In this episode of This Week in NET, host João Tomé is joined by Warnessa Weaver (Senior Product Manager) and Yumna Moazzam (Senior Product Marketing Manager) to break down Cloudflare’s SASE blog takeover week and what it means for enterprise security.

Cloudflare One is evolving into an agile, composable, and programmable SASE platform, built natively on Cloudflare’s global network spanning 300+ cities. The conversation explores how organizations can modernize remote access, secure AI adoption, and replace legacy architectures that often take 18 months to deploy with migrations completed in 4–6 weeks.

The episode covers:

• Post-quantum encryption now in GA for Cloudflare One

• Deepfake defense through a new Nametag partnership

• Adaptive access with user risk scoring and signals from CrowdStrike and SentinelOne

• Programmable gateway policies using Cloudflare Workers

• DLP visibility for Microsoft 365 Copilot, ChatGPT, Gemini and more

• Clipboard controls for browser-based RDP sessions

• Closing the boot-to-login security gap with the Cloudflare One client

• CASB remediation for Microsoft 365 and Google Workspace

The episode also includes a run-through of other recent Cloudflare blog posts, including AI Security for Apps (now GA), slashing agent token costs by 98% with RFC 9457, Nvidia Nemotron 3 Super on Cloudflare, and a new stateful API vulnerability scanner.

Check the Cloudflare Blog:

https://blog.cloudflare.com/tag/sase

⏱️ Timestamps

00:37 — Blog run-through: AI Security for Apps, RFC 9457 agent errors, API vulnerability scanner

02:17 — Nvidia Nemotron 3 Super on Cloudflare

03:29 — What is agile SASE and Cloudflare One?

05:44 — Composability and programmability explained

07:53 — Built on Cloudflare’s global network vs legacy vendors

09:07 — The truly programmable SASE platform

10:04 — Custom gateway policies with Cloudflare Workers

12:16 — Post-quantum encryption in Cloudflare One

13:14 — Harvest now, decrypt later

14:34 — Boot-to-login security with the Cloudflare One client

17:35 — Independent MFA in Cloudflare Access

19:13 — Deepfake defense and Nametag partnership

22:15 — User risk scoring and adaptive access

25:26 — Data security: DLP, CASB, and browser-based RDP

27:21 — Microsoft 365 Copilot visibility

29:05 — Partner stories: TachTech and Adapture

33:09 — Zero Trust onboarding with Terraform

35:25 — Key takeaways