Companies must walk the tightrope in ensuring that everyone has access to the tools and data they need, but no more than that. For IT organizations around the world, particularly, managing these access controls is a real challenge, which is exacerbated when each employee has multiple accounts across different tools in disparate environments. Cloudflare, a company that builds security products, was in a unique position to solve this problem for both itself and its customers. It built Cloudflare Access to secure its software-asa-service (SaaS) and internal applications with a zero-trust approach. Securing its internal applications made employee and contractor on- and off-boarding much smoother. Now, each new employee and contractor is quickly granted rights to the applications they need. By authenticating every packet, Access makes it possible to assign granular permissions to employees and contractors, and enables the security team to detect unusual activity on any applications. Together, more granular control and enhanced visibility enable more comprehensive management of attack surfaces.