Cloudflare Access
Zero trust access to internal applications without a VPN.
Access Control
Zero trust network access (ZTNA)
Remote access no longer means exposing VPN appliances to the internet.
Addresses 33 stories in our coverage in the last 90 days 4 products that provide it
What it is
Users reach specific applications through a broker that checks identity and device health for every connection, instead of joining the whole network through a VPN.
How to value it
VPN and remote access appliances are among the most exploited systems in the news, often hit within days of a flaw being published. ZTNA takes them off the internet and limits each user to the applications they need, so one stolen login no longer opens the whole network.
Questions to ask a vendor
- 1Can it fully replace our VPN, including for admins and third parties?
- 2What happens to access if your cloud service has an outage?
- 3Does it check device health, not only user identity?
- 4How is the connector inside our network kept patched and monitored?
For your risk register
- Risk
- Exploitation of internet-facing VPN appliances, or broad network access from one stolen login.
- Control
- ZTNA with per-application access, VPN retired.
- Owner
- Network lead.
- Measure
- Internet-exposed remote access appliances remaining.
A starting point: set the owner and measure to fit your organisation.
Products that provide it
Listed alphabetically by vendor. A listing is not a recommendation: use the questions above to compare them, or tick up to 3 to see them side by side.
Netskope Private Access
Zero trust access to private applications.
Prisma Access
Cloud-delivered SASE: zero trust access to private apps and secure web gateway.
Zscaler Private Access
Zero trust access to private applications, replacing VPN.
Recent stories it addresses
66 stories in total- 12 Nov 2026New N-able N-central Zero-Day Exploits Target Patched Servers, Claiming Unauthenticated Root Access
New N-able N-central zero-day exploits target patched servers, granting unauthenticated root access.
- 9 Nov 2026Plex2Shell Exploited Against QNAP NAS Users
Threat actors exploit Plex2Shell vulnerabilities to hack QNAP NAS devices.
- 5 Nov 2026Harden cooling systems now, feds warn critical infrastructure operators amid attacks
US feds warn critical infrastructure operators to harden cooling systems amid European supermarket hacks.
- 5 Nov 2026US Government Partners Urge Hardening Industrial Refrigeration and Cold Chain Monitoring Systems
US agencies warn of cyber threats to industrial refrigeration and cold chain systems.
- 3 Nov 2026ANSPDCP (Romania) - Auchan Romania S.A
Auchan Romania fined €8,000 for data breach due to inadequate security measures.
- 3 Nov 2026CISA’s new strategy runs into America’s blind trust problem
CISA's new strategy faces challenges with persistent credentials and forgotten software approvals in operational
- 2 Nov 2026Hackers Hijack Swedish Supermarket Fridges and Raise Freezer Temperatures to 55°C
Hackers exploit refrigeration systems in Swedish supermarkets, causing food spoilage.
- 2 Nov 2026Ivanti patches two more Connect Secure zero-days chained in attacks
Ivanti patches two zero-day vulnerabilities in Connect Secure exploited since October.
How we list vendors
- A product is listed because it provides the control. Nobody pays to be listed, and on story pages the examples rotate, so no vendor is always first.
- Vendor pages show both the vendor's own research and the incidents involving its products, from our own coverage. We do not leave either out.
- Our summaries are written by us, based on the vendors' own pages. Text in quotation marks or marked "in their own words" is the vendor's own, quoted from its website.
- Logos, product names and quoted text belong to the vendors and are shown to identify them.
- Something wrong? Use "Suggest a correction" on the vendor's page. A product we should look at? Email support@threatnoir.com.