Overview
Attention-first view of your edge posture
…
benchmark …
Needs attention first
| Priority | Finding | Exposure | WAF |
|---|
Weakest rules (lowest proven confidence)
| Rule | Class | Mode | Confidence |
|---|
⌕
| Priority | Finding | Class | Exposure | Severity | Sources | Status |
|---|
Operator queue — findings we couldn't decide (reachability not derivable / unclassified). Nothing here is auto-verdicted.
All findings — triage & chat
⌕
| Rule | WAF | Zone / App | Class · scope | Mode | Type | Confidence |
|---|
Coverage by vulnerability class
| Class | Rules | Blocking | Log-only | Off | Avg proven confidence |
|---|
Confidence is only shown for rules you've reviewed against the fixed benchmark . Reviewed rules re-run the same in-scope variants across every tenant for comparable numbers.
Sources & WAFs
Bind a scoped read-only CLOUDFLARE_API_TOKEN to the Worker to pull live rules. AWS WAF, Orca, Wiz and Jira connectors are implemented; wire their credentials to activate. No secrets are stored in the browser.