Cloudflare Becomes the First and Only SASE Platform to Support Modern Post-Quantum Encryption
New updates scale protection against the threat of advanced computing across the entire Internet—at no cost
Cloudflare, Inc. (NYSE:NET), the leading connectivity cloud company, today announced it has achieved a major milestone by delivering the world's first complete Secure Access Service Edge (SASE) to support modern post-quantum (PQ) encryption standards. By integrating advanced post-quantum encryption across all its major network configurations, the Cloudflare One SASE platform now provides the most secure bridge between corporate environments and its global network—which is one of the largest in the world. This allows any organization to protect its most sensitive data against the next generation of cyber threats, ensuring a seamless transition to new cryptographic standards.
As the possibility of quantum computing nears, the encryption that protects our most sensitive healthcare, banking, personal data, and more, faces a reckoning that could render current security measures obsolete. To preempt this, the National Institute of Standards and Technology (NIST) has issued a clear warning: upgrade cryptographic algorithms by 2030, or fall victim to the powerful quantum computers that will be able to break traditional cryptography. While that deadline may seem distant, upgrading global infrastructure is a massive undertaking. Threat actors are already exploiting this lag time through "harvest now, decrypt later" attacks—collecting encrypted state secrets, financial records, and health data that they can unlock in the future, once quantum computers mature. As the gap between legacy encryption and the power of quantum computing fades, organizations must implement immediate protection, or risk leaving their most valuable assets exposed.
In 2025, Cloudflare launched the industry's first cloud-native post-quantum Secure Web Gateway (SWG) and Zero Trust solution, a major step towards securing enterprise network traffic sent from end user devices to public and private networks. Today's announcement completes the SASE equation by adding PQ support for wide-area networking (WAN) use cases with Cloudflare IPsec and the Cloudflare One Appliance. This ensures that every component of the Cloudflare One ecosystem—including Zero Trust access and WAN-as-a-Service—is now protected by the latest cryptographic standards. Leveraging our experience with post-quantum TLS protocols and applying it to IPsec, Cloudflare One has become a SASE solution that outperforms legacy setups in both speed and stability, while also future-proofing network traffic with post-quantum encryption.
"Securing the Internet against future threats shouldn't be a complex burden, or a reason to fragment the web. Since 2017, we've been doing the heavy lifting to bake post-quantum standards directly into the fabric of our network," said Matthew Prince, CEO and co-founder of Cloudflare. "By bringing this protection to our entire SASE platform, we're making post-quantum security the default—no hardware upgrades, no complex configurations, and no added cost. We're ensuring that the secure connections our customers rely on today stay secure for the long haul."
Now, Cloudflare's IPsec enables:
- High-Availability Routing: By leveraging Cloudflare's massive global network, Cloudflare IPsec traffic is quickly and automatically rerouted to the healthiest data center if another data center becomes unavailable.
- Protection Against "Harvest Now, Decrypt Later" Attacks: To combat threat actors who intercept encrypted data today to crack with future quantum computers, Cloudflare now secures network flows with post-quantum encryption, ensuring that today's data remains protected even against tomorrow's threats.
- Industry-Wide Interoperability: Holistic security requires collaboration. Cloudflare's IPsec implementation adheres to the latest Internet standards, and supports cross-vendor collaboration and security at scale.
Cloudflare's quantum-safe SASE platform is available today. To learn more, please check out the resources below:
- Blog: Cloudflare One is the first SASE offering modern post-quantum encryption
- Cloudflare Post-Quantum Cryptography
About Cloudflare
Cloudflare, Inc. (NYSE:NET) is the leading connectivity cloud company. It empowers organizations to make their employees, applications and networks faster and more secure everywhere, while reducing complexity and cost. Cloudflare's connectivity cloud delivers the most full-featured, unified platform of cloud-native products and developer tools, so any organization can gain the control they need to work, develop, and accelerate their business.
Powered by one of the world's largest and most interconnected networks, Cloudflare blocks billions of threats online for its customers every day. It is trusted by millions of organizations – from the largest brands to entrepreneurs and small businesses to nonprofits, humanitarian groups, and governments across the globe.
Learn more about Cloudflare's connectivity cloud at cloudflare.com/connectivity-cloud. Learn more about the latest Internet trends and insights at https://radar.cloudflare.com.
Follow us: Blog | X | LinkedIn | Facebook | Instagram
Forward-Looking Statements
This press release contains forward-looking statements within the meaning of Section 27A of the Securities Act of 1933, as amended, and Section 21E of the Securities Exchange Act of 1934, as amended, which statements involve substantial risks and uncertainties. In some cases, you can identify forward-looking statements because they contain words such as "may," "will," "should," "expect," "explore," "plan," "anticipate," "could," "intend," "target," "project," "contemplate," "believe," "estimate," "predict," "potential," or "continue," or the negative of these words, or other similar terms or expressions that concern Cloudflare's expectations, strategy, plans, or intentions. However, not all forward-looking statements contain these identifying words. Forward-looking statements expressed or implied in this press release include, but are not limited to, statements regarding the capabilities and effectiveness of the Cloudflare One SASE platform and Cloudflare's other products and technology, the benefits to Cloudflare's customers from using the Cloudflare One SASE platform and Cloudflare's other products and technology, Cloudflare's technological development, future operations, growth, initiatives, or strategies, and comments made by Cloudflare's CEO and others. Actual results could differ materially from those stated or implied in forward-looking statements due to a number of factors, including but not limited to, risks detailed in Cloudflare's filings with the Securities and Exchange Commission (SEC), including Cloudflare's Quarterly Report on Form 10-Q filed on October 30, 2025, as well as other filings that Cloudflare may make from time to time with the SEC.
The forward-looking statements made in this press release relate only to events as of the date on which the statements are made. Cloudflare undertakes no obligation to update any forward-looking statements made in this press release to reflect events or circumstances after the date of this press release or to reflect new information or the occurrence of unanticipated events, except as required by law. Cloudflare may not actually achieve the plans, intentions, or expectations disclosed in Cloudflare's forward-looking statements, and you should not place undue reliance on Cloudflare's forward-looking statements.
©2026 Cloudflare, Inc. All rights reserved. Cloudflare, the Cloudflare logo, and other Cloudflare marks are trademarks and/or registered trademarks of Cloudflare, Inc. in the U.S. and other jurisdictions. All other marks and names referenced herein may be trademarks of their respective owners.
View source version on businesswire.com: https://www.businesswire.com/news/home/20260223785531/en/
Cloudflare, Inc.
Daniella Vallurupalli
Vice President, Head of Global Communications
[email protected]