Fewer than 5 people recommend it so far, so there's no written verdict. Here is what commenters said.

3recommend
1warn against
Feb 25, 2026first mention
Sep 18, 2026latest mention
Nov 25 – Oct 26
Used foraccess controlauth injection for llm apilogin protection

Why people recommend it

“I also use CF managed auth to make auth easier.”

“I recommend switching to Cloudflare Access with the provided instructions for additional security.”

Caveats and dissent

“I don't really want to use Cloudflare anymore, and they have some restrictions that don't really work for me, e.g. 100MB max file upload size.”

Often compared with

Who recommends it in their own words

All comments 6

“I also use CF managed auth to make auth easier.”

“I don't really want to use Cloudflare anymore, and they have some restrictions that don't really work for me, e.g. 100MB max file upload size.”

“it assumes you're using Cloudflare Access (VPN) with a Cloudflare AI Gateway”

“I recommend switching to Cloudflare Access with the provided instructions for additional security.”

>> interesting. workers.dev domains can be a liability sometimes -- if you've mapped the worker to a real zone, then you probably don't want the workers.dev zone anymore. maybe that is a good idea, prompt a user to disable the worker.dev domain. however, having the worker.dev domain open for me is more of a backup way to access the worker as the mapped domain is more for a hobby project. > Interesting. workers.dev do

Threads where it came up

Data: cloudflare-access.json. Quotes are verbatim; the verdict and theme labels are written by a model from these comments, and every clause links to its sources.

Keyboard shortcuts
j / kNext / previous item
o or EnterOpen selected item
/Search
g hHome
g tTop
g rRising
g cCategories
tToggle dark mode
?This help