Integrations / Cloudflare
Junglewise for Cloudflare
Give Junglewise an API token and it watches every zone in your Cloudflare account. It checks TLS modes, forced HTTPS, minimum TLS versions and DNSSEC, follows the account audit log for token, member and setting changes, explains what matters, and drafts the fix. Read access to start; with a token that can edit zone settings and DNS, it applies the fixes you approve, or that a rule you set in auto mode allows.
API token, read only or able to fix. About 2 min to set up.
Connecting Cloudflare
How you connect it
- Step 1
Create an API token in Cloudflare with the permissions Junglewise lists: read only, or with zone settings and DNS at Edit so it can fix issues. Cloudflare has no sign-in for third parties, so a token is the way in.
- Step 2
Paste the token into Junglewise. It verifies the token and lists the zones it can see; switch any off from the Sources page.
- Step 3
Junglewise reads the zones straight away. Setup takes about two minutes.
What Junglewise reads
Watched around the clock
Zone settings
The TLS mode, whether HTTPS is forced, the minimum TLS version and the security level of each zone.
DNSSEC
Whether each zone signs its DNS.
Audit log
Tokens created, members added, API keys and TLS settings changed, and every delete in the account.
DNS and WAF
DNS records and WAF rulesets, which the agent reads when it investigates a zone.
What it can change
Only with your approval
Set TLS to Full or Full (strict)
So traffic between Cloudflare and your origin is encrypted. Your origin's TLS is tested first where it can be, the change is checked straight after, and it is undone if your site stops answering.
Force HTTPS and raise the minimum TLS
Always Use HTTPS, Automatic HTTPS Rewrites and TLS 1.2 as the minimum, one at a time under one approval.
Turn on DNSSEC
Signs the zone and gives you the DS record to add at your registrar.
Tighten SPF and roll out DMARC
Ends a permissive SPF record with ~all, and moves DMARC from monitoring to quarantine after 14 days of reports.
Clean up DNS
Proxies an exposed origin record and deletes a dangling CNAME someone else could claim.
Each change waits for you unless you set an auto mode rule for that kind of fix, and every applied change is logged with what it changed.
Cloudflare questions
- Why a token rather than a sign-in?
- Cloudflare does not offer sign-in for third-party apps. A custom token with read permissions only is the narrowest access it can grant.
- Can Junglewise change my Cloudflare account?
- Only with a token that can edit zone settings and DNS, and only if you allow fixes. Every change waits for your approval unless you set an auto mode rule for it, is checked right after it runs and is undone if the check fails. With a read-only token, Junglewise drafts each fix for you to apply.
- How do I disconnect?
- Delete the token under API Tokens in your Cloudflare profile. Junglewise loses access immediately.
See what's lurking out there. It takes 30 seconds.
Start with a free scan of your domain. When you're ready for the inside view, try Team free for 14 days.
Start 14-day free trial