Insights
Field notes from the engineering team.

The 10-Step SASE Framework: Which Steps Apply
Cloudflare's 10-step SASE maturity framework was written for enterprises. What it maps to for a small or mid-sized business, and where most should stop.
cloudflare

Giving Contractors Access Without a VPN Client
Contractors and temporary staff on personal devices are a real access problem. A browser-based alternative to VPN clients — and where it does and doesn't fit.
cloudflare

The Business Case for Replacing Your VPN
New research shows most organizations are already moving off VPNs for Zero Trust access. The data on why, and what it takes to get buy-in.
cloudflare

Fileless PowerShell Attack Behind Node.js
A ClickFix-style attack on a Cache Valley business skipped the disk entirely: a memory-only PowerShell payload that dropped a signed-runtime backdoor.
incident response

502 Bad Gateway Error: Causes and How to Fix It
A 502 bad gateway error means a server in your request chain got an invalid response from another server. Here's what causes it and how to fix it.
IT Support

What a ClickFix Attack Looks Like From the Inside
A high-severity alert at a small-town Utah police department started with a user running a command. How it was detected, investigated, and closed in 15 minutes.
incident response

Retiring the Corporate VPN: A Phased Rollout
How AllTech phases corporate VPN retirement with Cloudflare Zero Trust — from application discovery and Access/Tunnel rollout to safe decommissioning.
cloudflare