Cloudflare has announced a major expansion of its Zero Trust platform: Remote Browser Isolation (RBI), previously restricted to Enterprise tiers, is now available on all Zero Trust plans including Free.
Free Tier Includes 50 Users
Organizations can protect up to 50 users with browser isolation on the Zero Trust Free plan, with all session traffic executed in Cloudflare's secure sandbox and only rendered pixels delivered to the endpoint. Copy-paste and download controls are included.
How It Works
Users access high-risk sites (email links, unknown URLs, approved-but-risky internal tools) through a Cloudflare-hosted headless Chromium. The local browser receives a draw-stream, so no active web content ever touches the endpoint — eliminating the risk of drive-by malware and zero-day browser exploits.
Policy Integration
RBI integrates with existing Gateway policies: specific URL categories, user groups, or device posture signatures automatically trigger isolation. Admins see full session metadata in audit logs, and optional recording is available for compliance use cases.
The feature is live for all existing Zero Trust accounts and new signups.
