Security Center

import Cloudflare from 'cloudflare';

const client = new Cloudflare({
  apiToken: process.env.CLOUDFLARE_API_TOKEN,
});

const securityCenter = client.securityCenter;

// Automatically fetches more pages as needed
for await (const insight of client.securityCenter.insights.list({
  account_id: '023e105f4ecef8ad9ca31a8372d0c353',
})) {
  console.log(insight.type, insight.severity);
}

const result = await client.securityCenter.insights.dismiss(
  'insight_id',
  {
    account_id: '023e105f4ecef8ad9ca31a8372d0c353',
    dismissed: true,
  }
);

const criticalInsights = [];
const highInsights = [];

for await (const insight of client.securityCenter.insights.list({
  account_id: '023e105f4ecef8ad9ca31a8372d0c353',
  dismissed: false,
})) {
  if (insight.severity === 'critical') {
    criticalInsights.push(insight);
  } else if (insight.severity === 'high') {
    highInsights.push(insight);
  }
}

console.log(`Critical insights: ${criticalInsights.length}`);
console.log(`High severity insights: ${highInsights.length}`);

for await (const insight of client.securityCenter.insights.list({
  account_id: '023e105f4ecef8ad9ca31a8372d0c353',
  product: ['firewall', 'access'],
  dismissed: false,
})) {
  console.log(`[${insight.product}] ${insight.type}: ${insight.description}`);
}

for await (const insight of client.securityCenter.insights.list({
  account_id: '023e105f4ecef8ad9ca31a8372d0c353',
  insight_class: ['compliance'],
  dismissed: false,
})) {
  console.log(`Compliance issue: ${insight.type}`);
  
  // Review and optionally dismiss
  if (insight.severity === 'low') {
    await client.securityCenter.insights.dismiss(
      insight.id,
      {
        account_id: '023e105f4ecef8ad9ca31a8372d0c353',
        dismissed: true,
      }
    );
  }
}

interface SecurityReport {
  total: number;
  bySeverity: Record<string, number>;
  byProduct: Record<string, number>;
  dismissed: number;
}

const report: SecurityReport = {
  total: 0,
  bySeverity: {},
  byProduct: {},
  dismissed: 0,
};

for await (const insight of client.securityCenter.insights.list({
  account_id: '023e105f4ecef8ad9ca31a8372d0c353',
})) {
  report.total++;
  
  if (insight.dismissed) {
    report.dismissed++;
  }
  
  report.bySeverity[insight.severity] = 
    (report.bySeverity[insight.severity] || 0) + 1;
  
  report.byProduct[insight.product] = 
    (report.byProduct[insight.product] || 0) + 1;
}

console.log('Security Report:', JSON.stringify(report, null, 2));