Integrations / Cloudflare
Junglewise for Cloudflare
Give Junglewise a read-only API token and it watches every zone in your Cloudflare account. It checks TLS modes, forced HTTPS, minimum TLS versions and DNSSEC, follows the account audit log for token, member and setting changes, explains what matters, and drafts the fix. Junglewise only reads: nothing in your account changes unless you change it.
Read-only API token. About 2 min to set up.
Connecting Cloudflare
How you connect it
- Step 1
Create an API token in Cloudflare with the read permissions Junglewise lists, and nothing more. Cloudflare has no sign-in for third parties, so a token is the way in.
- Step 2
Paste the token into Junglewise. It verifies the token and lists the zones it can see; switch any off from the Sources page.
- Step 3
Junglewise reads the zones straight away. Setup takes about two minutes.
What Junglewise reads
Watched around the clock
Zone settings
The TLS mode, whether HTTPS is forced, the minimum TLS version and the security level of each zone.
DNSSEC
Whether each zone signs its DNS.
Audit log
Tokens created, members added, API keys and TLS settings changed, and every delete in the account.
DNS and WAF
DNS records and WAF rulesets, which the agent reads when it investigates a zone.
What it changes
Nothing. It drafts the fix.
Set TLS to Full (strict)
The setting to change so traffic between Cloudflare and your origin is encrypted and verified.
Force HTTPS and raise the minimum TLS
The two settings that stop plain HTTP and old TLS versions.
Turn on DNSSEC
The steps at Cloudflare and at your registrar.
Junglewise only reads from Cloudflare, so every fix is yours to apply. It checks afterwards that the fix worked.
Cloudflare questions
- Why a token rather than a sign-in?
- Cloudflare does not offer sign-in for third-party apps. A custom token with read permissions only is the narrowest access it can grant.
- Can Junglewise change my Cloudflare account?
- No. The token only reads, and Junglewise drafts each fix for you to apply. It then checks that the fix worked.
- How do I disconnect?
- Delete the token under API Tokens in your Cloudflare profile. Junglewise loses access immediately.
See what's lurking out there. It takes a minute.
Start with a free scan of your domain. When you're ready for the inside view, try Team free for 14 days.
Start 14-day free trial