Cloudflare Zero Trust — Onboarding Guide
A step-by-step, follow-along guide to deploy Cloudflare Zero Trust: account, identity, devices, ZTNA, Gateway, DLP, AI controls, and Cloudflare WAN.
Start the onboarding →📋 Overview
The big picture, prerequisites, plan tiers, and a master checklist.
🚀 Get started
Follow-along modules from account creation to a live deployment.
⭐ Best practices
Strategy, rollout order, and the golden rules behind each choice.
🛠️ Runbook
Every exact setting, field, and value as a quick reference.
The modules
- Architecture & workflow
- 1 · Account setup
- 1b · Account administration
- 2 · Identity provider
- 3 · Device enrollment
- 3b · Device profiles
- 3c · Device posture checks
- 4 · ZTNA (Access)
- 4b · Connectors (Tunnel & Mesh)
- 5 · Gateway
- 5b · Egress policies
- 5c · Browser Isolation (RBI)
- 5d · Shadow IT & AI adoption
- 6 · DLP
- 7 · AI controls
- 7b · Secure AI & MCP
- 7c · AI Gateway
- 7d · Agentic Internet (AI crawlers)
- 8 · Cloudflare WAN
Questions? Get in touch
Join our Telegram group or message us directly — happy to help with your Zero Trust rollout and answer any questions.
Scan the QR code, or
Open Telegram @CFSASE
@CFSASE