Cloudflare Configuration Auditor & Optimizer
Audit & optimize Cloudflare setups—fix security gaps, boost performance, cut costs
What You Can Do
You can audit your entire Cloudflare configuration across all zones and domains to identify security vulnerabilities, performance bottlenecks, and cost inefficiencies. Claude generates detailed findings with specific remediation steps, automated Infrastructure as Code fixes in Terraform or CloudFormation, and before/after impact estimates to help you prioritize improvements.
Features
Detects misconfigured WAF rules, weak DDoS protection, rate limiting gaps, and compliance violations
Identifies cache inefficiencies, missing compression, outdated HTTP versions, and image optimization opportunities
Finds expensive rules, unused add-ons, bandwidth waste, and recommends cost-saving configurations
Outputs Terraform or CloudFormation code with step-by-step implementation instructions and rollback procedures
Audits and compares configurations across multiple domains, zones, and accounts in a single pass
Validates configurations against PCI DSS, HIPAA, SOC 2, and custom organizational policies
Quantifies security hardening, latency reduction, and cost savings with estimated metrics
Pre-built Terraform modules for common patterns (DDoS mitigation, zero-trust access, API protection)
Example Output
Security Finding:
- ❌ WAF Rule Gap: Captcha challenge not enforced for SQLi attempts
Risk Level: High | Severity: 8/10
Recommendation: Add rule ID 62051 (SQLi) → Challenge action
IaC Fix: rule_action = "challenge"
Impact: Blocks 99% of SQLi payloads | Est. False Positives: 0.02%
Performance Recommendation:
- ⚡ Cache Miss Rate: 34% (target: <15%)
Root Cause: Browser TTL too short (15 min) + missing gzip on JSON responses
Optimizations:
1. Increase browser_cache_ttl from 900s → 3600s
2. Enable auto-gzip for application/json
3. Add Cache-Tag purging for dynamic content
Expected Gain: 45% faster page load | CDN cost -$200/mo
Generated Terraform:
resource "cloudflare_cache_rules" "optimize" {
zone_id = var.zone_id
actions { cache_ttl = 3600 }
criteria { request_uri { path { matches = "^/api/.*" } } }
}
What's Included
- SKILL.md: Detailed audit workflows and decision trees for security, performance, and cost analysis
- Security Assessment Checklist: 50+ configuration items mapped to vulnerability categories
- Performance Optimization Templates: Cache, compression, HTTP/3, and image delivery best practices
- Terraform Module Library: Pre-built modules for common Cloudflare hardening patterns
- CloudFormation Templates: Alternative IaC format for AWS-integrated Cloudflare deployments
- Compliance Mapping Reference: PCI DSS, HIPAA, SOC 2 controls → Cloudflare configuration links
- Multi-Zone Comparison Worksheet: CSV template for tracking audit results across 50+ domains
- Remediation Priority Matrix: Severity/effort scoring to prioritize fixes
Who It's For
- DevOps & Infrastructure Engineers — Automate Cloudflare configuration management across teams and environments
- Cloud Security Teams — Conduct comprehensive security audits and enforce consistent protection policies
- Cost Optimization Specialists — Identify and eliminate wasted Cloudflare spending across multi-zone estates
- SREs & Platform Teams — Implement configuration drift detection and auto-remediation via IaC
- Compliance & Audit Teams — Verify Cloudflare configurations meet PCI DSS, HIPAA, and internal standards
Best For
- Pre-audit security assessments before compliance reviews or penetration tests
- Automated configuration drift detection and remediation across your Cloudflare estate
- Post-incident hardening and root-cause analysis of Cloudflare misconfigurations
- Multi-tenant or multi-zone Cloudflare optimization (50+ domains supported)
- Infrastructure-as-Code migration from manual Cloudflare console to automated Terraform/CloudFormation
You might also like
Transform breaking news briefs into compelling visual story frameworks that guide photographers toward impactful coverage. You'll receive multiple narrative angles, detailed shot lists organized by scene and purpose, and complete assignment briefs with sourcing guidance. Each output ensures comprehensive emotional and contextual storytelling from first frame to final edit.
by manwithstyle
You'll receive data-driven recommendations for chart types, color schemes, visual hierarchies, and narrative structures tailored to your audience and message. This skill guides you through selecting encodings that accurately represent data while maximizing audience comprehension and engagement—whether you're designing publication-ready graphics or interactive dashboards.
by manwithstyle
You can rapidly evaluate public datasets to uncover newsworthy patterns and develop story angles backed by reproducible analysis. Claude helps you assess data quality, identify anomalies, generate multiple narrative angles, and document your methodology so editors and fact-checkers can verify your findings. Turn raw data into compelling stories faster than traditional research.
by manwithstyle
Analyze Docker container logs instantly to identify root causes of failures, crashes, and resource bottlenecks. Get actionable recommendations for resource allocation, network configuration, and architectural improvements that eliminate production issues before they cascade.
by manwithstyle
Quickly architect scalable, reusable Terraform modules that follow HashiCorp best practices and organizational standards. Get automated reviews that catch common pitfalls—variable naming, provider configuration, resource dependencies—before they reach production. Standardize your infrastructure-as-code across teams with instant feedback on module quality, security posture, and cost optimization opportunities.
by manwithstyle
Manage your entire story development pipeline—from assignment briefs and source research guidance to fact-checking verification and copy editing—all within Claude's context. You'll generate assignment templates, receive real-time editorial feedback, identify verification gaps, and receive copyediting suggestions with tracked changes. The skill handles complex multi-source stories, deadline pressure, and maintains editorial standards across your publication.
by manwithstyle
You can transform complex datasets into compelling interactive narratives that maintain coherence while inviting exploration. This skill helps you architect data-driven stories where insights unfold naturally through guided discovery points, keeping readers engaged without limiting their agency. Readers navigate your narrative with purpose, uncovering patterns and relationships that would remain hidden in static presentations.
by manwithstyle
Rapidly triage infrastructure incidents across all GCP services using guided diagnostic workflows, root cause decision trees, and remediation procedures. You get structured steps to isolate failures in Compute Engine, Cloud Run, Cloud SQL, networking, and storage, complete with gcloud commands, health checks, and rollback procedures.
by manwithstyle