APPLICATION SECURITY DEMO / EXPOSED

What misconfiguration looks like.

This is an intentionally misconfigured demonstration zone. It complements the protected Application Security demo.

Its missing protections are intended to surface findings in Cloudflare Security Insights. Findings depend on scanning, product eligibility, and traffic history.

This fixture contains only fixed synthetic data. It has no accounts, credentials, database, or external origin.

Example API: /api/products · /api/users/1

Inspect the zone's Security Insights in the Cloudflare dashboard to see actual detected findings.