Typort and Cloudflare Zero Trust

Keep Cloudflare at the network. Access for internal apps, Gateway policies for the web, CASB for SaaS settings, and DLP to block a sensitive prompt before it leaves. That is the control half, and Cloudflare does it well.

Add Typort in the browser. On the AI tools you allow, Typort shows who uses them, what the work is, estimated spend per person against an allowance, and which client's material went where. It needs no change to your Cloudflare setup: no certificate, no routing, no new policy.

One page for the business. The security team keeps the Cloudflare dashboard. Owners and team leaders get adoption, the kind of work, allowances and client rules on one Typort page, without a Cloudflare login.

The team view runs on Typort's servers. It is free for a limited time and will move to Typort Pro later.

Gateway and Access. Every plan includes Zero Trust Network Access and a Secure Web Gateway. To inspect HTTPS traffic with HTTP policies, Gateway needs TLS decryption, with a Cloudflare or custom certificate installed on users' devices.

Shadow IT and app scores. Shadow IT SaaS analytics "provides visibility into the SaaS applications your users are visiting", once HTTP filtering is set up, and each app can be marked Approved, Unapproved or In review. Application confidence scorecards rate AI and SaaS apps, including a Generative AI Posture Score.

DLP on AI prompts. AI prompt protection inspects prompts to Google Gemini, ChatGPT, Claude and Perplexity, sorts them into topics such as PII, source code and credentials, and can block sensitive prompts in Gateway HTTP policies. It can optionally log the full prompt for prompts that match a policy.

CASB. Connects to SaaS and cloud APIs to scan for security issues, such as overly permissive sharing settings.

AI Gateway is a separate product. It sits in front of the AI APIs your own apps call, and shows requests, tokens and cost per application, with caching, rate limiting and fallback. Staff chatting on their AI seats do not go through it.

Free: $0, for teams under 50 users or proof-of-concept tests. Includes ZTNA and the Secure Web Gateway, up to 2 read-only CASB integrations, limited predefined DLP profiles, and logs kept up to 24 hours.

Pay-as-you-go: $7 per user a month. For teams over 50 "solving narrow SSE use cases without enterprise support". Logs kept up to 30 days. Browser isolation is an add-on.

Contract: custom annual price per user. Full-featured DLP and unlimited CASB integrations are add-ons. Logs kept up to 6 months.

The job	Cloudflare Zero Trust	Typort
Let people reach internal apps	Yes, with Access (ZTNA)	Not something Typort does
Filter web traffic	Yes, with Gateway HTTP policies	Not something Typort does
Block a sensitive prompt	Yes, with DLP AI prompt protection in a Gateway policy	No. Typort shows what went in after the fact
Scan SaaS settings	Yes, with CASB	Not something Typort does
Find unapproved apps	Shadow IT, from Gateway HTTP traffic	ChatGPT, Claude, Perplexity and Grok only
Usage per person	User counts per approval status in Shadow IT	Tokens, tools and active days per person, with adoption over 13 weeks
Spend	Not part of Zero Trust. AI Gateway counts cost per application, for API calls	Estimated spend per person, with an allowance and a near or over warning
What the work is	Prompt topics for DLP: PII, source code, credentials and similar	Chats sorted into kinds of work, shown as a pie
Client rules	DLP profiles you build per app and action	Rules per client, with chats marked broke a client rule or close to one
Search and ask	Prompt logs for prompts that match a policy	Search the team's chats and meetings, and ask Typort questions that cite the chats
What it needs	Traffic routed through Gateway, and a certificate on each device to inspect HTTPS	The Typort browser extension and a sign in with Microsoft or a work email
Who sees what	Admins in the Cloudflare dashboard	Five switches, shown in plain words to everyone on the team

Is Typort a replacement for Cloudflare Zero Trust?

No. They do different jobs. Cloudflare Zero Trust is a network gateway: it controls who reaches internal apps, filters web traffic, scans SaaS settings and can block sensitive data with DLP. Typort shows how a team uses AI: usage and estimated spend per person, allowances, what the work is, flags and client rules. Many companies will run both.

Is Cloudflare Zero Trust an AI usage tool?

No. It is a network gateway. It can see AI sites in your traffic, list them in Shadow IT, score them, and inspect prompts with DLP. It does not show usage and spend per person, what the work is, or client rules.

What about Cloudflare AI Gateway?

AI Gateway is a separate Cloudflare product for software your company writes. Your apps send their API calls through it, and it shows requests, tokens and cost per application, with caching, rate limiting and fallback. People chatting on their ChatGPT or Claude seats do not go through it.

Can Typort block a prompt?

No. Typort shows what went in after the fact, with flags and client rules marked broke or close. If you need a sensitive prompt stopped before it is sent, Cloudflare DLP in a Gateway HTTP policy can do that.

Which AI tools does Typort see?

ChatGPT, Claude, Perplexity and Grok in the browser, through the Typort browser extension. Microsoft 365 Copilot comes in the next extension update, and Gemini is being added. It reads what is on the page, so it works on Business and Team seats and needs no API keys from the AI vendors, no certificate and no network change.

What does Cloudflare Zero Trust cost?

Cloudflare publishes three plans: Free at $0 for teams under 50 users, Pay-as-you-go at $7 per user a month, and Contract at a custom annual price per user.

Are the dollar figures exact?

No, they are estimates from the tokens in each chat at the AI vendor's API list price. They are there to compare people and tools, not to replace the invoice.

What does the team view cost?

The team view runs on Typort's servers. It is free for a limited time and will move to Typort Pro later.