The whole of Cloudflare One

The overall demo: identity, retiring the VPN, data protection, AI, and the evidence afterwards - one company, one afternoon.

~31 minutes · needs the lab - at least one chapter reaches the private estate

Not all of this path is built yet

Chapter 6, DLP on uploads and on internal apps is planned. Skip it for now, or describe what it will show without claiming it is live.

Who are our people, and what are they allowed to reach? One sign-in, groups that come from the identity provider rather than being typed into Cloudflare, and an application that simply does not exist for someone not entitled to it. · ~4 min · Lab and laptop
Retire the VPN concentrator. An internal ticketing app on a server with no open ports, reached by name through the Cloudflare One client - and with the client off, the address does not answer at all. · ~8 min · Lab only
Stop company data leaving through the browser. Planned A customer list blocked on its way to personal storage, the same profiles catching card numbers and passwords inside an internal app, and the matched value decrypted from the log. · ~8 min · Lab and laptop
Our staff are pasting customer data into ChatGPT. What the company has decided about each AI service, enforced: the sanctioned one inspected, the one under review isolated, the rest redirected to a page naming the two approved paths. · ~6 min · Lab and laptop
Show the auditor what happened. Every decision from the earlier chapters, in the logs that recorded it - including the exact matched value and the full prompt, decrypted with a key Cloudflare does not hold. · ~5 min · Lab and laptop