Cloudflare Launches One‑Click Access Controls for Workers to Keep Internal Apps Private

AI has accelerated application development, but the speed also lets employees deploy code to the public Internet that can inadvertently expose sensitive data. Cloudflare’s new Access for Workers feature lets organizations lock down every Worker—both preview and production—by default. A single account‑level policy can enforce authentication on all Workers, while more granular Worker‑level policies protect individual applications or specific hostnames. When Access is enabled, Cloudflare injects authenticated user data (email, name, groups) into the Worker’s context, eliminating the need for developers to parse JWTs. The feature also supports internal deployment platforms; a dispatch Worker can be set to make every deployed Worker private automatically. An open‑source example of a private static‑site platform demonstrates how the policy can be applied at scale.