Cloudflare

Teddy connects to Cloudflare with a read-only service account and collects evidence about your edge and network security.

What Teddy collects

• TLS and certificate settings
• Firewall and WAF configuration
• Account members and access

Frameworks and controls

• ISO 27001:2022: A.8.20 Networks security, A.8.21 Security of network services, A.8.24 Use of cryptography
• SOC 2: CC6.6 and CC6.7 on boundary protection and data in transit
• NIS2: Article 21(2)(h) cryptography and encryption

How it works

1. You create a read-only API token and approve the permissions.
2. Teddy checks TLS, certificates, firewall rules and members on a schedule.
3. Weak TLS settings, expiring certificates or unexpected members become tasks.

Access

Read-only. Teddy never changes your configuration.

Does Teddy see our traffic?

No. Teddy reads configuration and account settings, not traffic or request data.