Secure private apps

import { CardGrid, LinkTitleCard } from "~/components";

Cloudflare Access lets users reach internal applications through a browser without a VPN or client software on their device. You connect your application to Cloudflare using a secure connection called a tunnel, then protect it with policies that control who can access it. For more background, refer to What is clientless access?.

How you set this up depends on the type of application you are securing. Choose the scenario that matches your use case:

<LinkTitleCard title="Private web application" href="/cloudflare-one/setup/secure-private-apps/private-web-app/" icon="laptop"

Connect an internal web application to Cloudflare and control who can access
it. Best for applications like company intranets, internal wikis, or admin
panels.

<LinkTitleCard title="Clientless SSH" href="/cloudflare-one/setup/secure-private-apps/clientless-ssh/" icon="seti:shell"

Provide in-browser command line access to an internal server without SSH
client software on the user's device.

<LinkTitleCard title="In-browser remote desktop" href="/cloudflare-one/setup/secure-private-apps/in-browser-rdp/" icon="seti:windows"

Provide in-browser remote desktop access to Windows hosts without remote
desktop client software on the user's device.

:::note

For in-depth guidance on clientless access and advanced configuration, refer to the Clientless access learning path. :::