Cloudflare Delivers First Complete Post-Quantum SASE Platform

Cloudflare has announced it has delivered what it calls the world’s first complete Secure Access Service Edge (SASE) platform built to support modern post-quantum (PQ) encryption standards.

By integrating advanced post-quantum cryptography across all major network configurations, the Cloudflare One SASE platform now provides an end-to-end secure bridge between corporate environments and Cloudflare’s global network.

The milestone comes as quantum computing advances threaten to render traditional encryption obsolete. The U.S Government's National Institute of Standards and Technology (NIST) has urged organisations to upgrade cryptographic algorithms by 2030 to prepare for quantum-enabled attacks. Security experts warn of “harvest now, decrypt later” tactics, where attackers collect encrypted data today to crack once quantum machines mature.

Cloudflare began its post-quantum push in 2025 with a cloud-native Secure Web Gateway and Zero Trust solution. The latest update extends PQ protection to wide-area networking through Cloudflare IPsec and the Cloudflare One Appliance, securing Zero Trust access and WAN-as-a-Service under updated cryptographic standards. The company says the platform leverages its experience with post-quantum TLS protocols to deliver improved speed and stability alongside future-proof encryption.

"Securing the Internet against future threats shouldn't be a complex burden, or a reason to fragment the web. Since 2017, we’ve been doing the heavy lifting to bake post-quantum standards directly into the fabric of our network," said Matthew Prince, CEO and co-founder of Cloudflare. "By bringing this protection to our entire SASE platform, we’re making post-quantum security the default—no hardware upgrades, no complex configurations, and no added cost. We’re ensuring that the secure connections our customers rely on today stay secure for the long haul."