How it works
Where your apps run, how they stay private, and who can change them.
Where everything runs
Everything runs in your Cloudflare account. The Gateway and each app are separate Cloudflare Workers, each with its own database.
everyapp signs you in to Cloudflare and uploads apps with cf, Cloudflare's command line tool. It comes with everyapp; there's nothing else to install. If you've used Wrangler, cf is its successor.
How apps stay private
Apps have no public address of their own. Every visit goes through the Gateway first.
When someone opens todo.apps.yourcompany.com:
- The Gateway checks that they're signed in and allowed to open the todo app. If not, the app never sees the request.
- It passes the request to the app inside Cloudflare, with a signed note saying who they are. The note works only for that app, for about two minutes.
- The app checks the note and shows that person their data.
So even if an app has a bug, only people you've given access to can reach it.
Your data
Each app has its own database, so one app can't read another's data. Deploys save a restore point before changing a database. Undo a database change
Nothing is sent to us. The CLI and the Gateway have no telemetry. They talk to Cloudflare, to GitHub when you install a published app, and to the services you connect. Your members, keys and data stay in your account. This website counts page views with analytics we host ourselves: Privacy.
Who can change things
Anyone who can sign in to your Cloudflare account can deploy apps and change the Gateway. Give that access only to people you fully trust. To let someone deploy, add them to your Cloudflare account; to stop them, remove them.
How safe is it
EveryApp is alpha software. Setup puts Cloudflare Access in front of everything: a second sign-in, at Cloudflare. If it's off, run everyapp access on before you invite people. Cloudflare Access Found a hole? Report it privately.
Limits today
- You update apps from the terminal.
- When you remove someone, it can take up to two minutes before every app stops letting them in.
- The Gateway can't move to a different address. To change it, remove everything and set it up again.
- A monthly cap counts calls, not dollars, and can stop an app a few calls late. Usage and caps