Cloudflare Democratizes Spoof-Proof Security; Makes Hardware Security Keys More Accessible Than Ever for Millions of Customers Because it’s Good for the Internet

Collaborates with Yubico for exclusive offering to help end phishing attacks once and for all

Cloudflare, Inc. , the security, performance, and reliability company helping to build a better Internet, today announced a new offering to make physical security keys the most accessible and economical solution for customers to better secure their business and employees. Cloudflare customers will be able to purchase Yubico’s security keys, the leading hardware security keys, and most secure form of phishing-resistant multi-factor authentication (MFA), at an exclusive ‘good for the Internet’ cost.

A Zero Trust security model means that no one is trusted, by default, regardless if they’re inside or outside of a corporate network. As such, verification is required from everyone trying to gain access to resources on that organization’s network, including location, familiar devices, and passwords. Today, hardware security keys are an additional layer of protection and a method of MFA that has been proven to be phishing resistant.

Cloudflare customers will be able to claim an offer for Yubico’s Security Key Series at highly discounted prices – as low as $10 – through their Cloudflare dashboard. Larger organizations using Cloudflare and purchasing a multi-year YubiEnterprise Subscription for YubiKeys will receive a 50% discount off their first year of a 3+ year subscription. This collaboration aims to make it simple and seamless for organizations of all sizes to acquire, activate, and authenticate with security keys.

In July, Cloudflare prevented a breach by a SMS phishing attack that targeted more than 130 companies, due to the company’s use of Cloudflare Zero Trust paired with YubiKeys. Physical security keys strengthen the barrier against attacks and work in conjunction with additional security measures such as DNS filtering, browser isolation, cloud email security, and more, where an attacker would need to compromise every signal.

“We’re always asking ourselves how we can do even more to provide the best possible security to our customers and the Internet-at-large. With phishing attacks on the rise, this means helping to democratize additional security measures to complement the Cloudflare Zero Trust experience. We experienced this first hand and wanted to make implementing hardware security keys a no-brainer for any organization,” said Dane Knecht, SVP, Emerging Technology and Incubation at Cloudflare. “Working with Yubico is just another way we’re trying to make it as seamless as possible to arm our customers with the best Zero Trust security strategy. Being a Cloudflare Zero Trust customer introduces an easy, fast and affordable way to implement security keys in your organization, and all part of our greater mission to help build a better Internet.”

With Yubico, Cloudflare is ensuring physical security keys are:

• Economical:Rolling out security keys can be difficult for companies with smaller security teams, or those that have just begun using two-factor authentication. By offering security keys at the most affordable rate, this offer makes the keys less of a financial burden on small companies.
• Accessible:Now Cloudflare customers can order Security Key Series, supporting FIDO-based authentication, directly through their dashboard. The YubiKey 5 Series, available through YubiEnterprise Subscription, supports multiple authentication protocols, from legacy applications to modern FIDO-based apps and services. The exclusive ‘good for the Internet’ pricing, helps to introduce the value and functionality of hardware keys to Cloudflare customers.
• Simple to use:Setting up security keys is easy for participating Cloudflare customers. For Administrators, Cloudflare Zero Trust makes it easy to use your security keys with any Identity Provider (IdP) and integrates both the keys and IdP into a comprehensive Zero Trust solution. For employees, a simple guided prompt makes the action of touching a security key for authentication seamless. Security keys work across all devices, operating systems, and areas within an organization.

“Yubico pioneered the modern security key, the YubiKey, and continues to set the industry standard, protecting enterprise customers and consumers from security threats,” said Stina Ehrenvard, CEO and co-founder, Yubico. “Today’s attacks require modern MFA. Working with Cloudflare will help get more Security Keys and YubiKeys into the hands of their customers, to deliver on the combination of phishing-resistant MFA and provide peace of mind.”

This special promotion will be available to Cloudflare customers until December 31, 2022.

To learn more about Cloudflare’s physical security keys offering, please check out the resources below:

• The (hardware) key to making phishing defense seamless with Cloudflare Zero Trust and Yubico
• How Cloudflare implemented FIDO2 and Zero Trust to prevent phishing
• Activate phishing-resistant MFA with security keys and Zero Trust
• A Roadmap to Zero Trust Architecture
• The mechanics of a sophisticated phishing scam and how we stopped it

About Cloudflare

Cloudflare, Inc. (www.cloudflare.com / @cloudflare) is on a mission to help build a better Internet. Cloudflare’s suite of products protect and accelerate any Internet application online without adding hardware, installing software, or changing a line of code. Internet properties powered by Cloudflare have all web traffic routed through its intelligent global network, which gets smarter with every request. As a result, they see significant improvement in performance and a decrease in spam and other attacks. Cloudflare was named to Entrepreneur Magazine’s Top Company Cultures 2018 list and ranked among the World’s Most Innovative Companies by Fast Company in 2019. Headquartered in San Francisco, CA, Cloudflare has offices in Austin, TX, Champaign, IL, New York, NY, San Jose, CA, Seattle, WA, Washington, D.C., Toronto, Dubai, Lisbon, London, Munich, Paris, Beijing, Singapore, Sydney, and Tokyo.