TrustCeroProtect every company laptop. Prove it to anyone who asks.
TrustCero blocks known phishing and malware sites on every laptop, through your own Cloudflare account, and keeps dated proof that the protection is on. When a customer, an insurer or an auditor asks how you protect your devices, you answer with a record, not a promise.
For companies of 10 to 200 people without a security team, on macOS and Windows. Early access.
- Blocks known threatsPhishing and malware sites, from Cloudflare's threat intelligence.
- Every laptop accounted forSee which computers are covered and when each was last seen.
- Proof on demandA dated record of your protection, ready in minutes.
- Logs stay yoursBrowsing logs never leave your Cloudflare account.
Protection is half the job. Proving it is the other half.
Blocking a phishing site keeps your company safe. Showing a customer that you do it every day is what wins the deal. Web filters do the first half. TrustCero does both.
ProtectEvery laptop, every day
- Known phishing and malware sites are blocked, even if a rule allows them.
- Your own rules block or allow the sites you choose.
- Monitor mode shows what would be blocked before anything is.
- Enforced by Cloudflare's global network, in your own account.
ProveWhenever someone asks
- Every rule change and every time it reached Cloudflare, logged with who and when.
- Dated lists of the laptops that were covered.
- An evidence file for any period, with its fingerprint in a log no one can edit.
- Ready for the questions customers, insurers and auditors ask.
Who asks for the proof
Your customers
Security questionnaires ask whether you filter web access and know your company devices. Answer yes, and attach the record.
Your insurer
Cyber insurance applications ask how you protect company devices from threats. Show what's in place and since when.
Your auditor
SOC 2 and ISO 27001 audits look at controls over months. TrustCero keeps the evidence for the whole period.
What TrustCero is
TrustCero is a control panel and record keeper for Cloudflare Zero Trust. Cloudflare does the filtering on its global network, under your own account. TrustCero is where your company decides the rules, checks that every laptop is covered, and keeps proof of both.
- You set the rules in the TrustCero Console: list sites to block or allow, or group them, like personal file sharing. The most specific rule wins, and monitor mode lets you see what a rule would block before it blocks anything.
- TrustCero applies them as Cloudflare Gateway DNS policies in your account and keeps them in sync. It only changes the rules it created, and reads back your list of devices.
- Cloudflare enforces them. The WARP app on each laptop sends its lookups to Cloudflare, which allows or blocks each one and logs it in your account.
- TrustCero keeps the proof. Every sign-in, rule change, and sync goes into an audit log admins can't edit. Download a dated evidence file whenever an auditor or customer asks.
Why teams use it
Protection that doesn't rely on people
Even careful people click a bad link. Known phishing and malware sites are blocked before the page loads, on every covered laptop.
Less time producing evidence
Auditors want to see a control working over months, not just today. Instead of screenshots and log searches, download one dated file with every policy version, each time it was applied (including failures), and your device lists.
No security team required
You get Cloudflare's global network without learning Gateway's rule syntax. Plain rules, monitor mode first, and a clear view of which laptops are covered.
Your data stays yours
Lookup logs stay in your Cloudflare account, and the rules live there too. Disconnect TrustCero and it removes the rules it created. Rules you made yourself are never touched.
Rules, devices, and records in one place
Everything an admin needs, in plain language. Start in monitor mode to see what your rules would block, then switch to enforce when you're ready.
- Block or allow sites one by one, or in categories you name.
- Block known threats, like malware and phishing sites, with Cloudflare's threat intelligence.
- See each laptop running WARP, who uses it, and when it was last seen.
- Every policy version kept, with who published it and when.
- Sign in with a password, Google, or Microsoft, plus two-factor.
Where TrustCero fits in an audit
TrustCero doesn't perform audits or certify compliance. SOC 2 reports come from independent auditors, and ISO 27001 certificates from certification bodies. TrustCero gives you records for a few specific controls (web access rules, device inventory, and who changed what) for your auditor to review alongside the rest of your security program. It saves you time producing that evidence and answering questionnaires; it doesn't lower your auditor's fees or replace a compliance platform.
Monitoring that respects your team
TrustCero manages your rules; it doesn't read your team's traffic. Rules work on site names, so there's no page content to collect.
- No page content, messages, passwords, keystrokes, or screenshots. TrustCero never decrypts traffic.
- Connection logs stay in your own Cloudflare account, under your control.
- Two-factor authentication required for every admin.
- Two-factor secrets and Cloudflare credentials encrypted at rest.
- Each company's data kept separate at the database level.
- We never sell your data or share it for advertising.
Monitoring employees comes with notice obligations that vary by state and country. Tell your team before you turn it on; our privacy policy explains what's collected.
Protect your laptops. Have the proof ready.
A 30-minute walkthrough: threat blocking through Cloudflare Zero Trust, your device list, and the evidence you can hand to customers, insurers and auditors.