recursive DNS filtering
Filter by security or content category. Deploy via our device client or via routers for locations.

HTTP(S) filtering
HTTP(S) filtering
Control traffic based on source, destination country, domains, hosts, HTTP methods, URLs, and more. Unlimited TLS 1.3 inspection.

L4 firewall filtering
L4 firewall filtering
Allow or block traffic based on ports, IPs, and TCP/UDP protocols.

Antivirus inspection
Antivirus inspection
Scan uploaded / downloaded files across types (PDFs, ZIP, RAR, etc.)

Integrated threat intelligence
Integrated threat intelligence
Detection via our own machine learning algorithms and third-party threat feeds.

IPv6-only & dual stack support
IPv6-only & dual stack support
All functionality available for IPv4 and IPv6 connectivity.

SSH proxying and command logging
SSH proxying and command logging
Create network policies to manage and monitor SSH access to your applications

Network-level policies for physical locations
Network-level policies for physical locations
Secure connectivity for DNS filtering directly from offices.
Up to 3 locations
Up to 50 locations
Up to 250 locations

Remote Browser Isolation (natively integrated)
Remote Browser Isolation (natively integrated)
Render all browser code at the edge, instead of locally, to mitigate threats. Deploy with or without a device client. Selectively control what activity to isolate and when.
Add-on
Add-on

Email Security
Email Security
Stop phishing and business email compromise.
Add-on

Proxy endpoints for PAC file support
Proxy endpoints for PAC file support
Apply HTTP policies at the browser level by configuring a PAC file. Apply filters without deploying client software on user devices.

Dedicated egress IPs
Dedicated egress IPs
Dedicated range of IPs (IPv4 or IPv6) geolocated to one or more Cloudflare network locations.
Add-on

Resources

Resources card - Thin top orange line  - image
Securing distributed workplaces

Modernize branch office security with approachable initial steps like location-based DNS filtering.

Read the solution brief
Resources card - Thin top orange line  - image
Multi-channel phishing threat defense

See how Cloudflare protects users, apps, and networks from multi-channel phishing.

Watch demo
Resources card - Thin top orange line  - image
Interactive Tour of Cloudflare’s Zero Trust Platform

Walk through key capabilities in a simulated dashboard, exploring workflows across 25+ short demo videos.

Tour our Zero Trust platform

Get Cloudflare Gateway for your enterprise