Cloudflare introduces one-click security for Workers
Keep your internal applications private by default, prevent data leaks.
1Rapid development, major risk
AI-powered tools have accelerated employee application development. However, this speed introduces security vulnerabilities and data leak risks. Cloudflare's new solution aims to automatically protect all applications running on Workers. Particularly crucial for companies handling sensitive data, marking a significant update in cloud security.
2Account-level security policy
The new feature enables creating account-wide security policies for all Workers. This ensures all newly created applications remain private by default. Policies can be configured separately for preview URLs and production environments. A game-changer for security management in large teams, simplifying complex processes.
3Per-Worker protection
Access policies can be applied to individual Workers. The new tab in Worker view clearly displays active policies. Priority order: hostname policies > Worker policies > account policies. This flexibility addresses diverse security needs across different applications and teams.
4Simplified authentication
Users can sign in with existing identity providers. Access can be restricted by email addresses, domains, or groups. Service tokens enable agent access. User information becomes directly available in code without requiring JWT validation, streamlining development workflows.
5Real-time user tracking
For protected Workers, each request reveals user email, name, and groups. This data enables personalized content delivery, permission management, and user activity logging. Easily accessible through ctx.access.getIdentity() method, eliminating complex token parsing.
6Local development testing
Wrangler dev allows authentication simulation during local development. Adding an access block to wrangler.jsonc enables testing for different users. Verifying correct content display per user no longer requires repeated deployments, significantly speeding up development cycles.
7Dedicated solution for internal platforms
Companies using Workers for Platforms can maintain all applications as private by setting a single Access policy on the dispatch Worker. All Workers within the namespace are automatically protected. Offers an ideal security approach for large-scale internal platforms handling sensitive operations.
8New security standard
Cloudflare's update establishes a new standard in cloud application security. Effectively prevents data leaks caused by developer errors while maintaining user-friendly implementation. Predicted to become essential for organizations processing sensitive data, setting benchmarks for the industry.
Original article: Cloudflare Blog — Cloudflare, Worker'lar için tek tıkla güvenlik sunuyor