Cloudflare Turns Coding Agents Into Security Auditors

The real innovation is the audit workflow, not simply asking an AI to scan code.

• –Fresh agents challenge each finding, reducing false positives and self-confirming errors.
• –Coverage ledgers make repeated audits cumulative instead of one-shot.
• –Structured JSON findings and validators make results easier to integrate into engineering workflows.
• –The skill is source-first and defensive; live systems require separate testing and strict sandboxing.
• –It is the foundation of Cloudflare’s larger fleet-wide harness, not the full production system itself.