Zero Trust security for your staff: every login checked, every leaver locked out
For businesses with ten or more staff who still share a VPN password, work on personal laptops or forget to close accounts when people leave. Armor Workforce is Cloudflare Zero Trust, set up and run by us: each person reaches only what their role needs, from anywhere, and leavers lose access within one working day.
$5 a person a month, ten people minimum ($50). Two months free on annual billing.
Pay by
- Tendai, Finance teamSigned in
- Company laptop FIN-07Recognised
- Payroll and accountingAllowed
- HR recordsNot her role
- Upload payroll file to personal GmailBlocked
- Farai left on FridayAccess removed
- 4.6 out of 5 from Google Reviews
- 13,000+ domains on Tremhost infrastructure
- Cloudflare partner, signed 2026
- Leavers removed within one working day
Your firewall guards the front door while staff carry data out the back
Most breaches in small organisations don't come through the website. They come through a person: a password reused, a file emailed home, a laptop nobody controls.
Today
- One shared VPN password that everyone knows, including the two people who left last year
- Client files and payroll spreadsheets on personal laptops you've never seen and can't wipe
- Accounts that stay live for months after someone walks out, angry or not
- Nobody can say who opened what, so an auditor's question takes a week
With Armor Workforce
- Each person signs in as themselves and sees only what their role needs
- Sensitive uploads to personal storage are blocked and logged
- Leavers lose access across every system within one working day
- A monthly report shows who accessed what and what was blocked
Plainly: Workforce protects access and data, not devices. It doesn't encrypt a stolen laptop's disk or remove malware. Keep your antivirus, or add ESET.
Workforce against doing it yourself
Cloudflare's licence is free up to 50 people, so the real comparison is your team's time. Enter your own numbers; the starting values are only an example.
25 people
- Armor Workforce
- $125 a month
- Yearly, two months free
- $1,250 a year
- Cloudflare licence, direct
- $0 (free plan, up to 50 users)
- Doing it yourself, licence plus time
- $120 a month
On these numbers doing it yourself is $5 a month cheaper. Workforce makes sense if you would rather not own the policy, rollout and leaver admin.
Workforce = $5 × people. Direct licence = $0 up to 50 users (Cloudflare Zero Trust Free), otherwise $7 × people (pay-as-you-go). Doing it yourself = licence + IT hours × hourly cost. Cloudflare prices checked 2 November 2026 at cloudflare.com/plans.
What you pay direct, and what you pay us
Cloudflare's own prices, side by side with ours. Under 50 people the licence is free direct, and we say so: what you buy from us is the work.
| What you want | Cloudflare, direct | Armor Workforce |
|---|---|---|
| 25 staff, licence | $0 (free plan) | $125 a month |
| 100 staff, licence | $700 a month | $500 a month |
| Support | Community forums (free), chat and ticket (pay-as-you-go) | Our engineers in Harare |
| Access policy designed with your management | Your IT team | Included |
| Rollout to staff devices | Your IT team | Included |
| Joiners and leavers | Your IT team | Within one working day |
Cloudflare prices checked 2 November 2026 at cloudflare.com/plans: Zero Trust Free up to 50 users; pay-as-you-go $7 a user a month. 100 staff: 100 × $7 = $700 direct against 100 × $5 = $500, a saving of $2,400 a year (29%).
What each person's $5 buys
Everything below is in the monthly price, and each line says what it changes for you.
- Login without a VPNStaff reach internal systems from the office, home fibre or mobile data, and nobody shares one password.
- Access rules per teamFinance sees finance systems. A compromised reception login can't open payroll.
- Web filtering on every deviceMalicious and unwanted sites are blocked wherever staff work, not only on the office network.
- Data-loss preventionUploads of sensitive files to personal storage and unapproved apps are stopped and logged.
- Microsoft 365 and Google Workspace checksRisky sharing settings in the tools you already pay for are found and fixed.
- Joiners and leavers in one working dayWhen someone resigns, their access goes across every system behind Workforce, not just the one someone remembered.
- Policy written with your managementRules fit how your business actually works, so staff aren't blocked from things they need.
- Rollout and staff questions handled by usYour team doesn't lose a week installing clients and answering “why can't I open this?”
- Monthly access reportYou can show your board or auditor who accessed what, and what was blocked.
Trusted by businesses since 2016
Source: Tremhost's Google Business Profile. Read all reviews on Google
These guys have the best support and customer service, they are always available for support, I highly recommend.
Tremhost provides excellent all-around service as well as speedy customer support. I strongly recommend them.
Great company for sites. I have been working with these guys for years. Keep up
CILT Zimbabwe
Professional institute, Harare
Membership, events and the WiLAT community on one site that Tremhost has run since 2021.
Read the storyBuildware
Decorative panels and cabinet hardware, Harare
A client since 2017: a product catalogue with WhatsApp quotation requests and SEO built around trade terms.
Read the storySpecialist Junior School
Private primary school, Ruwa
A school website parents use and pupils publish on, with an events calendar for term dates and fixtures.
Read the story
Pay monthly or yearly in US dollars
EcoCash, InnBucks, ZimSwitch, Omari, Visa, Mastercard, Bitcoin, Tron, Litecoin, bank transfer or cash at our Harare office. Annual billing gets you two months free. If a payment doesn't go through, message us on WhatsApp.
Questions people actually ask
Still unsure? Ask us on WhatsApp or book a call.
Do my staff have to install something?
Usually yes: a lightweight client on laptops and phones, which we roll out and support. For access to internal web applications, often nothing at all. They log in with the account they already use.
Will this slow their machines down or block things they need?
Not if the policy is written properly, which is the part we do. We start permissive, watch what actually gets blocked for two weeks, and tighten from there. Staff shouldn't notice it.
Is it cheaper than buying from Cloudflare directly?
Above 50 people, yes: Cloudflare's pay-as-you-go price is $7 a person a month and ours is $5, with the policy work included. Under 50 people, Cloudflare's free plan covers the licence. What it doesn't cover is somebody designing the access rules, rolling them out, answering staff questions and removing the person who resigned on Friday. That work is what you buy from us.
What happens when someone leaves?
You tell us, and their access is gone within one working day across every system behind Workforce.
Can we start small?
Ten people is the minimum, $50 a month. Most clients start with finance or admin, the two teams where a mistake costs the most, and widen once it's proven.
Does this protect the laptop itself?
No. Workforce protects access and data, not devices. If a laptop with no password is stolen from a car, Workforce limits what the thief can reach, but it doesn't encrypt the disk or remove malware. For that, use ESET endpoint security alongside it.
How do I pay?
Monthly or yearly in US dollars, by EcoCash, InnBucks, ZimSwitch, Omari, Visa, Mastercard, Bitcoin, Tron, Litecoin, bank transfer or cash at our Harare office. Annual billing gets two months free: $50 a person a year.
When another plan fits better
Workforce controls access. These cover the rest.
Armor Network
For several branches or field staff.
Everything in Workforce, plus branches joined over the internet links you already have. $9 a person a month.
Armor Mail
Stop fake invoices reaching the people who pay them.
Email security for Microsoft 365, Google Workspace or your own mail. $12 a month for ten mailboxes.
ESET endpoint security
Protect the laptops themselves.
Antivirus, encryption and ransomware protection per device, from $16.50 a year.
All Armor plans
Protect your websites too.
Guard, Shield, Workforce, Network and Mail, with prices against buying direct.
Close the door the leavers walked out of
Each person checked at every login, data that stays inside the business, and leavers locked out within one working day. $5 a person a month, from ten people.