Cloudflare’s mandatory authentication and independent MFA protect organizations by ensuring continuous enforcement, from the moment a machine boots until sensitive resources are accessed.

Cloudflare's platform is a leading provider of internet security and performance solutions, offering insights into web security, content delivery, and DNS management. Through documentation, blog posts, and webinars, Cloudflare provides insights into protecting websites and applications from cyber threats and improving performance. Developers and IT professionals can learn about CDN (Content Delivery Network), DDoS mitigation, and firewall configurations to secure and accelerate web traffic.

Cloudflare

Cloudflare is announcing two new security features for its Zero Trust platform. The first, mandatory authentication, forces users to authenticate via the Cloudflare One Client before any Internet traffic is allowed from a managed device — closing the visibility gap that exists between machine boot and user login. The second is Cloudflare's own independent MFA, a step-up authentication layer that operates at the network edge, separate from an organization's existing identity provider (IdP). This means even if SSO credentials are compromised, attackers still face a second verification barrier. The independent MFA supports biometrics, FIDO2/WebAuthn security keys, and TOTP, with granular per-application policy controls. Mandatory authentication is initially available on Windows, while independent MFA is in closed beta.

Mind the gap: new tools for continuous enforcement from boot to login

Addressing the gap between installation and enforcement