# Cloudflare

---
title: Connecting Cloudflare to WatchDog Security
category: Integrations
integration_type: api_token
products_supported:
  - Posture Management
  - Inventory
  - Compliance Center
---
This guide explains how to connect **Cloudflare** to WatchDog Security using an **API token**.

Once connected, WatchDog will begin monitoring your Cloudflare environment for security posture risks, configuration issues, and asset inventory data across domains and DNS infrastructure.

---

## What WatchDog Monitors

:::tip[]
WatchDog operates in **read-only mode** and does **not modify configuration settings** within your Cloudflare environment.
:::

After the integration is connected, WatchDog may monitor the following configuration areas:

<Accordion title="Scopes" defaultOpen>

**Identity & Access Management**

- Cloudflare users
- Account groups and memberships
- API tokens and token permissions

**Domain Registration**

- Registered domains within the Cloudflare account
- Domain ownership metadata

**DNS Configuration**

- DNS records
- DNS configuration settings
- Public exposure of services

**Zone Management**

- Zone configuration
- Zone security settings
- Domain protection configuration

</Accordion>

The exact information collected depends on the permissions granted to the API token.

---

## Requirements

Before connecting the integration, ensure the following:

- You have **administrator access** to the Cloudflare account
- You're an **Account Owner** or **Security Admin** in the WatchDog Security portal

---

## Step 1 — Generate a Cloudflare API Token

You can generate an API token directly from the Cloudflare dashboard.

1. Log into the **Cloudflare dashboard**
2. Navigate to: My Profile → API Tokens
3. Click **Create Token**
4. Under **API token templates**, select:
5. Under **Zone Resources**, ensure the token includes **All Zones** for the account you want WatchDog to monitor.
6. Click **Continue to Summary**
7. Click **Create Token**
8. Copy the generated **API Token**

:::note[]
Cloudflare API tokens are shown **only once** after creation. Store the token securely before continuing.
:::

For additional guidance, see Cloudflare's [official documentation](https://developers.cloudflare.com/fundamentals/api/get-started/create-token/)

---

## Step 2 — Connect the Integration in WatchDog

1. Log into the **WatchDog Security Portal**
2. Navigate to **Management** → **Integrations**
3. Locate Cloudflare
4. Click Connect
5. Paste the generated Cloudflare API Token
6. Click Connect Integration

Once the connection is successful, WatchDog will begin synchronizing data from Cloudflare.

---

## Initial Sync

<Accordion title="After the integration is connected" defaultOpen>

- WatchDog will begin collecting data from Cloudflare
- The first synchronization typically completes within **5–10 minutes**

</Accordion>

<Accordion title="Data will appear within the following modules" defaultOpen>

- **Posture Management**
- **Inventory**
- **Compliance Center**

</Accordion>

---

## Troubleshooting

<AccordionGroup>

<Accordion title="Integration Fails to Connect" defaultOpen>

Verify the following:

- The API token was copied correctly
- The token was created with **Read all resources**
- The token includes access to **all zones**
- The token has not been revoked or expired

</Accordion>

<Accordion title="No Data Appears">

If data does not appear after connecting:

- Wait for the initial synchronization to complete
- Verify the token permissions
- Reconnect the integration if necessary

</Accordion>

</AccordionGroup>

---

## Related Documentation

- [Cloudflare API Tokens](https://developers.cloudflare.com/fundamentals/api/get-started/create-token/)