Cloudflare

Monitoring & Network

Check Cloudflare zones for HTTPS and TLS settings.

what it checks

Cloudflare checks in Varman

Monitor Cloudflare zones for TLS encryption and HTTPS enforcement. Varman runs 2 checks against Cloudflare on a schedule and records each result as evidence.

Zone SSL mode enforces end-to-end encryption

high severity

Each Cloudflare zone should use Full or Full (strict) encryption, not Flexible or Off.

Zone redirects all traffic to HTTPS

medium severity

Each Cloudflare zone should have "Always Use HTTPS" enabled so plaintext requests are redirected.

how to connect

Connecting Cloudflare

An admin adds the details below in Varman under Integrations. Secret values are encrypted before they are stored.

API Token: Create a token at My Profile > API Tokens with Zone:Read and Zone Settings:Read for the zones you want audited.

More Monitoring & Network integrations

Datadog PagerDuty Tailscale