Horizon Inc Cloudflare One demo

Demo library › Walkthroughs

The full tour

Every chapter, in order. For a workshop rather than a meeting.

~82 minutes · needs the lab

Before you start

Chapters

  1. Single sign-on and per-application access Single sign-on, groups imported from the identity provider, and access to each application decided by Zero Trust policy. · ~4 min · Lab and laptop
  2. Replace the VPN for an internal app An internal app on a server with no open ports, reached by name through the Cloudflare One client. With the client off, the address does not answer. · ~8 min · Lab only
  3. Admin access to servers without standing credentials SSH with a short-lived certificate and no key on the laptop, every command recorded, the database console behind the same group, and Postgres closed to everyone else. · ~10 min · Lab only
  4. Contractor access without a company laptop A contractor signs in from her own machine, with no client, and uses the wiki in a remote browser with copy, paste, download and print turned off. · ~5 min · Lab and laptop
  5. Filter the internet for an office, with no appliance A DNS location for the London office, blocking security risks and unwanted categories, social media limited to lunch, and the same policy on every laptop. · ~5 min · Lab and laptop
  6. Stop company data leaving through the browser A customer list blocked on its way to personal storage, the same checks inside an internal app, malware blocked on download, and the matched data shown from the log. · ~8 min · Lab and laptop
  7. Only healthy devices reach sensitive apps pgAdmin requires a device with its firewall on. Turn it off and access ends. Backlog's response time is measured from every device. · ~5 min · Lab only
  8. Customer data pasted into a public AI The company's AI decisions enforced - ChatGPT inspected, Gemini isolated, the rest redirected - and a customer list blocked on its way into ChatGPT. · ~6 min · Lab and laptop
  9. An AI agent reads what the app hides The calendar app shows Alice nothing confidential, but its MCP tool returns the company's confidential meetings - until Gateway DLP blocks the response. · ~6 min · Lab and laptop
  10. Personal data pasted into the company assistant Alice pastes her own HR record into the company assistant. AI Gateway blocks the prompt before it reaches the model. · ~4 min · Lab and laptop
  11. Asking the assistant to help commit a crime Alice asks the company assistant to help her take money from the company. AI Gateway guardrails refuse it before any model is called. · ~3 min · Lab and laptop
  12. An AI agent asks for data Alice cannot see Ledger's tools are not offered to Alice's agent at all, and the CRM's over-sharing tool is blocked by Gateway DLP. · ~5 min · Lab and laptop
  13. An AI agent returns the CEO's home address The HR app hides the CEO's home address, but its MCP tool returns it. Gateway DLP blocks the response without changing the app. · ~3 min · Lab and laptop
  14. A hidden instruction in an email An outside email and a calendar invite tell Alice's agent to fetch the CEO's HR record. AI Gateway guardrails and Gateway DLP stop it. · ~5 min · Lab and laptop
  15. Show the auditor what happened Every decision from the other chapters in the logs, the matched data and prompts decrypted with the company's own key, and a user risk score. · ~5 min · Lab and laptop