Cover for your people
Armor Workforce
Armor Workforce is Cloudflare Zero Trust, managed for you. Instead of a VPN that opens your whole network to anyone with the password, every login is checked against who the person is and which device they’re using, and they see only the systems their role needs. It works the same in the office, at home on fibre, or on mobile data in the field – and when someone leaves, their access is gone across every system within one working day.
10 people minimum.
Your firewall is guarding the front door while staff carry data out the back
Worth being clear: this protects access and data, not devices. If a laptop has no password and gets stolen from a car, Workforce limits what the thief can reach but doesn’t encrypt the disk. Ask us about device policy separately.
Most breaches in small organisations don’t come through the website at all. They come through a person – a password reused, a file emailed home, a laptop nobody controls. Consider this:
01 One shared VPN password
Everyone knows it, including the two people who left last year. Nobody has changed it because nobody owns it.
02 Work on personal laptops
Client files, payroll spreadsheets and patient records sitting on a device you've never seen and can't wipe.
03 Leavers who never really left
Accounts stay live for months after someone walks out. It only takes one of them to be angry.
| What you get per person | |
|---|---|
| Everything below is included at one price. No setup fee, no per-incident invoice, no surprise line items. | |
| Staff log in to internal systems without a VPN | included |
| Web filtering on every device, wherever they work | included |
| Data-loss prevention on uploads, downloads and SaaS apps | included |
| Posture checks on Microsoft 365 and Google Workspace | included |
| Access rules per team, not one password for everyone | included |
| Policy written with your management, not handed to you as a template | included |
| Rollout to staff devices, with us answering their questions | included |
| Joiners and leavers handled by us within one working day | included |
| Monthly report of access and blocked traffic | included |
| Everything above, per person | $5 / month (10 minimum) |
| It costs less than buying it direct | ||
|---|---|---|
| Cloudflare charges $7 per user a month for the equivalent, self-configured. We charge less and do the configuration. | ||
| What you want | Direct price | Tremhost |
| 50 staff, monthly | $350 / mo | $250 / mo |
| 50 staff, on our launch rate | $350 / mo | $200 / mo |
| 100 staff, monthly | $700 / mo | $500 / mo |
| Policy design and rollout | your IT team | included |
| Joiner and leaver admin | your IT team | included |
| Save $1,800 a year | On 50 staff at the launch rate, against the direct per-user price — plus you stop paying your own people to administer it. | |
| Cloudflare list prices from cloudflare.com/plans. We are a Cloudflare partner and buy at wholesale across thousands of accounts — that is the whole reason we can charge less than you would pay going direct. | ||
Questions people actually ask
1. Do my staff have to install something?
Usually yes — a lightweight client on laptops and phones, which we roll out and support. For access to internal web applications, often nothing at all: they just log in with the account they already use.
2. Will this slow their machines down or block things they need?
Not if the policy is written properly, which is the part we do. We start permissive, watch what actually gets blocked for two weeks, and tighten from there. Staff shouldn't notice it.
3. Is it cheaper than what Cloudflare charges directly?
Yes. Cloudflare's published rate is $7 per user a month above 50 users. Ours is $5, or $4 on the launch rate, from ten people — and the policy work is included rather than being your problem.
4. We're under 50 people. Cloudflare's free tier covers that, doesn't it?
The licence, yes. What it doesn't cover is somebody designing the access rules, rolling it out to staff, answering their questions, and removing the account of the person who resigned on Friday. That's what you're buying.
5. What happens when someone leaves?
You tell us, and their access is gone within one working day — across every system behind Workforce, not just the one someone remembered.
6. Can we start small?
Ten people is the minimum. Most clients start with finance or admin, the two teams where a mistake costs the most, and widen once it's proven.
7. Does this replace our antivirus?
No. It controls what staff can reach and what data can leave. Keep the antivirus.
