Cloudflare Configuration Auditor & Optimizer
Audit & optimize Cloudflare setups—fix security gaps, boost performance, cut costs
What You Can Do
You can audit your entire Cloudflare configuration across all zones and domains to identify security vulnerabilities, performance bottlenecks, and cost inefficiencies. Claude generates detailed findings with specific remediation steps, automated Infrastructure as Code fixes in Terraform or CloudFormation, and before/after impact estimates to help you prioritize improvements.
Features
Detects misconfigured WAF rules, weak DDoS protection, rate limiting gaps, and compliance violations
Identifies cache inefficiencies, missing compression, outdated HTTP versions, and image optimization opportunities
Finds expensive rules, unused add-ons, bandwidth waste, and recommends cost-saving configurations
Outputs Terraform or CloudFormation code with step-by-step implementation instructions and rollback procedures
Audits and compares configurations across multiple domains, zones, and accounts in a single pass
Validates configurations against PCI DSS, HIPAA, SOC 2, and custom organizational policies
Quantifies security hardening, latency reduction, and cost savings with estimated metrics
Pre-built Terraform modules for common patterns (DDoS mitigation, zero-trust access, API protection)
Example Output
Security Finding:
- ❌ WAF Rule Gap: Captcha challenge not enforced for SQLi attempts
Risk Level: High | Severity: 8/10
Recommendation: Add rule ID 62051 (SQLi) → Challenge action
IaC Fix: rule_action = "challenge"
Impact: Blocks 99% of SQLi payloads | Est. False Positives: 0.02%
Performance Recommendation:
- ⚡ Cache Miss Rate: 34% (target: <15%)
Root Cause: Browser TTL too short (15 min) + missing gzip on JSON responses
Optimizations:
1. Increase browser_cache_ttl from 900s → 3600s
2. Enable auto-gzip for application/json
3. Add Cache-Tag purging for dynamic content
Expected Gain: 45% faster page load | CDN cost -$200/mo
Generated Terraform:
resource "cloudflare_cache_rules" "optimize" {
zone_id = var.zone_id
actions { cache_ttl = 3600 }
criteria { request_uri { path { matches = "^/api/.*" } } }
}
What's Included
- SKILL.md: Detailed audit workflows and decision trees for security, performance, and cost analysis
- Security Assessment Checklist: 50+ configuration items mapped to vulnerability categories
- Performance Optimization Templates: Cache, compression, HTTP/3, and image delivery best practices
- Terraform Module Library: Pre-built modules for common Cloudflare hardening patterns
- CloudFormation Templates: Alternative IaC format for AWS-integrated Cloudflare deployments
- Compliance Mapping Reference: PCI DSS, HIPAA, SOC 2 controls → Cloudflare configuration links
- Multi-Zone Comparison Worksheet: CSV template for tracking audit results across 50+ domains
- Remediation Priority Matrix: Severity/effort scoring to prioritize fixes
Who It's For
- DevOps & Infrastructure Engineers — Automate Cloudflare configuration management across teams and environments
- Cloud Security Teams — Conduct comprehensive security audits and enforce consistent protection policies
- Cost Optimization Specialists — Identify and eliminate wasted Cloudflare spending across multi-zone estates
- SREs & Platform Teams — Implement configuration drift detection and auto-remediation via IaC
- Compliance & Audit Teams — Verify Cloudflare configurations meet PCI DSS, HIPAA, and internal standards
Best For
- Pre-audit security assessments before compliance reviews or penetration tests
- Automated configuration drift detection and remediation across your Cloudflare estate
- Post-incident hardening and root-cause analysis of Cloudflare misconfigurations
- Multi-tenant or multi-zone Cloudflare optimization (50+ domains supported)
- Infrastructure-as-Code migration from manual Cloudflare console to automated Terraform/CloudFormation
You might also like
You can rapidly accelerate every stage of photojournalism—from initial story research and competitive analysis to comprehensive shot lists, optimized captions, and polished editorial submissions. The workflow guides you through breaking news scenarios, helping you research context, plan coverage angles, write SEO-optimized captions, and format submissions for maximum editorial impact. Save hours on administrative work and focus on capturing the story.
by manwithstyle
Analyze Docker container logs instantly to identify root causes of failures, crashes, and resource bottlenecks. Get actionable recommendations for resource allocation, network configuration, and architectural improvements that eliminate production issues before they cascade.
by manwithstyle
Quickly architect scalable, reusable Terraform modules that follow HashiCorp best practices and organizational standards. Get automated reviews that catch common pitfalls—variable naming, provider configuration, resource dependencies—before they reach production. Standardize your infrastructure-as-code across teams with instant feedback on module quality, security posture, and cost optimization opportunities.
by manwithstyle
Manage your entire story development pipeline—from assignment briefs and source research guidance to fact-checking verification and copy editing—all within Claude's context. You'll generate assignment templates, receive real-time editorial feedback, identify verification gaps, and receive copyediting suggestions with tracked changes. The skill handles complex multi-source stories, deadline pressure, and maintains editorial standards across your publication.
by manwithstyle
This skill transforms raw news stories, breaking news updates, or news briefs into professionally structured podcast scripts ready for immediate recording. It verifies sources, organizes content into logical segments with host delivery notes, and ensures smooth pacing and listener engagement. You get a complete, production-ready script with no rewriting needed—just download, review, and record.
by manwithstyle
You'll design comprehensive Datadog monitoring architectures centered on service-level objectives (SLOs) and error budgets, eliminating alert fatigue while improving incident detection. Claude helps you structure alerts by severity, define intelligent suppression rules, and create role-based dashboards that enable faster triage and response. You'll get actionable monitoring strategies tailored to your specific services, dependencies, and on-call workflows.
by manwithstyle
Create production-ready Grafana dashboards that visualize your metrics effectively and perform efficiently. Claude helps you write optimized PromQL and other database queries, configure smart alerts with custom thresholds, and design intuitive layouts that surface the metrics that matter most. You get dashboard JSON, query recommendations, and alert configurations ready to deploy.
by manwithstyle
Transform breaking news briefs into compelling visual story frameworks that guide photographers toward impactful coverage. You'll receive multiple narrative angles, detailed shot lists organized by scene and purpose, and complete assignment briefs with sourcing guidance. Each output ensures comprehensive emotional and contextual storytelling from first frame to final edit.
by manwithstyle