Case Study: One Mount Group achieves Zero Trust and all-cloud security with Cloudflare

One Mount Group partners with Cloudflare to embrace Zero Trust and go “all-cloud”

One Mount Group, the Vietnam-based parent of VinShop, VinID and OneHousing, needed to replace its legacy on‑prem VPN as remote work and BYOD grew. The appliance was slow, hard to manage, and encouraged overly broad access that increased lateral‑movement risk, so the company sought a cloud‑native, default‑deny security model to support an “all‑internet” cloud strategy.

One Mount deployed Cloudflare Zero Trust and Cloudflare Workers to secure hundreds of internal and SaaS applications, streamline authentication with multiple IdPs, enforce device‑aware least‑privilege via EPP integration, and extend Secure Web Gateway protections to users everywhere. The edge serverless Workers also enable scalable fraud protection and backend offload for high‑traffic promotions, cutting development and operating costs, reducing VPN reliance, and giving employees secure access and safer Internet browsing regardless of location.

One Mount Group

Phạm Anh Liêm

Director of Cybersecurity