BastionZero

BastionZero is a cybersecurity company that provides a zero-trust infrastructure access platform for engineering teams. The company offers a cloud service that controls remote access to infrastructure targets such as servers, Kubernetes clusters, databases, and internal web applications used by backend and cloud engineering teams to build and host software services. BastionZero's platform automatically discovers infrastructure targets in the environment and provides users with zero-trust access mechanisms. The solution eliminates the need for passwords by allowing administrators to determine infrastructure access based on user roles or accounts, while access logs monitor commands executed on targets.

BastionZero's unique security model employs cryptographic techniques with multiple roots of trust, enabling organizations to move their infrastructure access function to a cloud service without risking compromise if the cloud service is breached. This approach allows the company to offer security-critical remote access functionalities through an easy-to-use cloud service. BastionZero aims to simplify zero-trust access to infrastructure using a modern security architecture, positioning itself as part of a new security product category that could potentially replace VPNs, bastion hosts, and privileged access management (PAM) tools.

In May 2024, Cloudflare acquired BastionZero to extend its Zero Trust Network Access (ZTNA) capabilities. The acquisition allows Cloudflare to expand its VPN replacement solution beyond apps and networks, providing native protection for infrastructure resources with user- and device-based policies and multi-factor authentication. This integration aims to help organizations centralize management of their hybrid IT environments while maintaining productivity and security for DevOps teams.