Read-Only by Design
ZoneGrade connects with read-only Cloudflare API tokens and verifies they really are read-only before importing a single zone. It can never change, break, or "fix" your client configurations — only observe them.
Cloud SaaS · Coming Soon · for Agencies & MSPs
Every Cloudflare Zone You Manage, Graded A–F
ZoneGrade connects to your Cloudflare accounts with read-only tokens and turns every zone into a report card — completeness, drift, and security at a glance. Scheduled sweeps catch configuration drift before your clients notice anything at all.
Launching at zonegrade.com · read-only by design · Peace Harbor runs its own fleet on it
Config Drift Is Invisible Until It Breaks Something
Agencies juggle dozens of client zones across multiple Cloudflare accounts. A teammate toggles a setting, a client clicks around their own dashboard, a migration leaves a record behind — and nobody notices until SSL expires, mail stops, or the WAF quietly stops covering an attack path. ZoneGrade watches the whole fleet so the surprises reach you first, as a grade change, not an outage.
Built for Fleets, Safe by Default
A–F Report Cards
Every zone gets a letter grade across three lenses: completeness (is everything configured that should be?), drift (did anything change since the last sweep?), and security (are the protections actually on?).
Scheduled Sweeps
Nightly and weekly sweeps re-grade the fleet automatically. Each sweep snapshots zone state, so a grade change always comes with the before-and-after that explains it.
Drift Alerts That Respect You
When a zone drifts, you get an email naming the zone and the change — with suppressions for expected changes, so planned work doesn't become alert noise.
Token Health Watch
A revoked or expired credential is itself a finding. ZoneGrade probes token health on every sweep, so silent auth failure can never masquerade as a clean report.
White-Label Client Reports
Hand clients a clean, branded report of their zone's health under your agency's name — proof the retainer is buying real vigilance.
How It Works
-
Connect Read-Only
Create a read-only token in each Cloudflare account and connect it. ZoneGrade verifies the token's scope in a two-step check, then imports the zones you choose.
-
Grade the Fleet
Every zone is audited against a grading policy and scored A–F on completeness, drift, and security — one dashboard for the whole fleet, worst grades first.
-
Watch & Report
Scheduled sweeps re-grade automatically, drift triggers an alert email with the exact change, and white-label reports keep clients in the loop.
Be First in Line
ZoneGrade is launching soon at zonegrade.com. Tell us about your fleet and we'll let you know the moment it opens.