Abstract: A system and method for improved application path selection for cloud-based applications from a client device. In one embodiment, a method includes collecting metrics of a remote user's use of one or more cloud-based applications, categorizing the one or more cloud-based applications based at least in part on the collected metrics, determining one or more secure network paths based at least in part on the categorizing of the one or more cloud-based applications, establishing the one or more secure network paths between the remote user and one or more network points-of-presence, and routing data traffic for the one or more cloud-based applications through the one or more established secure network paths.