Cloudflare One (SASE) Features

Administrators can access and organize data related to incidents to produce reports or make data more navigable.

Information on each incident is stored in databases for user reference and analytics.

Produces reports detailing trends and vulnerabilities related to bot management and performance.

Create, design and manage workflows for repetitive tasks

Identify and orchestrate execution of actions needed to restore systems to optimal conditions

Manage user accounts, profiles, roles, permissions, and other details across applications, devices or networks

Identify component attributes like servers, hardware, software, and manage relationships across all services

Manage and store data in a database

Create, manage, and track policies and procedures within an organization

Track and manage adherence to policies for any service, product, process, or supplier

Manage and track all disruptions and incidents

Actively gathers data on suspicious sources and characteristics of potentially malicious content

Supports secure implementation with popular email applications and clients.

Allows administrators to set user access privileges to permit approved parties to access sensitive data.

Has pre-built data loss prevention (DLP) functions which prevent employees or accounts that have been hacked from sending out sensitive information.

Provides network security features to customize network access rules, workflows, and compliance requirements.

Captures logs for all firewall functions, storing information, incidents, and activity for user reference and analysis.

Application-level proxy that applies security mechanisms to connect clients to applications while concealing client network and computers.

Determines the number of connections a firewall is able to track and facilitate securely.

Track the availability time for a designated network or website over a given period of time

Collect and analyze traffic data about website visitors

Track and manage adherence to policies for any service, product, process, or supplier

Control and manage access to company resources

Manage and track all disruptions and incidents

Plan, schedule, and execute organization's accounts and assets to ensure compliance with policies and laws

Remotely monitor and manage client networks, endpoints, systems, and devices via locally installed applications

Supports LDAP Protocol to enable access control and governance.

Supports compliance with PII, GDPR, HIPPA, PCI, and other regulatory standards.

Similifies data identification to increase visibility and management capabilities

Define levels of authorization for access to specific files or systems

Protects data with within and as it leaves your secure or local network.

Analysis for users to examine threat intelligence data specific to their endpoint devices.

Documents the actions from endpoints within a network. Alerts users of incidents and abnormal activities and documents the access point.

Provides incident alerts for leaks or breaches and provides capabilities to inform administrators of attacks.

Active monitoring of systems, applications, or networks

Prevents malware or spam in emails either through predictive or reactive anti-malware/anti-spam tools.

Isolates potentially malicious content and files before they can gain network access

Includes advanced tools, including machine learning analysis to detect threats often missed by traditional filtering tools, such as unsafe attachments, advanced malware, and targetted social engineering attacks.

Prevents both phishing attacks and spear-fishing attacks, including impersonation attacks.

Has pre-built data loss prevention (DLP) functions which prevent employees or accounts that have been hacked from sending out sensitive information.

Allows administrative control over automated security tasks.

Protects application access and data. Prompts additional authentication for suspicious users.

Protects computing resources across a network. Prompts additional authentication for suspicious users.

Protects informatin stored on premises and in the cloud. Prompts additional authentication for suspicious users.

Allows users to create, edit, and relinquish user access privileges.

Stores data securely either on premise or in an adjacent cloud database to prevent loss of data at rest.

Manages policies for user data access and data encryption.

Supports LDAP Protocol to enable access control and governance.

Encrypt data to and from the cloud and on cloud storage devices

Prevent and monitor unauthorized access, misuse, modification, or denial of a computer network and network-accessible resources

Identify and respond to security threats to cloud applications

Detect and prevent data breaches, exfiltration, or unwanted destruction of sensitive data.

Collection of processes, policies, and standards to manage the storage & usability of enterprise data

Access pre-built and custom reports to monitor user activity and storage.

Prevents previous committers of fraud and other suspicious accounts from future communications

Archives conversations, files, and other communications for future reference

Allows administrative control over network components, mapping, and segmentation.

Allows visual display of networks segmented components and their connected resources.

Utilizes behavioral analysis to improve security procedures and documentation.

Application Programming Interface - Specification for how the application communicates with other software. API's typically enable integration of data, logic, objects, etc. with other software applications.

Provides a risk-based approcach to determining trust within the network.

Calculates risk based on user behavior, permissions, and requests.

Monitors users attempting unauthorized access to databases, applicaitons, and othe network components.

Allows for reporting and documentation of individual user behavior and privileges.

Analyzes data associated with denied entries and policy enforcement, giving information of better authentication and security protocols.

Monitors acivity related to user behavior and compares activity to benchmarked patterns.

View and track pertinent metrics to find patterns and gain insights from data

Track and interpret metrics on the usage of company resources

Provides a single access point for users to access multiple cloud products without multiple logins.

Details SaaS products the cloud security product can integrate with and provide security for.

Offers the ability to set standards for types of mobile devices and networks capable of accessing data.

Provides a virtualized network for client network to mask identity, location, and other sensitive information.

Provides malware protection capabilities in addition to traditional firewall barrier technology.

Provides access control tools to categorize and block traffic and match traffic to firewall policies.

Deploys firewall(s) configured in sync to prevent network failure and provide business continuity.

Control or restrict network traffic based on the source and destination of IP addresses, protocols and ports.

Control or restrict access to web content or applications

Prevents unwanted emails including bulk, mass, or other junk emails from reaching recipients mailboxes.

Prevents emails with malicious links or attachments embedded with malware, such as ransomware, spyware, and other viruses, from reaching email recipients.

prevent social-engineering attacks such as phishing, spear-phishing, and c-level executive impersonation attacks.

Rejecting phishing emails that include suspicious URLs or links to websites that have been previously flagged.

Includes a quarantine area for users to manually inspect suspicious emails.

Monitors outgoing mail to prevent data loss by encrypting messages or preventing the messages from being sent.

Includes advanced threat protections such as machine learning to conduct abnormal behavioral analysis, display name spoof detection especially regarding c-level impersonation attacks, detecting lookalike email domains that are visually confusing.

Offers archival email retention for compliance purposes.

Offers standard reporting functionality.

Provides protection against malicious attachments.

Identify phishing emails

Allow users to access multiple services after entering their login credentials once

Ability to oversee and optimize the operations of a mail server

Active monitoring of systems, applications, or networks

Monitors traffic and distribute resources and scales infrastructure workloads to match traffic.

Constantly monitors traffic and activity. Detects anomalies in functionality, user accessibility, traffic flows, and tampering.

Enforces security paramaters to prevent unauthorized access.

Detects unauthorized access and use of privileged systems.

Identify and alert about security breaches by third parties

System that monitors network traffic to prevent malicious activity.

Provides advanced data center network services to deliver multiple high-speed IP.

Allows users to track and control activity across cloud services and providers.

Constantly monitors system to detect anomalies in real time.

Allows users to track and control cloud spend across cloud services and providers.

Offers data loss prevention tools to protect data from leaving the environments it is allowed to.

Scale resources automatically, adjusting for usage demands.

Enables administrators to create access policies and applies policy controls throughout request and provisioning processes

Managed, cloud-delivered firewall that protects devices, assets, networks, and other cloud services from web-based threats.

Provides a single access point for users to access multiple cloud applications, services, and products through a central gateway

Provides a private web gateway for secure internet browsing.

Provides a risk-based approach to determining trust within the network.

Condenses long documents or text into a brief summary.

Use AI to generate content in the form of text, images, videos, etc.

Condenses long documents or text into a brief summary.

Allows users to generate text based on a text prompt.

Decrypts and inspects encrypted web traffic to detect and block threats hidden within encrypted connections.

Analyzes web content to filter out malicious code, malware, and inappropriate material.

Blocks access to known malicious or unauthorized websites based on predefined policies.

Inspects and analyzes inbound and outbound web traffic in real-time for threats and compliance.

Blocks ads and trackers to enhance user privacy and reduce exposure to potential threats.

Monitors outgoing web traffic to prevent sensitive data from being leaked or exfiltrated.

Detects and blocks phishing attempts to protect users from fraudulent websites and email links.

Uses signature-based scanning, heuristic analysis, and sandboxing to detect and block malware threats.

Monitors and controls access to cloud applications and services to prevent unauthorized use and data leakage.

Regulates access to web-based applications and services as per organizational policies.

Verifies users' identities and enforces access control policies to ensure only authorized users can access permitted web resources.

Supports the creation of policies based on user roles, groups, or other attributes for more granular control.

Allows organizations to create and enforce custom web usage policies tailored to their specific needs.

Prioritizes and allocates network resources based on predefined policies to optimize performance.

Integrates with other security tools and systems, such as firewalls, SIEMs, and endpoint security solutions.

Provides comprehensive reports and logs of web activity, including sites visited, user activity, security events, and policy violations.

Leverages threat intelligence feeds to stay updated on the latest threats and enhance protection.

Provides centralized control and monitoring via API or dashboard

Ensures compatibility with various cloud infrastructures

Dynamically adjusts network resources based on business needs

Includes encryption, firewalls, Zero Trust, and compliance policies

Adheres to industry regulations like HIPAA, GDPR, and SOC 2

Provides real-time attack detection and mitigation

Monitors performance in real-time and prioritizes critical applications

Enhances traffic routing, load balancing, and overall efficiency

Automates network setup and reduces manual intervention

Adapts security and network policies dynamically based on user behavior

Uses AI to continuously assess and respond to emerging threats

Uses AI and ML to predict congestion and optimize traffic

Provides VPN-like encrypted connectivity without physical hardware

Enables high-speed, low-latency connections for enterprise networks

Extends network services to the edge for lower latency

Adapts security and network policies dynamically based on user behavior

Uses AI to continuously assess and respond to emerging threats

Uses AI and ML to predict congestion and optimize traffic

Enforces zero trust access rules.

Integrates wide area network (WAN) capabilities, such as SD-WAN.

Enforces security requirements and secures connections with cloud resources.

Prevents unauthorized web domains from entering a network and protects against web-based threats.

Provides cloud-based firewall protection.

Uses predictive analytics to anticipate emerging threats.

Utilizes AI algorithms to identify anomolies and block access to malicious sites.

Automates common workflows and remediation tasks.

Utilizes AI to monitor network traffic, identify anomalies, and block attacks.

Simplifies user authentication across multiple services while maintaining security.

Ensures that users are verified through multiple credentials before access is granted, reducing the risk of compromised accounts.

Grants access based on the user’s role within the organization, adhering to the principle of least privilege.

Integrates with external identity providers to manage user identities across different platforms and services.

Mandatory encryption of data both at rest and in transit protects against unauthorized access.

Continuous monitoring and real-time response capabilities with EDR help detect and mitigate threats on endpoint devices.

Verifies the security status of a device before granting access to network resources, ensuring that only compliant devices can connect.

Divides the network into isolated segments to prevent lateral movement by attackers, ensuring that if one segment is compromised, others remain secure.

Replaces traditional VPNs by enforcing granular, context-aware access to applications based on user identity, device, and other factors.

Detect and prevent unauthorized access or transfer of sensitive data.

Data classification automatically categorizes data based on its sensitivity, allowing for appropriate security measures to be applied

API support ensures that the zero trust platform can integrate seamlessly with other security tools and existing infrastructure

Provides the ability to enforce security policies at the application layer, ensuring that access to specific applications is tightly controlled.

ensures that only authorized users can access critical applications, protecting against unauthorized entry points

UEBA identifies unusual behavior that may indicate a security threat, enabling proactive threat managemen

Provides real-time visibility into all network traffic, user activities, and data flows to detect anomalies

allows for automatic application of security policies based on predefined criteria, reducing the risk of human error and ensuring consistent enforcement

Regulatory compliance assists organizations in adhering to industry-specific regulations, such as the General Data Protection Regulation (GDPR), the Health Insurance Portability and Accountability Act (HIPAA), or the California Consumer Privacy Act (CCPA)

This works across different environments, including on-premises, cloud, and hybrid setups, ensuring comprehensive security coverage

This ensures that security policies are consistently applied across all users, devices, and application

Detailed reports that provide insights into security events help organizations maintain compliance and optimize their security posture

Capability to perform complex tasks without constant human input

Improves performance based on feedback and experience

Software program that continuously adjusts its behavior based on observed data

Anticipates needs and offers suggestions without prompting

Capability to perform complex tasks without constant human input

Anticipates needs and offers suggestions without prompting

Capability to perform complex tasks without constant human input

Works across multiple software systems or databases

Anticipates needs and offers suggestions without prompting

Makes informed choices based on available data and objectives

Capability to perform complex tasks without constant human input

Works across multiple software systems or databases

Improves performance based on feedback and experience

Anticipates needs and offers suggestions without prompting

Prevents unauthorized web domains from entering a network and protects against web-based threats.

Provides cloud-based firewall protection.

Enforces zero trust access rules.

Enforces security requirements and secures connections with cloud resources.

Automates common workflows and remediation tasks.

Uses predictive analytics to anticipate emerging threats.

Utilizes AI algorithms to identify anomolies and block access to malicious sites.

Makes informed choices based on available data and objectives.

Capability to perform complex tasks without constant human input.

Works across multiple software systems or databases.

Anticipates needs and offers suggestions without prompting.

Prevent unauthorized access to personally identifiable information

Discover and connect variety of data sources to the application for analysis

Track visitors'/audience's responses across web pages and other optimized content

Remotely delete data from devices without needing physical access

Analyze potential risks across the organization

Prevent malicious actions by individuals connected to the organization, such as current and past employees, contractors, or associates

Prevents, detects and removes malware

Control system access and/or deliverability for applications and email addresses

Set up connections to third-party platforms to improve business processes

Add a digital mark to show ownership of an image, video, document, etc.

Use AI to generate content in the form of text, images, videos, etc.

Systematic evaluation of the security of a company's overall security system and situation

Application programming interface that allows for integration with other systems/databases

Protects systems from ransomware attacks and mitigates attack risks

Request two or more credentials to prove user's identity before granting access to systems

Data is backed up automatically to prevent data loss

Support multiple types of devices

Track and report regulatory data to either internal management or external stakeholders

Analyze and gain insights into data in real-time

Securely stores data to prevent data loss or breaches

Ability to restore deleted, hidden, or lost data from an email server/system

Track and document all activities across devices, networks, and other systems

Restrict data transfer to and from external storage systems such as USB and disk drives

View and track pertinent metrics to find patterns and gain insights from data

A record of all activities within the system, including user access, changes made, etc.

Isolate suspicious files to prevent harm to computer systems

Plan and implement business continuity measures in case of unforeseen events

The process of discovering content on the web that is same or similar to logos, trademarks or other proprietary content

System alerts about the need to escalate an issue or request

Initiate collection and analysis of known risks

Identify sensitive or personal information collected from users

Notifications that are delivered to users as soon as an event occurs

Notifying as a warning or reminder of a potential or imminent hazard

Grouping log entries based on similar attributes.

Process of copying and storing data in more than one site or node

A virtual assistant that uses AI to pursue goals and complete tasks on behalf of users

Move files across different systems or networks

Compliant with HIPAA, which sets standards for sensitive patient data protection

Filters used to determine different types of malware threats

System alerts about the need to escalate an issue or request

Set & manage permission levels based on user roles and restrict access to only authorized individuals

Tracks and makes accessible data on the health of servers and other network components.

Interact with data visualization elements, such as charts and graphs, to drill down into data

Alter the layout and content of reports

Analyze and gain insights into data in real-time

Collection, analysis, and representation of numerical data and generation of reports to understand various patterns

Techniques to prevent and filter unwanted or unsolicited email spam from reaching a user's inbox

Dashboard to view the status of ongoing processes, identify current incidents and track past activities

Active monitoring of systems, applications, or networks

Notifications that are delivered to users as soon as an event occurs

Track and document all activities across devices, networks, and other systems

Hardware components included as part of the software system

Alerts or notifications of various types such as pop-up messages, sounds, banners, or badges

Define levels of authorization for access to specific files or systems

Receive data and information in real time

Continuously scan servers on a designated network to monitor health and search for any irregularities or failures

Extra layer of security that requires not only a password and username but also something specific to that user

Collection, search, and analysis of access logs and audit logs

View and track pertinent metrics to find patterns and gain insights from data

Manage and support multiple locations

Security protocol that ensures secure, encrypted communication over the internet, safeguarding sensitive data from unauthorized access

Track visitors'/audience's responses across web pages and other optimized content

A virtual assistant that uses AI to pursue goals and complete tasks on behalf of users

Application programming interface that allows for integration with other systems/databases

A chronological record of actions or occurrences within a network, software, or process

Discover patch statuses and vulnerabilities

Notifying as a warning or reminder of a potential or imminent hazard

Allow users to access multiple services after entering their login credentials once

Creation and customization of dashboards

Observe and track the demand, usage, progress or quality of a system, product, or user

Allows businesses to monitor and secure applications and workloads across multiple public clouds

Assess and score risks using risk matrices

Automatically scan the network for devices and take pre-defined actions upon discovery

Application programming interface that allows for integration with other systems/databases

Receive notification of issues as soon as they occur

Identify component attributes like servers, hardware, software, and manage relationships across all services

Set up connections to third-party platforms to improve business processes

Manage user accounts, profiles, roles, permissions, and other details across applications, devices or networks

Track and report regulatory data to either internal management or external stakeholders

Analyze potential risks across the organization

Protect incoming and outgoing communications against malware, spam, display spoofing, and other threats

A set of guidelines regarding cloud security management

Use AI to generate content in the form of text, images, videos, etc.

Maintenance and upkeep of physical and/or virtual devices

Plan, schedule, and execute organization's accounts and assets to ensure compliance with policies and laws

Dashboard to view the status of ongoing processes, identify current incidents and track past activities

Alerts or notifications of various types such as pop-up messages, sounds, banners, or badges

Monitor and analyze the performance and status of a server or system/application

A virtual assistant that uses AI to pursue goals and complete tasks on behalf of users

Track and manage adherence to policies for any service, product, process, or supplier

Dashboard to view the status of ongoing processes, identify current incidents and track past activities

A record of all activities within the system, including user access, changes made, etc.

Lists of domains/addresses that are allowed / rejected

Use AI to generate content in the form of text, images, videos, etc.

Discover patch statuses and vulnerabilities

Integrates with Active Directory

Identifying, analyzing, and mitigating security issues and taking appropriate action to protect systems and data from potential harm

Search and/or filter for items using names, keywords, descriptions, tags, metadata, etc.

Identify and alert about security breaches by third parties

Track and manage adherence to policies for any service, product, process, or supplier

Filters used to determine different types of malware threats

Convert data into a code for security

Process of checking different types of data for accuracy to avoid errors or inconsistencies

Plan, schedule, and execute organization's accounts and assets to ensure compliance with policies and laws

System alerts about the need to escalate an issue or request

Create, manage, and track policies and procedures within an organization

Alter the layout and content of reports

Moving and separately storing data that is not actively used or continuous storage of data for compliance purposes

Synchronizing data between two or more devices/systems and automatically updating changes to maintain consistency

Track and document all activities across devices, networks, and other systems

Security protocol that ensures secure, encrypted communication over the internet, safeguarding sensitive data from unauthorized access

At least a username and password is required to access the system

Set up connections to third-party platforms to improve business processes

Detect spam, BOT, or invalid email addresses

Notifications that are delivered to users as soon as an event occurs

Set a time to generate routine reports automatically

Track delivered, received, and opened emails

Identify and prevent suspicious activity

A chronological record of actions or occurrences within a network, software, or process

Manage/customize policies to organize data and determine where data should be stored or archived and for how long.

Create backups and provide methods to recover deleted/lost data

Information to prevent, understand and identify cyber threats

Control system access and/or deliverability for applications and email addresses

Import and export data to and from software applications

Extra layer of security that requires not only a password and username but also something specific to that user

Collection, analysis, and representation of numerical data and generation of reports to understand various patterns

Prevents, detects and removes malware

Safeguard confidential data and meet compliance regulations

Notifying as a warning or reminder of a potential or imminent hazard

Define levels of authorization for access to specific files or systems

Generate and store passwords in an encrypted database and assist in retrieving lost or forgotten passwords

A virtual assistant that uses AI to pursue goals and complete tasks on behalf of users

Verify the identity of users/devices to enable secure access

Identify phishing emails

Ability to restore deleted, hidden, or lost data from an email server/system

Moving and separately storing data that is not actively used or continuous storage of data for compliance purposes

Create backups and provide methods to recover deleted/lost data

Create, manage, and track policies and procedures within an organization

Manage, store and organize emails within the system or via third-party apps

Safeguard confidential data and meet compliance regulations

Allow users to access multiple services after entering their login credentials once

Manage and store data in a database

Identify and prevent suspicious activity

Route emails to multiple servers

Process of checking different types of data for accuracy to avoid errors or inconsistencies

Track and manage adherence to policies for any service, product, process, or supplier

Find & retrieve relevant data or documents

Search and filter data across systems to locate required information by entering keywords or certain criteria

Rejecting phishing emails that include suspicious URLs or links to websites that have been previously flagged.

Systematic evaluation of the security of a company's overall security system and situation

Synchronizing data between two or more devices/systems and automatically updating changes to maintain consistency

Prevents, detects and removes malware

Initiate collection and analysis of known risks

A request to the original server for a message to be resent

A record of all activities within the system, including user access, changes made, etc.

View and track pertinent metrics to find patterns and gain insights from data

Lists of domains/addresses that are allowed / rejected

Discover patch statuses and vulnerabilities

Integrates with Active Directory

Reduction in the number of bits needed to represent data

Track delivered, received, and opened emails

Convert data into a code for security

Techniques to prevent and filter unwanted or unsolicited email spam from reaching a user's inbox

Plan and implement business continuity measures in case of unforeseen events

A virtual assistant that uses AI to pursue goals and complete tasks on behalf of users

Attach digital tags to documents and assets for identification, search, or monitoring purposes

Securely stores data to prevent data loss or breaches

Track and document all activities across devices, networks, and other systems

Filters used to determine different types of malware threats

Analysis and detection of spam-related traffic

Application programming interface that allows for integration with other systems/databases

Organize and group data or items based on various criteria

Organize, prioritize, and manage incoming communications

Detect spam, BOT, or invalid email addresses

Verify the identity of users/devices to enable secure access

Set up connections to third-party platforms to improve business processes

Collection, analysis, and representation of numerical data and generation of reports to understand various patterns

Feature in email systems that identifies suspicious or unsolicited emails and holds them in a separate folder for review or deletion

Security protocol that ensures secure, encrypted communication over the internet, safeguarding sensitive data from unauthorized access

Use AI to generate content in the form of text, images, videos, etc.

Manage/customize policies to organize data and determine where data should be stored or archived and for how long.

Define levels of authorization for access to specific files or systems

Observe and track the demand, usage, progress or quality of a system, product, or user