Engagement Example
Example: Securing internal applications for an SMB environment
This example shows how a Zero Trust architecture engagement may be structured for an SMB environment using Cloudflare Zero Trust.
Example environment
A 60-user company with a remote workforce, several internal web applications, and third-party vendors requiring access to selected internal services.
Initial challenge
The environment relied on VPN-based access for both employees and vendors. Once connected, users had broad network reachability beyond the specific applications they actually needed.
Architecture approach
- Cloudflare Access for application-level enforcement
- Cloudflare Tunnel for protected connectivity to internal services
- Identity provider integration for authentication and policy enforcement
- Separate access policies for employees and vendors
Outcome
The resulting model reduced unnecessary internal exposure and created a more controlled path to internal services. Access was enforced per application based on identity and policy rather than broad network access.
Typical next step
For environments with similar remote access or vendor access requirements, the best entry point is an Access Architecture Review.