All your talk tracks, cheat sheets, and live demos in one place.
Master reference of the entire Cloudflare product line — every product, plan tier, industry angle, common objection, and gotcha. The one-page-of-truth for any prospect conversation. The page itself is also a running tech demo — Pages + Access + Worker (cheatsheet-chatbot) + Workers AI (llama-4-scout-17b) + AI Gateway + Durable Objects (Presence). Weekly freshness-audit cron keeps it current against the live Cloudflare changelog. Requires Cloudflare Access sign-in (Google account).
OpenDeep study reference covering all three components — Regional Services (all 3 config methods, the CF-RAY verification trick, the single-country SLA/failover trade-off), Customer Metadata Boundary (the "no data" routing gotcha), Geo Key Manager v1 vs. v2, the full region taxonomy (FedRAMP, IRAP, ISO 27001, Green Energy, "exclusive of" regions), interactions with Tunnel/Access, a decision framework, and a 15-question self-test quiz.
Open CurriculumDeep study reference covering all five products — Cloudflare Tunnel, Cloudflare Mesh, Cloudflare WAN, Magic Transit, and Spectrum — the decision wizard for picking between them, a critical naming correction (two different products were both once called "WARP Connector"), the architectural argument against SD-WAN/SASE competitors, MPLS migration phases, verified failover/billing numbers, a real field-notes rollout (XC vs GRE design patterns from an actual Magic Transit deal), and a 17-question self-test quiz. Live interactive on-ramp demo cross-linked inside Module 1.
Open CurriculumDynamic isolate spin-up with egress control — the sandbox story. Live Demo is the runnable page with three scenarios (block all, allow-list, credential injection). Cheat Sheet is the 10–15 min talk track for a customer call. Reference is the engineer-facing architecture deep-dive for technical Q&A.
SQLite at the edge. Live Demo queries a pre-seeded database — 5 customer rows ready to go, plus a country filter. D1 Cheat Sheet is the focused D1 talk track. Storage & Compute Cheat Sheet is the combined walkthrough covering R2, KV, D1, DO, Queues, Hyperdrive.
Umbrella AppSec demo talk track — WAF, rate limiting, attack score, custom rules. The default demo for "how do you protect our app?"
OpenDeep study reference covering verified plan tiers (Custom Rules 5/20/100/1,000, Rate Limiting, Managed Rulesets), request body inspection (corrects the "WAF Advanced" myth — it's standard Enterprise capability, not a separate add-on), WAF attack score, Sensitive Data Detection vs. Leaked Credentials Detection, AI Security for Apps, the new Application Profiles and Attack Signature Detection betas, and a 15-question self-test quiz.
Open CurriculumDeep study reference, not a customer-facing talk track — fundamentals, all four plan tiers in full detail (BFM/SBFM/BM), detection engine internals (Adaptive Intelligence, JA3/JA4, Precursor, Verified Bots), rules & evaluation order, AI crawler handling (AI Labyrinth, Pay Per Crawl), a Block/Challenge/Allow/Skip decision framework with recommended score ranges, real field notes from an actual Bot Management SE deep-dive, a live 5-test detection demo with cf-ray receipts (Module 8), cross-links to the live demo script and bot-matrix visual, and an 18-question self-test quiz at the bottom.
Open CurriculumDeep study reference, not a demo talk track — Discovery & endpoint states, Schema Validation vs. Schema Learning (and the detection-vs-mitigation gap most people miss), Volumetric Abuse Detection, BOLA/Zombie/Authentication Posture risk detection, the open-beta Vulnerability Scanner, Sequence Analytics vs. Sequence Mitigation, mTLS & JWT internals, GraphQL malicious query protection (with live demo + real-WAF cross-links in Module 10), a detection-vs-mitigation decision framework, and a 15-question self-test quiz.
Open CurriculumDeep study reference — the full cf-cache-status decoder, real Cache-Control header precedence, Tiered Cache topology (Smart/Generic/Regional/Custom) and the cloud-region-hint gotcha, Cache Reserve eligibility and purge-cost traps, a correction on purge-method plan gating (all 5 methods are free-plan now), Workers + Cache API, a full decision framework, live test commands, and a 15-question self-test quiz.
Open CurriculumSame credential-harvesting attack, three defensive postures: (1) no protection — credentials stolen, (2) Email Security on — quarantined, (3) Email Security + Browser Isolation — keystrokes blocked in remote browser. Toggle, hit Run, watch outcomes change.
Run Phishing DemoDeep study reference consolidating three previously-overlapping documents (talk track, story flow, demo cheat sheet) into one source of truth — the 4-question discovery framework with track-selection logic, corrected on-ramp patterns (Cloudflare One Client / Cloudflare Mesh / Cloudflare WAN, replacing old WARP-era naming found dozens of times in the originals), the live 3-act Tunnel HA/failure/recovery demo with real commands, a condensed 21-section dashboard walkthrough, compliance & objection-handling content, and a 12-question self-test quiz. Reconciles three previously-inconsistent latency talking points into one honestly-framed example. Cross-links the 4 live interactive demos below.
Open CurriculumDeep study reference covering real Gateway architecture, the three product renames that date old decks (WARP client → Cloudflare One Client, Magic WAN → Cloudflare WAN, WARP Connector → Cloudflare Mesh), the HTTP/3 silent-inspection-gap gotcha, the real Browser Isolation tech (Network Vector Rendering, not pixel streaming), DLP/AV internals, corrected plan & compliance claims, a full live-demo walkthrough, troubleshooting, and a 17-question self-test quiz.
Open CurriculumThe flagship ZTNA page. 6 tabs in narrative order: (1) full SASE platform, (2) 6 connectivity on-ramps animated, (3) what VPN costs you, (4) what Cloudflare delivers, (5) side-by-side, (6) latency math. Includes 90-second talk tracks per tab.
Open All 6 TabsAnimated comparison answering "what's the difference between the CDN/DNS stuff and Zero Trust?" Public site pipeline (DDoS/WAF/Bot/cache) vs internal app pipeline (identity/posture/policy/tunnel). Same network, different jobs. Toggle, animate, or side-by-side.
Open ComparisonTwo views of the same platform, toggle between them. Employee mode: animated daily login — URL → IdP → posture check → app loads, under 5 seconds. Contractor mode: split-screen admin/contractor onboarding — email invite, magic link, OTP, scoped app access, under 60 seconds.
Open Access FlowA contractor with no Cloudflare client gets full SSH (Linux) or RDP (Windows) into internal servers — through a URL only. Two animated modes: simulated terminal and Windows desktop. Live audit log records every command and click.
Run SSH/RDP DemoDeep study reference covering Flow A vs. Flow B architecture, Custom Hostname lifecycle & validation, Fallback Origin vs. Custom Origin Server (corrects a common miscategorization — it's free on every plan, not Enterprise-only), apex domain handling, Orange-to-Orange (O2O), Enterprise-gated features (there's no real "SSL for SaaS Advanced" product), security differentiation via Custom Metadata, corrected plan/pricing, a migration playbook, a live demo cross-link, and a 14-question self-test quiz.
Open CurriculumFull multi-tenant SaaS platform demo (fictional "HostingCo") — how a platform vendor runs many customer sites on Cloudflare. For platform/hosting prospects who need the whole-fleet view.
Open Live DemoInteractive version of the "330+ cities, 500 Tbps" slide. ~100 real PoPs with city names, regional facts, backbone connections. Hover any dot for details, hover the stats to highlight related cities. Use this when you need to set the scale early in a call.
Open Global MapVisual world map showing how traffic flows from any region to a US datacenter — with Argo on vs. off. Hop count, latency, and packet loss difference live.
Open Path ComparisonDeep study reference covering the real architecture (monitors → pools → load balancer), all seven steering methods including the often-missed Hash method, the Simulate Zone gotcha that causes false "healthy" status, session affinity's cookie-vs-header reset behavior, the new Pool Sets feature, Layer 4 vs Layer 7 differences, corrected pricing, live API verification commands, and a 17-question self-test quiz.
Open CurriculumSame query via Hyperdrive (pooled + cached) vs direct connection. See the latency difference live. Race mode streams the gap in real time. Pair with the Storage & Compute Cheat Sheet for the full talk track.
Full cost-optimization deep dive (six root causes, current pricing, Auto Router, Spend Limits now GA, 17-question quiz) plus field notes on the live Fallback & Dynamic Routing demo — the interactive demo itself is linked from Module 9 inside the curriculum.
Open CurriculumDefensible math for the origin-cost-avoidance side of Bot Management — avoided bot requests × cost per request, with a 50/65/80% action-rate range table and honest caveats on where the ROI argument is weak. Use when building the business case or a customer asks "what's the ROI?"
Open Bot Management TCOPlug in seat count, current VPN cost, and bandwidth. See annual savings vs. traditional VPN + endpoint stack live. Designed for the finance-in-the-room, budget/procurement conversation.
Open VPN & Endpoint TCOLive counter showing data downloaded from R2 with running egress fee at $0.00 vs. what AWS S3 would have charged. Refreshes as you click around the gallery. Great for the "zero egress" claim.
Open Egress MeterList, upload, and read objects. S3-compatible, zero egress fees. Pair the live demo with the Storage & Compute Cheat Sheet for the full talk track.
Interactive demo: embed text with Workers AI, store in Vectorize, run similarity search side-by-side with keyword search. RAG mode grounds an LLM answer in the retrieved docs. Seed the corpus first if the index is empty.
Producer sends a message; consumer logs it. Watch with wrangler tail. Pair with the Storage & Compute Cheat Sheet for the full talk track.