Edge-specific evidence
Requests, WAF outcomes, bot behavior, source IPs, Ray IDs, and affected paths stay attached to the incident.
Use case
Cloudflare incident response with guided evidence
Connect Cloudflare telemetry, investigation context, and response recommendations for incidents at the edge.
Capabilities
What Flarehawk gives this workflow
Each use case starts from Cloudflare telemetry and ends with evidence your team can use.
Cloudflare-aware response
Recommendations can map to practical Cloudflare controls such as blocking abusive traffic or tightening access.
Post-incident review
Retained telemetry supports follow-up reviews, recurrence checks, and compliance-oriented exports.
Context
How this workflow works in practice
Flarehawk keeps autonomous investigation concrete by connecting AI output to security evidence and reviewable action.
Start with Logpush evidence
Cloudflare Logpush gives Flarehawk the request and security event history needed to reconstruct edge incidents.
Move from detection to response
Vigil translates suspicious patterns into a clear response plan your team can review before applying changes.
Keep the response tied to proof
Every recommended action should remain traceable to the request evidence and behavior that triggered it.
Workflow
From setup to investigation
The same core loop supports analytics, autonomous investigation, and retention-driven evidence review.
1
Cloudflare telemetry streams into Flarehawk.
2
Detections identify suspicious edge, WAF, Zero Trust, or traffic behavior.
3
Vigil builds the incident narrative and response recommendation.
4
Your team reviews the affected paths, actors, and Cloudflare context.
5
Flarehawk monitors for recurrence after the response.
Related
Continue with autonomous SOC
These pages connect the search path from category evaluation to the concrete Flarehawk workflow.
FAQ
Use-case questions
Does Flarehawk require Cloudflare Logpush?
The current Cloudflare incident response workflow is built around Logpush telemetry and the evidence it provides.
Does Flarehawk apply Cloudflare changes automatically?
The default posture is review-first. Flarehawk recommends actions and keeps humans in control of approval.