Architecture & security audits
Full zone and account analysis with a security rules review: what is deployed, what is misconfigured, and what the plan makes available that you are not using.
Estate intelligence Live · early access
Your Cloudflare estate, audited and explained.
A multi-tenant intelligence platform for Cloudflare estates — architecture and security audits, security rules review, WAF intelligence, performance and full analytics reports, with every finding tracked as an action item.
Architecture & security audits WAF intelligence Performance & full analytics Unified actions Multi-tenant
A multi-tenant Cloudflare intelligence platform: architecture audits, security audits, security rules review, WAF intelligence, performance and full analytics reports — with unified action tracking, DNS architecture maps and network flow analysis, fully hosted on Cloudflare. Live with early-access customers across the audit, reporting, actions, DNS-map and network-flow modules; multi-cloud inventory is the current roadmap item. Walkthroughs run against your own estate, read-only.
Machine-readable context: /ai-index.json
What it is
Enterprise Cloudflare estates accumulate zones, rules, exceptions and half-remembered decisions. The Research Platform turns that into something reviewable: architecture and security audits, security rules review, WAF intelligence, performance and full analytics reports — over your zones and accounts, with dashboards on top and artifacts underneath.
Findings don’t stop at being findings. Every report kind feeds one unified Actions queue — each item carrying severity, a working state and, where it applies, a deep link straight into the Cloudflare dashboard — so the estate’s to-do list is a tracked list, not a PDF nobody reopens.
It is built the way we build for customers — multi-tenant from the first table, every query scoped to its tenant, API tokens encrypted at rest, and the whole platform running on Cloudflare Workers, D1, KV and R2 rather than a server somewhere.
Built on
Workers + HonoD1KV sessionsR2 reportsReactECharts
Availability
Live with early-access customers across the audit, reporting, actions, DNS-map and network-flow modules; multi-cloud inventory is the current roadmap item. Walkthroughs run against your own estate, read-only.
How it works
Edge-native, tenant-scoped, evidence-first
The same architecture we recommend to customers, applied to our own product: no servers, no agents, and a report layer designed so every claim traces back to the module, window and field it came from.
What it does
WAF intelligence & firewall events
Attack campaigns, bot activity and firewall behavior over time — interpreted reports rather than raw log exports.
Performance & full analytics
Cache behavior, latency percentiles, error rates and traffic scale — the delivery half of the estate, reported alongside the security half.
One Actions queue
Action items from every report kind land in a single tracked queue — filterable by source, severity and state, with direct links into the Cloudflare dashboard where the fix happens.
Evidence-first, traceable reports
Reports are durable artifacts in R2, and every headline claim traces to its source module, window and field — anything unmeasured says “not measured” instead of guessing.
Multi-tenant, edge-native
Tenant-scoped queries, AES-256-GCM-encrypted tokens at rest, role-gated admin — running on Workers, D1, KV and R2 end to end.
Modules
Explicit about what is shipped versus planned — the roadmap is a roadmap, not a feature list.
Architecture audit Live
Security audit Live
Security rules review Live
WAF intelligence report Live
Performance report Live
Full analytics report Live
Enterprise value meta-report (board-ready) Live
DNS architecture map Live
Network flow analysis Live
Multi-cloud inventory (AWS / GCP / Azure) Roadmap
See it against your own estate
Walkthroughs run on real data — yours. Tell us what you’re running and we’ll show you what Cloudflare Research Platform finds.