GlobalDots now lets Cloudflare Zero Trust customers plug in the Content Disarm and Reconstruction (CDR) engine of their choice, such as OPSWAT, so every file that passes through Cloudflare is sanitized before it reaches a user. It is available at no cost to GlobalDots customers.
Weaponized documents are still one of the most common ways attackers get in. A PDF invoice, a spreadsheet from a supplier, or a resume sent to HR can carry a macro, an embedded script, or an exploit that no signature has seen yet. Detection-based tools have to recognize a threat before they can stop it. CDR doesn’t wait for that.
Make the most out of your Cloudflare
with GlobalDots Day-2 Services.
What is Content Disarm and Reconstruction?
CDR treats every file as untrusted. Instead of asking “is this file malicious?”, it takes the file apart, removes anything that could execute or hide code, and rebuilds a clean, usable copy.
Macros, embedded objects, scripts, hidden links, and malformed structures are stripped out. The user still gets the document they expected, with its content and formatting intact. Because CDR doesn’t depend on recognizing a known threat, it is effective against zero-day and file-based attacks that antivirus and sandboxing can miss or catch too late.
The gap: your Zero Trust platform and your CDR engine don’t talk
Cloudflare Zero Trust already sits in the path of your users’ traffic. Secure Web Gateway, DLP, and Browser Isolation give you one place to inspect and control what moves between users, the internet, and SaaS apps.
Many security teams have also invested in a dedicated CDR solution, or are required to use one. Until now, connecting the two meant extra hops, separate proxies, or manual processes. Files either skipped sanitization or users waited on a workflow outside the Zero Trust policy they already had.
How the GlobalDots integration closes the gap
The GlobalDots CDR integration connects Cloudflare Zero Trust to the content disarm solution you already use. Files your Cloudflare policies flag for sanitization are handed to your CDR engine, cleaned, and delivered to the user, all within the Zero Trust flow.
- Vendor-agnostic. Works with OPSWAT MetaDefender and other CDR engines, so you keep the tool your team trusts.
- Policy-driven. You decide which users, file types, and destinations get sanitized, using the Cloudflare policies you already manage.
- Transparent to users. No agents, plugins, or new portals. Users download files as usual and receive the clean version.
- Audit-ready. Downloaded files can be retained for auditing, giving security and compliance teams a record of what entered the organization.
- Encrypted file support. Encrypted and password-protected files can be handled too, so they don’t become a blind spot.
- Built on Cloudflare’s network. Sanitization fits into Cloudflare’s global edge rather than another appliance to route traffic through.
- Supported by experts. Deployed and backed by GlobalDots, Cloudflare’s 2026 EMEA Service Delivery Partner of the Year.
Where it makes a difference
- Web downloads. Files pulled from websites and file-sharing services are sanitized before they land on endpoints.
- SaaS and collaboration apps. Documents shared through cloud storage and collaboration tools get the same protection as web traffic.
- Uploads into sensitive systems. Files users upload to internal or customer-facing apps can be cleaned before they reach the back end.
- Third-party and contractor access. Unmanaged users working through Cloudflare Zero Trust receive sanitized files without installing anything.
- Compliance-driven environments. Finance, healthcare, government, and critical infrastructure teams can meet file-sanitization requirements inside their SASE architecture.
Who it’s for
The integration is built for organizations that run Cloudflare Zero Trust, or are moving to it, and want file sanitization without a second traffic path. It fits teams that already license a CDR engine and want to get more out of it, and teams consolidating security tools into a single SASE platform.
Get CDR in Cloudflare Zero Trust, free
If you run Cloudflare Zero Trust and want every file sanitized before it reaches your users, GlobalDots can connect it to your CDR engine at no cost. Reach out to our team to get started. Contact GlobalDots
