Passkey authenticationPhishing-resistant, origin-bound credentials stored on your device. No passwords to leak or intercept.
AES-256-GCM encrypted sessionsSession tokens are encrypted end-to-end. Even if intercepted, they cannot be read or tampered with.
Outbound-only connectionNo ports are opened on your machine. Cloudflare relays signalling to negotiate a direct peer-to-peer link with your workspace.