Authelia
Reverse Proxy & GatewaysAuthentication and authorization server for reverse proxies
Replaces Okta, Cloudflare Access
9 self-hosted Cloudflare Access alternatives
Cloudflare Access is a SaaS zero-trust gateway that fronts apps with identity-based policies. These open-source apps let you replace Cloudflare Access with software you host and control yourself.
Best self-hosted Cloudflare Access alternatives
OAuth2 Proxy
Reverse Proxy & GatewaysReverse proxy that adds authentication to any web app
Replaces Cloudflare Access
Tinyauth
Reverse Proxy & GatewaysSimplest way to protect your apps with a login screen
Replaces Cloudflare Access
Pomerium
Reverse Proxy & GatewaysIdentity-aware reverse proxy for zero-trust access
Replaces Cloudflare Access, BeyondCorp
OpenZiti
Remote Access & VPNProgrammable zero-trust networking platform
Replaces Cloudflare Access
Ory Oathkeeper
Identity & SSOIdentity and access proxy for zero-trust networks
Replaces Cloudflare Access
Buzzfeed sso
Identity & SSOSelf-hosted SSO middleware for OAuth and OIDC
Replaces Cloudflare Access
Traefik Forward Auth
Identity & SSOMinimal forward authentication service for Traefik
Replaces Cloudflare Access
Caddy Security
Identity & SSOAuthentication and authorization plugin for Caddy
Replaces Cloudflare Access
No apps match these filters.
Compare Cloudflare Access alternatives
- Authelia vs Buzzfeed sso
- Authelia vs Caddy Security
- Authelia vs OAuth2 Proxy
- Authelia vs OpenZiti
- Authelia vs Ory Oathkeeper
- Authelia vs Pomerium
- Authelia vs Tinyauth
- Authelia vs Traefik Forward Auth
- Buzzfeed sso vs Caddy Security
- Buzzfeed sso vs OAuth2 Proxy
- Buzzfeed sso vs OpenZiti
- Buzzfeed sso vs Ory Oathkeeper
- Buzzfeed sso vs Pomerium
- Buzzfeed sso vs Tinyauth
- Buzzfeed sso vs Traefik Forward Auth
- Caddy Security vs OAuth2 Proxy
- Caddy Security vs OpenZiti
- Caddy Security vs Ory Oathkeeper
- Caddy Security vs Pomerium
- Caddy Security vs Tinyauth
- Caddy Security vs Traefik Forward Auth
- OAuth2 Proxy vs OpenZiti
- OAuth2 Proxy vs Ory Oathkeeper
- OAuth2 Proxy vs Pomerium
- OAuth2 Proxy vs Tinyauth
- OAuth2 Proxy vs Traefik Forward Auth
- OpenZiti vs Ory Oathkeeper
- OpenZiti vs Pomerium
- OpenZiti vs Tinyauth
- OpenZiti vs Traefik Forward Auth
- Ory Oathkeeper vs Pomerium
- Ory Oathkeeper vs Tinyauth
- Ory Oathkeeper vs Traefik Forward Auth
- Pomerium vs Tinyauth
- Pomerium vs Traefik Forward Auth
- Tinyauth vs Traefik Forward Auth
Switching from Cloudflare Access
Moving off Cloudflare Access means trading a managed subscription for a service you run yourself. The payoff is ownership: no per-seat pricing, no vendor lock-in, and full control of your data. Start with the option above that matches your setup-difficulty comfort level — every app links to a detailed specs page and head-to-head comparisons.