Integration

Cloudflare Integration & One-Click Fixes

The most frustrating thing a security tool can do is show you a problem and leave you alone with it. Connect your Cloudflare account and the finding and the fix meet on one screen: a missing HSTS header or absent security headers are applied directly, with your approval.

• Nothing changes without your approval

  Every fix states what it will do first. It runs when you say apply, and the action is written to the audit log.

• It clears the way for scanning

  The IP allow rule Cloudflare needs so it doesn't block scan traffic is set up for you, so checks don't come back half-finished.

• It audits your token

  If the API token you provided has more permission than it needs, Specula says so. An integration is an attack surface too.