Cloudflare Access
Zero trust access to internal applications without a VPN.
Access Control
Zero trust network access (ZTNA)
Remote access no longer means exposing VPN appliances to the internet.
Addresses 36 stories in our coverage in the last 90 days 4 products that provide it
What it is
Users reach specific applications through a broker that checks identity and device health for every connection, instead of joining the whole network through a VPN.
How to value it
VPN and remote access appliances are among the most exploited systems in the news, often hit within days of a flaw being published. ZTNA takes them off the internet and limits each user to the applications they need, so one stolen login no longer opens the whole network.
Questions to ask a vendor
- 1Can it fully replace our VPN, including for admins and third parties?
- 2What happens to access if your cloud service has an outage?
- 3Does it check device health, not only user identity?
- 4How is the connector inside our network kept patched and monitored?
For your risk register
- Risk
- Exploitation of internet-facing VPN appliances, or broad network access from one stolen login.
- Control
- ZTNA with per-application access, VPN retired.
- Owner
- Network lead.
- Measure
- Internet-exposed remote access appliances remaining.
A starting point: set the owner and measure to fit your organisation.
Products that provide it
Listed alphabetically by vendor. A listing is not a recommendation: use the questions above to compare them, or tick up to 3 to see them side by side.
Netskope Private Access
Zero trust access to private applications.
Prisma Access
Cloud-delivered SASE: zero trust access to private apps and secure web gateway.
Zscaler Private Access
Zero trust access to private applications, replacing VPN.
Recent stories it addresses
54 stories in total- 15 Oct 2026Supermarket Refrigeration Attack Widens to Copeland, Dixell Controllers
Cyberattack targets supermarket refrigeration controllers in France, impacting hundreds of stores.
- 15 Oct 2026Thermo Fisher Torrent Suite Software
Thermo Fisher Torrent Suite Software vulnerable to path traversal.
- 14 Oct 2026Zero Trust in Practice: Moving Beyond the Buzzword
Article clarifies Zero Trust principles and practical implementation, emphasizing identity as the foundational element.
- 13 Oct 2026Ivanti Zero-Day Chain Gave Attackers Root Access to Fully Patched VPN
Ivanti VPN zero-day chain exploited for root access; credential theft and data exfiltration observed.
- 13 Oct 2026Ivanti warns of Connect Secure zero-day exploited in attacks
Ivanti warns of actively exploited zero-day in Connect Secure gateway.
- 13 Oct 2026AI Turns Familiar Cyberattacks Into a Race Against Time
AI accelerates familiar cyberattacks, increasing the urgency for proactive defenses and zero trust strategies.
- 9 Oct 2026Max severity SonicWall SMA1000 flaw now exploited in attacks
SonicWall SMA1000 vulnerability (CVE-2026-102255) is being exploited in attacks.
- 30 Sept 2026CISA warns of critical pre-auth RCE flaw in MikroTik RouterOS
CISA warns of critical pre-auth RCE flaw in MikroTik RouterOS, CVE-2026-84411.
How we list vendors
- A product is listed because it provides the control. Nobody pays to be listed, and on story pages the examples rotate, so no vendor is always first.
- Vendor pages show both the vendor's own research and the incidents involving its products, from our own coverage. We do not leave either out.
- Our summaries are written by us, based on the vendors' own pages. Text in quotation marks or marked "in their own words" is the vendor's own, quoted from its website.
- Logos, product names and quoted text belong to the vendors and are shown to identify them.
- Something wrong? Use "Suggest a correction" on the vendor's page. A product we should look at? Email support@threatnoir.com.