skills/cloudflare-security/references.md

# Cloudflare Security Reference Map

Use current primary documentation before giving product-specific details:

- [Cloudflare Security Center](https://developers.cloudflare.com/security-center/)
- [Workers best practices](https://developers.cloudflare.com/workers/best-practices/workers-best-practices/)
- [Workers bindings](https://developers.cloudflare.com/workers/runtime-apis/bindings/)
- [Workers secrets](https://developers.cloudflare.com/workers/configuration/secrets/)
- [D1 data security](https://developers.cloudflare.com/d1/reference/data-security/)
- [D1 prepared statements](https://developers.cloudflare.com/d1/worker-api/prepared-statements/)
- [R2 public buckets](https://developers.cloudflare.com/r2/buckets/public-buckets/)
- [R2 presigned URLs](https://developers.cloudflare.com/r2/api/s3/presigned-urls/)
- [DNSSEC](https://developers.cloudflare.com/dns/dnssec/)
- [Full (strict) TLS](https://developers.cloudflare.com/ssl/origin-configuration/ssl-modes/full-strict/)
- [Cloudflare Tunnel](https://developers.cloudflare.com/cloudflare-one/networks/connectors/cloudflare-tunnel/)
- [API Shield security](https://developers.cloudflare.com/api-shield/security/)
- [WAF rate limiting](https://developers.cloudflare.com/waf/rate-limiting-rules/)
- [Pages preview deployments](https://developers.cloudflare.com/pages/configuration/preview-deployments/)

Cloudflare plan availability and configuration details can change; verify the current documentation and the user's actual account entitlements before recommending a control.