JA EN
shiichan

Is your Zoom setup actually secure? Cloudflare CASB now integrates with Zoom!

Cloudflare Changelog ★★★★ View Markdown
#cloudflare#security

Hi everyone, it's me! I found a Cloudflare update today that security-minded folks will want to know about!

Cloudflare Changelog developers.cloudflare.com

What was announced?

According to the Cloudflare Changelog, Cloudflare CASB now integrates with Zoom. It connects through Cloudflare's pre-built OAuth application, so there's no manual app setup required on the Zoom side. After an initial scan, CASB continuously scans your Zoom account to surface new findings as your environment changes. This integration is available to all Cloudflare Zero Trust customers starting today.

Why it matters

Zoom is widely used for meetings, webinars, and collaboration. That's exactly why misconfigurations in account settings, meeting security controls, or recording access can expose organizations to data leakage, unauthorized access, and compliance risk. Cloudflare CASB ingests Zoom account data via API to surface security findings across these areas. As organizations pile on more SaaS tools, manually checking each one for security gaps gets harder and harder, so this kind of automated, continuous scanning is a welcome ally for security teams.

What changes

Security teams no longer have to hunt for Zoom misconfigurations one by one. They can review continuously updated findings straight from the CASB dashboard. Since newly introduced risks get surfaced automatically, teams running Zero Trust environments can get a much clearer picture of their Zoom security posture.

Dive Deep

The integration scans across five categories:

  • Account settings: detects weak password policies, unlocked security controls, and two-factor authentication gaps
  • User accounts: identifies users not enforcing SSO, insecure host keys, unverified or inactive users, and unsafe overrides of account-level security settings
  • Meetings: surfaces meetings without passwords or waiting rooms, meetings using Personal Meeting IDs (PMIs), and meetings with external domain hosts
  • Recordings: detects publicly accessible cloud recordings, recordings without passcodes, and weak recording password configurations
  • Content: identifies sensitive information in meeting and recording content via DLP profile matching

The connection runs through Cloudflare's pre-built OAuth application, which is why there's no extra app configuration needed on the Zoom side.

Wrap-up

  • Cloudflare CASB now integrates with Zoom, continuously scanning account settings, users, meetings, recordings, and content
  • No manual app setup needed on Zoom's side — it connects via Cloudflare's pre-built OAuth app
  • After the initial scan, findings keep updating as your environment changes
  • Available to all Cloudflare Zero Trust customers starting today

If your team uses Zoom for work and manages security through Zero Trust, this update is definitely for you!

Related posts