Cloudflare One Agent

Name: Cloudflare One Agent
Author: Cloudflare, Inc.

2.5.7

Verified

Cloudflare, Inc.

4.11500K+ installs

Download APK

Cloudflare One Agent for Cloudflare Zero Trust.

Cloudflare One Agent: Zero Trust client for work devices

By Hafiz Rahman

Editor, tools and utilities

Encrypted tunnel from an Android device to Cloudflare's network
Built on Android's VpnService, so it runs as a VPN
Gateway, Access and Data loss prevention policies on traffic
Browser Isolation and Anti-Virus policies set by administrators
Setup and policy choices left to a company's IT or security team
Made for remote and office staff of Cloudflare Zero Trust customers

What Cloudflare One Agent is for

Cloudflare One Agent is the device client for Cloudflare Zero Trust, a security service that the developer says is meant to replace older network perimeters. It is aimed at employees whose organization already uses Cloudflare Zero Trust, with the developer describing consistent security for remote workers and people in the office alike.

It is not a standalone consumer VPN. The developer tells users to contact their company's IT or security department for instructions on setting it up and using it.

How the encrypted tunnel works on a phone

The app uses Android's VpnService to create an encrypted tunnel from the device to Cloudflare's global network. Traffic that goes through the tunnel reaches that network, which is where the company's policies are applied.

The listing does not describe the tunnel as a user-facing setting. Its job is to carry the device's connection to the policy layer.

Policies applied to traffic: Gateway, Access and DLP

The developer names Cloudflare Gateway, Data loss prevention and Access as policy types that can be applied to traffic passing through the tunnel. These are defined and switched on by the organization's administrators on Cloudflare's side, not by the person using the phone.

Browser Isolation and Anti-Virus are listed alongside them as further policies that can be applied in the same way.

Who sets up and controls the agent

Configuration rests with the company. The developer's own text points users to their IT or security team for how to configure and use the app, so the choice of policies and the setup steps come from the employer.

For anyone outside an organization using Cloudflare Zero Trust, the listing gives no separate way to use the app.

What's new

Oct 19, 2026

This hotfix addresses an issue building trusted certificate chains.

Known Issues:
- On some ChromeOS devices, Cloudflare One Agent may fail to reconnect after switching networks or installing a system update. This is caused by a failing/stopped internal ChromeOS service. Restarting the Chromebook may restore the system service, unblocking the Cloudflare One Agent.

Zero Trust docs:
https://developers.cloudflare.com/cloudflare-one/team-and-resources/devices/cloudflare-one-client/

About this APK

The build we hold is Cloudflare One Agent 2.5.7 (APKS split bundle) for Android 7.0 and up.

Version: 2.5.7; 5702
Requires Android: 7.0+
Target Android: 15

Package ID: com.cloudflare.cloudflareoneagent
Format: APKS split bundle
Malware scan: Clean on 63 engines
Permissions: 17 declared · 2 sensitive; Modify files on your device
Read files on your device
Signed by: CN=Android, O=Google Inc.
Certificate SHA-256: 273a3a5e09dc720d3b3945162e724d9a69b21fc542bed7457f115966b145e8bc