Cloudflare Adds One-Click Zero Trust Login Protection for Internal Worker Apps

Cloudflare has launched a one-click feature that wraps internal Workers applications with its Zero Trust Access layer, requiring users to authenticate via identity providers such as Google Workspace, Okta, or Microsoft Entra before accessing the app. The move addresses a growing security gap created by AI-assisted development, where non-technical staff can quickly build and deploy internal tools that often ship without any authentication. Such apps, once deployed, are publicly reachable by anyone who knows or guesses the URL, posing an unnoticed but real risk — especially for small and mid-sized teams without dedicated security staff. The new protection requires no code changes or security review from the original app builder, making it accessible to teams that previously lacked the engineering resources to add a login layer. Cloudflare notes the fix applies only to Workers-hosted apps; internal tools on other platforms still depend on whatever access controls those platforms provide natively.