Alternatives to Cloudflare Access

Cloudflare Access protects self-hosted applications, SaaS services, and infrastructure by checking identity, device posture, and request context on every request. Its default-deny, resource-level policies can replace or supplement a legacy VPN, while browser access supports contractors, partners, and unmanaged devices through social identity providers or one-time PINs. It also covers SSH and RDP targets, and administrators can manage policies through APIs and Terraform. Integrations with SAML- and OIDC-compliant identity providers and several device-management partners broaden deployment options.