Get started

Security Center scans your Cloudflare account configuration and identifies potential security risks, misconfigurations, and vulnerabilities across your domains. This guide covers the initial setup.

Prerequisites

• A Cloudflare account.
• At least one zone (domain or subdomain) added to your Cloudflare account.

Turn Security Insights on or off

Security Insights scans are enabled by default. Security Insights will scan your Cloudflare environment and provide you with a list of detected insights. Refer to How it works to learn more about how Security Insights perform a scan.

The initial scan time depends on the number of IT assets in all the domains of your Cloudflare account. When the scan is complete, the status of the page will change from Scan in Progress to Last scan performed on: <DATE_TIME>.

You can decide to stop a scan, and restart a scan later.

To disable scans:

1. In the Cloudflare dashboard, go to the Security Insights page.

   Go to Security insights

2. Go to Disable Security Center scans, select Disable scans.

To restart a scan:

1. In the Cloudflare dashboard, go to the Security Insights page.

   Go to Security insights

2. Select Scan now.

Start a new scan

To manually start a scan:

1. In the Cloudflare dashboard, go to the Security insights page.

   Go to Security insights

2. Select Scan now.

Note

Only accounts with at least one Business or Enterprise zone, or accounts on the Teams Standard or Teams Enterprise plan, can start manual scans. All plans receive automatic scans.

Scan frequency

Cloudflare performs scans automatically for all accounts and zones by default. On-demand scans are available on all plans:

Plan	Scan Frequency	On-Demand
Free	Every 7 days	Yes
Pro and Business	Every 3 days	Yes
Enterprise	Daily	Yes

For more details, refer to How it works.