# Secure all your internal vibe-coded applications — in one click

[Cloudflare](https://yomu.fyi/company/cloudflare) · Chythra Malapati · Aug 14, 2026

**Type:** Announcement

## Summary

AI-assisted development enables employees to build applications rapidly, but unmanaged deployments can accidentally expose internal company data to the public Internet. Cloudflare introduced direct Cloudflare Access integration for Cloudflare Workers, allowing organizations to enforce authentication policies directly at the account or individual Worker level rather than per hostname. When enabled, incoming requests are authenticated before reaching application code across custom domains, routes, workers.dev subdomains, and preview environments. Developers can access authenticated identity data such as emails and groups directly via the Worker context object without manually validating JSON Web Tokens. This capability was implemented on Cloudflare's Rust-based FL2 proxy, which separated Worker routing from Worker execution so routing runs safely prior to Access policy enforcement.

## Context

Rapid AI-assisted development allows employees to quickly deploy applications to the public Internet, creating security risks when internal applications and sensitive company data are exposed without authentication configured by developers.

## Approach / What changed

Cloudflare attached Access policies directly to individual Workers or entire accounts, enforcing authentication across all hostnames, routes, and preview URLs before request execution. Authenticated user metadata is attached directly to the Worker context object, supported by architectural routing changes in Cloudflare's Rust-based FL2 edge proxy.

## Takeaways

- Cloudflare Access policies can now be enforced at the Worker or account level, automatically protecting all associated custom domains, routes, workers.dev subdomains, and preview URLs.
- Worker code can retrieve authenticated user metadata including email, name, and groups via ctx.access.getIdentity(), eliminating manual JSON Web Token parsing and signature verification.
- The feature was enabled by Cloudflare's Rust-based FL2 proxy, which cleanly split Worker routing from Worker execution so routing logic executes before Access enforcement.

**Tags:** [Authentication](https://yomu.fyi/topic/authentication), [Deployment](https://yomu.fyi/topic/deployment), [Developer Experience](https://yomu.fyi/topic/developer-experience), [Rust](https://yomu.fyi/topic/rust), [Serverless](https://yomu.fyi/topic/serverless)

[Read original post](https://blog.cloudflare.com/workers-protected-by-access)