Docs

Type at least 2 letters.

    What Guardnet Advisor is

    What Advisor measures, where its data comes from, its read-only model and how the product areas are organized.

    Updated View as Markdown

    Guardnet Advisor measures the security posture of your company's edge and shows, in points, which fixes to prioritize. It reads your Cloudflare account configuration, checks every zone against a set of rules and summarizes the result in the Maturity Score, a score from 0 to 100. Plans, managed operation and demos are on the Guardnet Advisor page (in Portuguese).

    Read-only

    Advisor never changes your Cloudflare account configuration. The connection uses read permissions only. Each risk is fixed in the Cloudflare dashboard, by you or by Guardnet, following the remediation Advisor provides.

    Inside Advisor, only governance states change:

    • a risk accepted with a justification, or restored;
    • the status of a spike incident (resolved, false positive, ignored);
    • spike detection rules and notification destinations.

    The four pillars

    Every rule belongs to a pillar. Advisor shows the overall score and the breakdown by pillar:

    Pillar What it checks
    Transporte/TLS (Transport/TLS) Encryption in transit, such as mandatory HTTPS and the minimum TLS version.
    WAF & Regras (WAF & Rules) The web application firewall rules that protect your zones.
    Edge & Bots Edge protection against automation and abuse.
    Identidade & Acesso (Identity & Access) Access controls for the Cloudflare account, such as MFA and SSO.

    The Advisor side menu is organized like this:

    • Visão Geral (Overview): the current score, the breakdown by pillar, connection health and the five highest-impact risks.
    • Riscos (Risks): the queue of open risks, filterable by severity, pillar, zone and connector.
    • Inventário (Inventory): published hosts and IPs, built from DNS.
    • Evolução (Evolution): the score over time and the risks already resolved.
    • Cloudflare: zones, monthly, yearly and live traffic, consolidated posture, changes made in the account and Spike Detection. It appears when there is an active Cloudflare connection.
    • Administração (Administration): integrations, members, SSO, login security, audit, notifications and knowledge base.

    Next steps

    To start measuring, a user with a tenant administrator role needs to connect the Cloudflare account.