[ Cloudfl... Reviews ](https://www.g2.com/products/cloudflare-one-sase/reviews) [ Cloudfl... Reviews ](https://www.g2.com/products/cloudflare-one-sase/reviews) # Cloudflare One (SASE) Features ##### ## Administration (11) Data Management Administrators can access and organize data related to incidents to produce reports or make data more navigable. Incident Logs Information on each incident is stored in databases for user reference and analytics. Reporting Produces reports detailing trends and vulnerabilities related to bot management and performance. Intelligence Reporting Actively gathers data on suspicious sources and characteristics of potentially malicious content Email Integration Suppor Supports secure implementation with popular email applications and clients. Access Management Allows administrators to set user access privileges to permit approved parties to access sensitive data. Data Loss Prevention Has pre-built data loss prevention (DLP) functions which prevent employees or accounts that have been hacked from sending out sensitive information. Policy Management Provides network security features to customize network access rules, workflows, and compliance requirements. Logging and Reporting Captures logs for all firewall functions, storing information, incidents, and activity for user reference and analysis. Application Gateway Application-level proxy that applies security mechanisms to connect clients to applications while concealing client network and computers. Concurrent Sessions Determines the number of connections a firewall is able to track and facilitate securely. Show More ##### ## Governance (3) Access Control Supports LDAP Protocol to enable access control and governance. Compliance Supports compliance with PII, GDPR, HIPPA, PCI, and other regulatory standards. Data Visibility Similifies data identification to increase visibility and management capabilities Show More ##### ## Security (17) Encryption Protects data with within and as it leaves your secure or local network. Endpoint Intelligence Analysis for users to examine threat intelligence data specific to their endpoint devices. Activity Monitoring Documents the actions from endpoints within a network. Alerts users of incidents and abnormal activities and documents the access point. Breach Detection Provides incident alerts for leaks or breaches and provides capabilities to inform administrators of attacks. Anti-Malware/Anti-Spam Prevents malware or spam in emails either through predictive or reactive anti-malware/anti-spam tools. Quarantine Isolates potentially malicious content and files before they can gain network access Advanced Threat Protection (ATP) Includes advanced tools, including machine learning analysis to detect threats often missed by traditional filtering tools, such as unsafe attachments, advanced malware, and targetted social engineering attacks. Anti-Phishing Prevents both phishing attacks and spear-fishing attacks, including impersonation attacks. Account takeover prevention Has pre-built data loss prevention (DLP) functions which prevent employees or accounts that have been hacked from sending out sensitive information. Security Automation Allows administrative control over automated security tasks. Application Security Protects application access and data. Prompts additional authentication for suspicious users. Workload Protection Protects computing resources across a network. Prompts additional authentication for suspicious users. Data Protection Protects informatin stored on premises and in the cloud. Prompts additional authentication for suspicious users. Governance Allows users to create, edit, and relinquish user access privileges. Data loss Prevention Stores data securely either on premise or in an adjacent cloud database to prevent loss of data at rest. Data Encryption/Security Manages policies for user data access and data encryption. Access Control Supports LDAP Protocol to enable access control and governance. Show More ##### ## Maintenance (3) Auditing Access pre-built and custom reports to monitor user activity and storage. Allow and block lists Prevents previous committers of fraud and other suspicious accounts from future communications Archiving Archives conversations, files, and other communications for future reference Show More ##### ## Network Management (4) Network Segmentation Allows administrative control over network components, mapping, and segmentation. Network Mapping Allows visual display of networks segmented components and their connected resources. Security Analytics Utilizes behavioral analysis to improve security procedures and documentation. API/Integrations Application Programming Interface - Specification for how the application communicates with other software. API's typically enable integration of data, logic, objects, etc. with other software applications. Show More ##### ## Identity Management (3) Adaptive Access Control Provides a risk-based approcach to determining trust within the network. Identity Scoring Calculates risk based on user behavior, permissions, and requests. User Monitoring Monitors users attempting unauthorized access to databases, applicaitons, and othe network components. Show More ##### ## Analysis (3) User Analytics Allows for reporting and documentation of individual user behavior and privileges. Cloud Gap Analytics Analyzes data associated with denied entries and policy enforcement, giving information of better authentication and security protocols. Anomoly Detection Monitors acivity related to user behavior and compares activity to benchmarked patterns. Show More ##### ## Functionality (16) SSO Provides a single access point for users to access multiple cloud products without multiple logins. Cloud Registry Details SaaS products the cloud security product can integrate with and provide security for. Mobile Device Mangement Offers the ability to set standards for types of mobile devices and networks capable of accessing data. Virtual Private Network (VPN) Provides a virtualized network for client network to mask identity, location, and other sensitive information. Antivirus Provides malware protection capabilities in addition to traditional firewall barrier technology. URL Filtering Provides access control tools to categorize and block traffic and match traffic to firewall policies. Availability Deploys firewall(s) configured in sync to prevent network failure and provide business continuity. Anti-Spam Prevents unwanted emails including bulk, mass, or other junk emails from reaching recipients mailboxes. Anti-Malware Prevents emails with malicious links or attachments embedded with malware, such as ransomware, spyware, and other viruses, from reaching email recipients. Anti-Phishing prevent social-engineering attacks such as phishing, spear-phishing, and c-level executive impersonation attacks. Filtering Functionality Provides filters such as: approved senders, whitelists, greylists such as bulk emails that may not be malicious, blocked senders, blacklists, IP reputation, content (such as profanity, credit card numbers, password protected files, and other sensitive information), virus detection, re-directs and malicious URLs, newsletter detection, attachment size, and invalid recipients. Quarantine Includes a quarantine area for users to manually inspect suspicious emails. Outbound Email Monitoring Monitors outgoing mail to prevent data loss by encrypting messages or preventing the messages from being sent. Advanced Threat Intelligence/Protection Includes advanced threat protections such as machine learning to conduct abnormal behavioral analysis, display name spoof detection especially regarding c-level impersonation attacks, detecting lookalike email domains that are visually confusing. Archiving Offers archival email retention for compliance purposes. Reporting Offers standard reporting functionality. Show More ##### ## Monitoring (7) Load Balancing Monitors traffic and distribute resources and scales infrastructure workloads to match traffic. Continuous Analysis Constantly monitors traffic and activity. Detects anomalies in functionality, user accessibility, traffic flows, and tampering. Intrusion Prevention Enforces security paramaters to prevent unauthorized access. Intrusion Detection Detects unauthorized access and use of privileged systems. Data Center Networking Provides advanced data center network services to deliver multiple high-speed IP. Multicloud Visibility Allows users to track and control activity across cloud services and providers. Anomaly Detection Constantly monitors system to detect anomalies in real time. Show More ##### ## Management (4) Multicloud Management Allows users to track and control cloud spend across cloud services and providers. DLP Configuration Offers data loss prevention tools to protect data from leaving the environments it is allowed to. Dynamic Scaling Scale resources automatically, adjusting for usage demands. Policy Enforcement Enables administrators to create access policies and applies policy controls throughout request and provisioning processes Show More ##### ## Protection (4) Firewall-as-a-Service Managed, cloud-delivered firewall that protects devices, assets, networks, and other cloud services from web-based threats. Cloud Application Brokerage Provides a single access point for users to access multiple cloud applications, services, and products through a central gateway Web Gateway Provides a private web gateway for secure internet browsing. Adaptive Access Control Provides a risk-based approach to determining trust within the network. Show More ##### ## Generative AI (3) AI Text Summarization Condenses long documents or text into a brief summary. AI Text Summarization Condenses long documents or text into a brief summary. AI Text Generation Allows users to generate text based on a text prompt. Show More ##### ## Web Content and Traffic Filtering - Secure Web Gateways (5) SSL/TLS Inspection Decrypts and inspects encrypted web traffic to detect and block threats hidden within encrypted connections. Content Filtering Analyzes web content to filter out malicious code, malware, and inappropriate material. URL Filtering Blocks access to known malicious or unauthorized websites based on predefined policies. Real-Time Traffic Inspection Inspects and analyzes inbound and outbound web traffic in real-time for threats and compliance. Ad and Tracker Blocking Blocks ads and trackers to enhance user privacy and reduce exposure to potential threats. Show More ##### ## Data Protection and Loss Prevention - Secure Web Gateways (4) Data Loss Prevention (DLP) Monitors outgoing web traffic to prevent sensitive data from being leaked or exfiltrated. Phishing Protection Detects and blocks phishing attempts to protect users from fraudulent websites and email links. Malware Protection Uses signature-based scanning, heuristic analysis, and sandboxing to detect and block malware threats. Cloud Access Security Monitors and controls access to cloud applications and services to prevent unauthorized use and data leakage. Show More ##### ## Access Control and Authentication - Secure Web Gateways (3) Application Control Regulates access to web-based applications and services as per organizational policies. Authentication and Access Control Verifies users' identities and enforces access control policies to ensure only authorized users can access permitted web resources. User and Group Policies Supports the creation of policies based on user roles, groups, or other attributes for more granular control. Show More ##### ## Performance and Management - Secure Web Gateways (5) Customizable Policy Enforcement Allows organizations to create and enforce custom web usage policies tailored to their specific needs. Bandwidth Management Prioritizes and allocates network resources based on predefined policies to optimize performance. Integration Capabilities Integrates with other security tools and systems, such as firewalls, SIEMs, and endpoint security solutions. Reporting and Logging Provides comprehensive reports and logs of web activity, including sites visited, user activity, security events, and policy violations. Threat Intelligence Integration Leverages threat intelligence feeds to stay updated on the latest threats and enhance protection. Show More ##### ## Scalability & Deployment - Network as a Service (NaaS) (3) Cloud-Based Management Provides centralized control and monitoring via API or dashboard Multi-Cloud & Hybrid Support Ensures compatibility with various cloud infrastructures On-Demand Scalability Dynamically adjusts network resources based on business needs Show More ##### ## Security & Compliance - Network as a Service (NaaS) (3) Integrated Security Features Includes encryption, firewalls, Zero Trust, and compliance policies Compliance & Regulatory Support Adheres to industry regulations like HIPAA, GDPR, and SOC 2 DDoS Protection & Threat Intelligence Provides real-time attack detection and mitigation Show More ##### ## Network Performance & Optimization - Network as a Service (NaaS) (3) Quality of Service (QoS) & Analytics Monitors performance in real-time and prioritizes critical applications SD-WAN Functionality Enhances traffic routing, load balancing, and overall efficiency Zero-Touch Provisioning Automates network setup and reduces manual intervention Show More ##### ## Remote Connectivity & Access - Network as a Service (NaaS) (6) AI-Powered Policy Management Adapts security and network policies dynamically based on user behavior Adaptive Network Security Uses AI to continuously assess and respond to emerging threats AI-Driven Network Optimization Uses AI and ML to predict congestion and optimize traffic Secure Remote Access Provides VPN-like encrypted connectivity without physical hardware 5G & Private LTE Support Enables high-speed, low-latency connections for enterprise networks Edge Computing Integration Extends network services to the edge for lower latency Show More ##### ## AI-Driven & Adaptive Features - Network as a Service (NaaS) (3) AI-Powered Policy Management Adapts security and network policies dynamically based on user behavior Adaptive Network Security Uses AI to continuously assess and respond to emerging threats AI-Driven Network Optimization Uses AI and ML to predict congestion and optimize traffic Show More ##### ## Components - Secure Access Service Edge (SASE) (5) Zero Trust Network Access (ZTNA) Enforces zero trust access rules. Wide Area Network (WAN) Integrates wide area network (WAN) capabilities, such as SD-WAN. Cloud Access Security Broker (CASB) Enforces security requirements and secures connections with cloud resources. Secure Web Gateway (SWG) Prevents unauthorized web domains from entering a network and protects against web-based threats. Firewall as a Service Provides cloud-based firewall protection. Show More ##### ## Artificial Intelligence - Secure Access Service Edge (SASE) (3) Predictive Capabilities Uses predictive analytics to anticipate emerging threats. Real-Time Threat Detection Utilizes AI algorithms to identify anomolies and block access to malicious sites. Automation Automates common workflows and remediation tasks. Show More ##### ## Artificial Intelligence - Firewall (1) AI Firewall Utilizes AI to monitor network traffic, identify anomalies, and block attacks. Show More ##### ## Identity and Access Management - Zero Trust Platforms (4) Single sign-on (SSO) Simplifies user authentication across multiple services while maintaining security. Multi-factor authentication (MFA) Ensures that users are verified through multiple credentials before access is granted, reducing the risk of compromised accounts. Role-based access control (RBAC) Grants access based on the user’s role within the organization, adhering to the principle of least privilege. Identity federation Integrates with external identity providers to manage user identities across different platforms and services. Show More ##### ## Security - Zero Trust Platforms (5) Encryption Mandatory encryption of data both at rest and in transit protects against unauthorized access. Endpoint detection and response (EDR) Continuous monitoring and real-time response capabilities with EDR help detect and mitigate threats on endpoint devices. Device posture assessment Verifies the security status of a device before granting access to network resources, ensuring that only compliant devices can connect. Micro-segmentation Divides the network into isolated segments to prevent lateral movement by attackers, ensuring that if one segment is compromised, others remain secure. Zero trust network access (ZTNA) Replaces traditional VPNs by enforcing granular, context-aware access to applications based on user identity, device, and other factors. Show More ##### ## Data Security - Zero Trust Platforms (2) Data loss prevention (DLP) Detect and prevent unauthorized access or transfer of sensitive data. Data classification Data classification automatically categorizes data based on its sensitivity, allowing for appropriate security measures to be applied Show More ##### ## Application Visibility - Zero Trust Platforms (5) API support API support ensures that the zero trust platform can integrate seamlessly with other security tools and existing infrastructure Application-level controls Provides the ability to enforce security policies at the application layer, ensuring that access to specific applications is tightly controlled. Secure application access ensures that only authorized users can access critical applications, protecting against unauthorized entry points User and entity behavior analytics (UEBA) UEBA identifies unusual behavior that may indicate a security threat, enabling proactive threat managemen Continuous monitoring Provides real-time visibility into all network traffic, user activities, and data flows to detect anomalies Show More ##### ## Reporting and Policies - Zero Trust Platforms (5) Policy automation allows for automatic application of security policies based on predefined criteria, reducing the risk of human error and ensuring consistent enforcement Regulatory compliance Regulatory compliance assists organizations in adhering to industry-specific regulations, such as the General Data Protection Regulation (GDPR), the Health Insurance Portability and Accountability Act (HIPAA), or the California Consumer Privacy Act (CCPA) Cross-platform compatibility This works across different environments, including on-premises, cloud, and hybrid setups, ensuring comprehensive security coverage Policy enforcement This ensures that security policies are consistently applied across all users, devices, and application Comprehensive reporting Detailed reports that provide insights into security events help organizations maintain compliance and optimize their security posture Show More ##### ## Agentic AI - Firewall Software (2) Autonomous Task Execution Capability to perform complex tasks without constant human input Adaptive Learning Improves performance based on feedback and experience Show More ##### ## Agentic AI - Secure Email Gateway (1) Proactive Assistance Anticipates needs and offers suggestions without prompting Show More ##### ## Agentic AI - Email Anti-spam Features (2) Autonomous Task Execution Capability to perform complex tasks without constant human input Proactive Assistance Anticipates needs and offers suggestions without prompting Show More ##### ## Agentic AI - Secure Access Service Edge (SASE) Platforms (4) Autonomous Task Execution Capability to perform complex tasks without constant human input Cross-system Integration Works across multiple software systems or databases Proactive Assistance Anticipates needs and offers suggestions without prompting Decision Making Makes informed choices based on available data and objectives Show More ##### ## Agentic AI - Zero Trust Platforms (4) Autonomous Task Execution Capability to perform complex tasks without constant human input Cross-system Integration Works across multiple software systems or databases Adaptive Learning Improves performance based on feedback and experience Proactive Assistance Anticipates needs and offers suggestions without prompting Show More ##### ## Components - Secure Service Edge (SSE) (4) Secure Web Gateway (SWG) Prevents unauthorized web domains from entering a network and protects against web-based threats. Firewall as a Service Provides cloud-based firewall protection. Zero Trust Network Access (ZTNA) Enforces zero trust access rules. Cloud Access Security Broker (CASB) Enforces security requirements and secures connections with cloud resources. Show More ##### ## Artificial Intelligence -Secure Service Edge (SSE) (3) Automation Automates common workflows and remediation tasks. Predictive Capabilities Uses predictive analytics to anticipate emerging threats. Real-Time Threat Detection Utilizes AI algorithms to identify anomolies and block access to malicious sites. Show More ##### ## Agentic AI - Secure Service Edge (SSE) (4) Decision Making Makes informed choices based on available data and objectives. Autonomous Task Execution Capability to perform complex tasks without constant human input. Cross-system Integration Works across multiple software systems or databases. Proactive Assistance Anticipates needs and offers suggestions without prompting. Show More [ ![ManageEngine DataSecurity Plus](https://images.g2crowd.com/uploads/product/image/large_detail/large_detail_d53fb42b267593d4c5bd5d9a71217ff5/manageengine-datasecurity-plus.png "ManageEngine DataSecurity Plus") Sponsored ManageEngine DataSecurity Plus 3.9/5 (10) Visit Website ](javascript:void(0)) ## Top-Rated Alternatives [ ![Proofpoint Core Email Protection](https://images.g2crowd.com/uploads/product/hd_favicon/8adf2eedd5616a9f5e200c4520f6d30d/proofpoint-core-email-protection.svg "Proofpoint Core Email Protection") Proofpoint Core Email Protection 4.6/5 (572) ](https://www.g2.com/products/proofpoint-core-email-protection/reviews) [ ![Mimecast Advanced Email Security](https://images.g2crowd.com/uploads/product/hd_favicon/a471a36636934b2b3b7a88c76cab9da9/mimecast-advanced-email-security.svg "Mimecast Advanced Email Security") Mimecast Advanced Email Security 4.4/5 (314) ](https://www.g2.com/products/mimecast-advanced-email-security/reviews) [ ![Microsoft Defender for Office 365](https://images.g2crowd.com/uploads/product/hd_favicon/a8a99a96fda235658139f710592f8a53/microsoft-microsoft-defender-for-office-365.svg "Microsoft Defender for Office 365") Microsoft Defender for Office 365 4.5/5 (278) ](https://www.g2.com/products/microsoft-microsoft-defender-for-office-365/reviews) [ View All Alternatives ](https://www.g2.com/products/cloudflare-one-sase/competitors/alternatives) Cloudflare One (SASE) Comparisons ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/small_square/small_square_f9b90f9d8d4e2cbdf787403ec274b32f/proofpoint-core-email-protection.jpg "Product Avatar Image") Proofpoint Core Email... 4.6/5 (584) [ Compare Now ](https://www.g2.com/compare/cloudflare-one-sase-vs-proofpoint-core-email-protection) ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/small_square/small_square_8488a1face071b08420911a61d461156/mimecast-advanced-email-security.png "Product Avatar Image") Mimecast Advanced Email... 4.4/5 (321) [ Compare Now ](https://www.g2.com/compare/cloudflare-one-sase-vs-mimecast-advanced-email-security) ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/small_square/small_square_4e2b08dd17397bdc99a5658447cbc589/microsoft-microsoft-defender-for-office-365.jpg "Product Avatar Image") Microsoft Defender for... 4.5/5 (294) [ Compare Now ](https://www.g2.com/compare/cloudflare-one-sase-vs-microsoft-microsoft-defender-for-office-365) ##### Categories on G2 [ Zero Trust Networking ](https://www.g2.com/categories/zero-trust-networking)[ Cloud Email Security ](https://www.g2.com/categories/cloud-email-security)[ Data Loss Prevention (DLP) ](https://www.g2.com/categories/data-loss-prevention-dlp) [ Email Anti-spam ](https://www.g2.com/categories/email-anti-spam)[ Firewall Software ](https://www.g2.com/categories/firewall-software)[ Secure Email Gateway ](https://www.g2.com/categories/secure-email-gateway)[ Zero Trust Platforms ](https://www.g2.com/categories/zero-trust-platforms)[ Secure Web Gateways ](https://www.g2.com/categories/secure-web-gateways)[ Cloud Access Security Broker (CASB) ](https://www.g2.com/categories/cloud-access-security-broker-casb)[ Cloud Edge Security ](https://www.g2.com/categories/cloud-edge-security)[ Secure Service Edge (SSE) Solutions ](https://www.g2.com/categories/secure-service-edge-sse-solutions)[ Secure Access Service Edge (SASE) Platforms ](https://www.g2.com/categories/secure-access-service-edge-sase-platforms)[ Browser Isolation ](https://www.g2.com/categories/browser-isolation)[ Network as a Service (NaaS) Platforms ](https://www.g2.com/categories/network-as-a-service-naas-platforms) Show More ##### Explore More [ SaaS data backup services comparison for businesses ](https://www.g2.com/discussions/best-saas-data-backup-services-comparison-for-businesses)[ What is the best software for multi-database environment monitoring? ](https://www.g2.com/discussions/what-is-the-best-software-for-multi-database-environment-monitoring)[ Top tools for integrating apps with legacy systems ](https://www.g2.com/discussions/top-tools-for-integrating-apps-with-legacy-systems) [ What MFA tool supports biometric authentication methods? ](https://www.g2.com/discussions/what-mfa-tool-supports-biometric-authentication-methods)[ Best audit management software for small businesses ](https://www.g2.com/discussions/what-s-the-best-audit-management-software-for-small-businesses)[ Pros and Cons Details ](https://www.g2.com/products/cloudflare-one-sase/reviews?qs=pros-and-cons) Show More [ SaaS data backup services comparison for businesses ](https://www.g2.com/discussions/best-saas-data-backup-services-comparison-for-businesses)[ What is the best software for multi-database environment monitoring? ](https://www.g2.com/discussions/what-is-the-best-software-for-multi-database-environment-monitoring)[ Top tools for integrating apps with legacy systems ](https://www.g2.com/discussions/top-tools-for-integrating-apps-with-legacy-systems) [ What MFA tool supports biometric authentication methods? ](https://www.g2.com/discussions/what-mfa-tool-supports-biometric-authentication-methods)[ Best audit management software for small businesses ](https://www.g2.com/discussions/what-s-the-best-audit-management-software-for-small-businesses)[ Pros and Cons Details ](https://www.g2.com/products/cloudflare-one-sase/reviews?qs=pros-and-cons)