Cloudflare Adds Broad Post-Quantum Encryption Support to SASE Platform

Quantum computers could eventually break today’s RSA and ECC public-key encryption, allowing attackers to capture encrypted data now and decrypt it once the necessary computing power becomes available. The US National Institute of Standards and Technology (NIST) requires the industry to transition to post-quantum cryptography by 2030, prompting companies to begin upgrading the encryption infrastructure protecting financial, healthcare and confidential data.

Cloudflare announced on February 23, 2026, that Cloudflare One SASE supports hybrid ML-KEM across key inbound and outbound pathways, including Zero Trust, Secure Web Gateway and WAN. Cloudflare One Appliance version 2026.2.0 was automatically deployed on February 11 at no additional cost, while Cloudflare IPsec remains in closed beta.