CheckVibeCodeCheckVibeCode
Checks/Infrastructure
InfrastructureLive3 checks

Cloudflare Security Scanner

Audit Cloudflare configuration, WAF settings, and CDN security features.

How this scan works

  • Detects Cloudflare via cf-ray / server: cloudflare
  • Checks whether the record is proxied (orange-cloud) — flags if DNS resolves to a non-Cloudflare origin IP, exposing the real host
  • Checks for a visible WAF/managed-challenge signature on common attack-shaped requests — passive header inspection, not active exploitation