Cloudflare Security Audit

Prepared for your agency.

A read-only review of your Cloudflare account against the Fend security baseline — the same standard we apply to every site under our care.

The audit runs in your browser. It scans every zone in your Cloudflare account in about a minute and produces a slide deck per zone showing where each site stands. Nothing is changed; this is a check, not a fix.

Step 1 of 1

Connect your Cloudflare account

Paste a read-only API token below. The audit reads zones and settings; it cannot make changes.

Step-by-step

  1. In your Cloudflare dashboard, click your profile icon (top right) and choose My Profile.
  2. Open the API Tokens tab.
  3. Click Create Token, then Custom Token → Get started.
  4. Name it something like Fend audit – temporary.
  5. Add the permissions below (all Read).
  6. Under Zone Resources, choose Include — All zones from an account and pick the account you want audited.
  7. Continue to summary, create the token, copy it, paste it here.

Required permissions (all Read)

DNS & Zones

  • Zone
  • Zone Settings
  • DNS

App Security

  • Zone WAF Rules
  • Bot Management (only on plans that include it; optional)

Rules & Configuration

  • Zone Transform Rules

Cache & Performance

  • Cache Settings

After the audit

You can revoke the token any time from the same API Tokens page (three dots → Delete). Short-lived tokens are always safer than long-lived ones.

Your token never leaves your browser permanently. It passes through our proxy in memory only and is never logged, stored, or processed. View the proxy source code →

Something went wrong

Running

Verifying token…