Verify Apple devices with no installed software

Cloudflare has announced its support for Apple's Private Attestation Tokens (PAT) in its Cloudflare Access service. This feature allows security teams to verify a user's Apple device before they access sensitive applications, without the need to install any additional software or collect device data. PAT leverages the Privacy Pass Protocol and requires four parties to work together: an Origin, a Client, an Attester, and an Issuer. Cloudflare Access will support verifying if a user is accessing from a "healthy" Apple device before allowing access to sensitive corporate applications. The company plans to expand device support and verification attributes over time.