{
  "slug": "cloudflare-mesh",
  "category": "mesh-vpns",
  "name": "Cloudflare Mesh",
  "description": "Private networking in Cloudflare One that gives devices and servers running the WARP client or connector private addresses, with all traffic passing through Cloudflare's network.",
  "website": "https://developers.cloudflare.com/cloudflare-one/networks/connectors/cloudflare-mesh/",
  "license": null,
  "platforms": [
    "windows",
    "macos",
    "linux",
    "android",
    "ios"
  ],
  "jurisdiction": {
    "code": "US",
    "name": "United States",
    "eyes": "Five Eyes",
    "eu": false,
    "gdpr": false,
    "cloud_act": "provider"
  },
  "pick": false,
  "pick_reason": null,
  "disclosure": null,
  "grade": "F",
  "score": 18,
  "coverage": 100,
  "summary": "Cloudflare Mesh scores 18 out of 100 (grade F) on the mesh VPNs and private networks criteria. It partly meets no ads or data sales, independent audit and no connection logs by default. It does not meet open source, no trackers or telemetry, keys stay on devices and self-hosted coordination server. It is based in the United States: Five Eyes member; subject to the US CLOUD Act.",
  "url": "https://privacyratings.com/mesh-vpns/cloudflare-mesh/",
  "markdown": "https://privacyratings.com/mesh-vpns/cloudflare-mesh/index.md",
  "answers": {
    "open_source": {
      "title": "Open source",
      "weight": 3,
      "answer": "no",
      "evidence": null,
      "note": "The WARP client and Cloudflare One are closed source."
    },
    "no_trackers": {
      "title": "No trackers or telemetry",
      "weight": 3,
      "answer": "no",
      "evidence": "https://www.cloudflare.com/privacypolicy/",
      "note": "The website loads Google Tag Manager, and the privacy policy describes advertising cookies."
    },
    "no_ads": {
      "title": "No ads or data sales",
      "weight": 2,
      "answer": "partial",
      "evidence": "https://www.cloudflare.com/privacypolicy/",
      "note": "Funded by paid plans and does not sell personal information, but marketing and advertising partners receive website data to advertise Cloudflare's services."
    },
    "independent_audit": {
      "title": "Independent audit",
      "weight": 2,
      "answer": "partial",
      "evidence": "https://developers.cloudflare.com/fundamentals/reference/policies-compliances/compliance-docs/",
      "note": "SOC 2, ISO 27001 and PCI reports exist but are only available to account administrators in the dashboard."
    },
    "transparency_report": {
      "title": "Transparency report",
      "weight": 2,
      "answer": "n/a",
      "evidence": null,
      "note": "Only applies to hosted services with a website to test."
    },
    "user_notice": {
      "title": "Tells users about requests",
      "weight": 1,
      "answer": "n/a",
      "evidence": null,
      "note": "Only applies to hosted services with a website to test."
    },
    "tls": {
      "title": "TLS configuration",
      "weight": 2,
      "answer": "n/a",
      "evidence": null,
      "note": "Only applies to hosted services with a website to test."
    },
    "security_headers": {
      "title": "Security headers",
      "weight": 1,
      "answer": "n/a",
      "evidence": null,
      "note": "Only applies to hosted services with a website to test."
    },
    "web_standards": {
      "title": "Modern web standards",
      "weight": 1,
      "answer": "n/a",
      "evidence": null,
      "note": "Only applies to hosted services with a website to test."
    },
    "device_keys": {
      "title": "Keys stay on devices",
      "weight": 3,
      "answer": "no",
      "evidence": "https://developers.cloudflare.com/cloudflare-one/networks/connectors/cloudflare-mesh/concepts/",
      "note": "All traffic passes through Cloudflare, where Gateway policies are applied. Devices do not encrypt traffic end to end to each other."
    },
    "self_hosted_control": {
      "title": "Self-hosted coordination server",
      "weight": 2,
      "answer": "no",
      "evidence": null,
      "note": "Only Cloudflare's hosted service can be used."
    },
    "no_connection_logs": {
      "title": "No connection logs by default",
      "weight": 2,
      "answer": "partial",
      "evidence": "https://developers.cloudflare.com/cloudflare-one/insights/logs/gateway-logs/",
      "note": "Gateway logs all DNS, network and HTTP activity by default. Admins can turn logging off or keep only blocked requests."
    }
  },
  "tests": {
    "ssllabs": null,
    "observatory": null,
    "internetnl_web": null,
    "internetnl_mail": null,
    "trackers": [
      {
        "name": "Cloudflare Web Analytics",
        "host": "static.cloudflareinsights.com",
        "effect": "partial"
      }
    ],
    "tested_at": "2026-10-01T07:02:25.075Z"
  },
  "last_modified": "2026-10-01T07:44:20Z"
}