TrustSecurityBaseline
Cloudflare Security Baseline
Track Cloudflare-oriented controls for the current deployment direction.
Purpose
Track Cloudflare-oriented controls for the current deployment direction.
Baseline
| Control | Stage | Notes |
|---|---|---|
| Cloudflare Access | Founder Preview | Protect internal docs, API docs, admin, and preview surfaces when needed. |
| Workers secrets | Founder Preview | Store runtime secrets outside git. |
| Turnstile | Early Beta | Add to risky forms, waitlists, or abuse-prone endpoints. |
| WAF/rate limiting | Early Beta | Protect public API and docs surfaces. |
| R2 authorization | Commercial Readiness | Required before user uploads. |
| Logs and alerts | Commercial Readiness | Track errors and abuse signals. |
Reference
- Cloudflare: Turnstile documentation