Ciao Benvenuti
A small playground for Cloudflare Zero Trust, Workers AI, and Linux. Built by Remo. Hosted entirely on Cloudflare.
Three small services, one architecture. Everything runs through Cloudflare — no inbound ports.
“I want a site like that one — but is it even clean?” Paste any URL and Cloudflare sandbox-loads it: every script it pulls, every third-party domain it phones home to, and a malware/phishing verdict — before a single line is copied. Six security controls light up one by one as they run, and the scan itself is gated by Cloudflare Access, so the page is public but the action needs an identity.
Scan a siteSign in with a one-time PIN and watch Cloudflare inject your verified identity into the request — the app sees who you are, and you can't fake it. A live look at the headers Cloudflare adds in-flight.
See your identityEvery AI request rides through Cloudflare AI Gateway. Normal prompts get answers. Prompts containing Social Security numbers get DLP-blocked with a 424 response — live, inline, no code changes needed on the client.
Try it out yourselfCloudflare's built-in credit-card detector only catches neatly grouped 4-4-4-4 numbers, so oddly-spaced cards like 1 344-4343 12345 slip past. This tool lets you build and test your own DLP detectors in the browser — write an RE2 pattern, watch it match live with a Luhn checksum to weed out false positives, then copy a ready-to-paste Terraform block. Purpose: give teams a safe playground to author custom DLP rules before shipping them to production.
A topic-bounded chat assistant. Only answers questions about soccer, cycling, or Linux. Anything else gets a polite refusal. Powered by Llama 3.1 on Cloudflare Workers AI.
OpenBrowser-based VS Code (code-server) running in a Rocky 10 VM on GCP. Reachable only via Cloudflare Tunnel and gated by Cloudflare Access — a single allowlisted email.
Open (Access required)A named Cloudflare Tunnel fronts the VM. SSH is the only inbound port. Access policies, DNS, Workers, and the bot itself are all in one Terraform module — apply once, live everywhere.
See on GitLab