The agreement, in full.

Zonesteward private beta · Terms of Use · last updated 23 September 2026

1. Who this agreement is between

These Terms of Use (the "Terms") are an agreement between you and the operator of Zonesteward (the "Operator", "we", "us"). "You" means the person accepting these Terms and, where that person acts for an agency, company or other organisation, that organisation too. If you accept on behalf of an organisation you confirm that you have authority to bind it, and "you" includes every person you admit to your workspace.

You accept these Terms by applying for the beta, by signing in to a workspace, or by using the service in any way. If you don't agree, don't use it.

2. What Zonesteward is

Zonesteward (the "Service") is software for managing Cloudflare zones. It reads analytics and configuration from Cloudflare using API tokens you provide, answers questions and produces charts and reports using a language model under an API key you provide, monitors zones against rules you set, and — only after a person in your workspace approves each specific change — makes changes to your Cloudflare configuration through Cloudflare's API.

The Service is not affiliated with, endorsed by or supported by Cloudflare, Inc., Anthropic, PBC, OpenAI, or any other third party whose products it connects to. Their names are used only to describe what the Service works with.

3. Beta status

The Service is pre-release software offered to a limited number of accepted participants for evaluation and feedback. It is provided free of charge and as-is. It may contain errors, may be incomplete, and may change, be interrupted or be withdrawn at any time, in whole or in part, with or without notice — although we will try to give at least 30 days' notice before ending the beta or introducing fees. Nothing in these Terms or on this site obliges us to release a general-availability version, to maintain any feature, or to offer the Service on any particular terms afterwards.

Prices published on this site describe our current intentions for general availability. They are not an offer and may change. Nothing is charged during the beta. Any pricing promise made to beta participants (such as a discount on a first year) is honoured only if and when the Service becomes generally available and you choose to subscribe.

4. Eligibility and your accounts

You may use the Service only on Cloudflare zones and accounts that you own or are expressly authorised to manage, and only within the scope of that authority. Where those zones belong to your clients, you are responsible for having their permission to connect them, to read their traffic data, and to make changes on their behalf.

You sign in through a third-party identity provider (such as Google, Microsoft or GitHub) or an emailed link. You are responsible for the security of those accounts and of the email address you sign in with, for every action taken under your sign-in, and for the people you invite to your workspace and the roles you give them. Tell us promptly at [email protected] if you believe your access has been compromised.

5. Your credentials and third-party services

To work, the Service needs credentials you create and control: Cloudflare API tokens, and an API key for a model provider (Anthropic, OpenAI, or an OpenAI-compatible endpoint you operate). You are solely responsible for:

• creating those credentials, scoping them to the permissions you intend the Service to have, and revoking them when you stop using the Service or suspect misuse;
• complying with the terms of service, acceptable-use policies and rate limits of Cloudflare, your model provider and any other third-party service you connect;
• all charges those providers bill you, including model usage incurred by questions, investigations, reports and monitoring run in your workspace, by any member of it.

We store your credentials encrypted and use them only to operate the Service for your workspace. We are not a party to your agreements with those providers, we do not control their services, and we are not responsible for their availability, accuracy, pricing, security or changes to their APIs.

6. Changes to your Cloudflare configuration — and who is responsible

The Service is designed so that no change is made to Cloudflare without a person in your workspace approving that specific change, after being shown what it is, which zone it affects, and an estimate of its impact. Because of that design:

• You are solely responsible for every change approved in your workspace, by any member, and for its effect on your sites, your clients' sites, their visitors and their businesses.
• Impact classifications, blast-radius previews, drift checks, read-backs and similar safeguards are aids to your judgement. They are estimates based on historical data and the state Cloudflare reports at the time. They are not guarantees that a change is safe, correct or reversible.
• "Revert" re-applies a recorded earlier state through the same approval process. It is offered as a convenience and may not fully restore prior behaviour, particularly where Cloudflare's own state, caches or propagation have moved on.
• You must review each proposed change before approving it, and you must not approve changes you do not understand or are not authorised to make.

Where the Service acts in ways you have configured in advance — for example a monitoring rule with automatic mitigation you have enabled — those actions are treated as approved by you at the time you enabled them.

7. Model-generated output

Answers, summaries, charts, reports, investigations, proposed rules and proposed changes are produced by a language model working from your Cloudflare data. Such output can be incomplete, out of date, misinterpreted or simply wrong, and may look confident while being so. It is provided for your information and evaluation only. It is not security, networking, legal or professional advice, and you must not rely on it as the sole basis for a decision that matters. You are responsible for verifying output before acting on it.

The Service does not guarantee that it will identify every attack, misconfiguration, outage or anomaly, or that anything it identifies is real.

8. Monitoring, alerts and notifications

Monitoring rules, alerts, scheduled reports and notifications through email, Slack, PagerDuty, webhooks or other channels are provided on a best-effort basis. Detection depends on the data Cloudflare makes available and its timing; delivery depends on third-party services. We do not guarantee that any condition will be detected, that any alert will be sent or received, or that it will be timely. The Service is not a substitute for your own monitoring, incident response or backups.

9. Acceptable use

You agree not to, and not to allow anyone in your workspace to:

• use the Service on zones or accounts you are not authorised to manage;
• use it to attack, probe, disrupt or gain unauthorised access to any system, including by using firewall, rate-limiting or redirect features against third parties;
• attempt to access another customer's workspace or data, or to defeat the workspace boundary, authentication or approval controls;
• probe, scan, load-test or reverse-engineer the Service, or extract its prompts, models or source other than as the law expressly permits;
• use the Service in violation of any law, or of Cloudflare's, your model provider's or any connected service's terms;
• share your access with people outside your organisation, resell the Service, or represent it as your own;
• upload or process through the Service any data you do not have the right to process.

We may suspend or end access immediately for a breach of this section.

10. Your data and privacy

Our Privacy Policy describes what we collect and how we handle it, and forms part of these Terms. In summary: your Cloudflare data is read on request to answer questions and run features you have enabled; your credentials are stored encrypted; conversations, charts, rules and audit records are stored in your workspace's database so the Service works; and we use usage and failure signals — what was asked, what the model got wrong, where people got stuck — to improve the product.

You are responsible for the data you bring: for having the right to process your clients' traffic data through the Service and to send it to the model provider you have chosen, and for any notices or consents that requires. You may request an export of your workspace data at any time during the beta.

We may access your workspace to operate the Service, to investigate a problem you have reported or a suspected breach of these Terms, or where the law requires. We do not sell your data.

11. Feedback

The beta exists to gather feedback, and you agree to provide it honestly as described at zonesteward.com/beta. Any feedback, suggestion or idea you give us about the Service may be used by us for any purpose without obligation to you, and you grant us a perpetual, irrevocable, royalty-free licence to do so. We will not name you or your clients publicly without your permission.

12. Confidentiality of the beta

The beta is private. Access, invitations, unreleased features, and any non-public information about the Service that you learn through the beta are confidential. Don't share access outside your organisation, and don't publish screenshots, recordings, benchmarks or descriptions of unreleased features without our written permission. Talking about the fact that you're testing Zonesteward is fine.

13. Intellectual property

The Service, its software, design, prompts, documentation and trademarks are owned by the Operator or its licensors and are protected by law. For the duration of the beta we grant you a limited, non-exclusive, non-transferable, revocable licence to use the Service for managing zones you are authorised to manage, subject to these Terms. Nothing here transfers any ownership to you. Your Cloudflare data, your credentials and the content of your conversations remain yours.

14. Availability and support

The Service is provided with no service-level commitment. It may be unavailable, slow or degraded at times, including for maintenance and deployments, which during the beta may happen without notice. Support is provided on a best-effort basis by email and through the feedback channels described on this site.

15. Disclaimer of warranties

TO THE FULLEST EXTENT PERMITTED BY LAW, THE SERVICE, AND ALL OUTPUT, CONTENT AND FEATURES OF IT, ARE PROVIDED "AS IS" AND "AS AVAILABLE", WITH ALL FAULTS AND WITHOUT WARRANTY OF ANY KIND. WE EXPRESSLY DISCLAIM ALL WARRANTIES, WHETHER EXPRESS, IMPLIED OR STATUTORY, INCLUDING ANY WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, NON-INFRINGEMENT, ACCURACY, AND ANY WARRANTIES ARISING FROM COURSE OF DEALING OR USAGE OF TRADE. WE DO NOT WARRANT THAT THE SERVICE WILL BE UNINTERRUPTED, TIMELY, SECURE OR ERROR-FREE, THAT DEFECTS WILL BE CORRECTED, THAT OUTPUT WILL BE ACCURATE OR RELIABLE, OR THAT THE SERVICE WILL PREVENT, DETECT OR MITIGATE ANY ATTACK, OUTAGE OR LOSS. YOU USE THE SERVICE, AND ACT ON ITS OUTPUT, AT YOUR OWN RISK.

16. Limitation of liability

TO THE FULLEST EXTENT PERMITTED BY LAW, IN NO EVENT WILL THE OPERATOR, OR ANYONE WORKING ON THE SERVICE, BE LIABLE TO YOU OR TO ANY THIRD PARTY FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY OR PUNITIVE DAMAGES, OR FOR ANY LOSS OF PROFITS, REVENUE, BUSINESS, GOODWILL, DATA OR USE, OR FOR DOWNTIME OF, DAMAGE TO OR MISCONFIGURATION OF ANY WEBSITE, DOMAIN, DNS, CERTIFICATE, FIREWALL OR OTHER SYSTEM, WHETHER YOURS OR YOUR CLIENTS', HOWEVER CAUSED AND UNDER ANY THEORY OF LIABILITY, EVEN IF WE HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

TO THE FULLEST EXTENT PERMITTED BY LAW, OUR TOTAL AGGREGATE LIABILITY ARISING OUT OF OR RELATING TO THE SERVICE OR THESE TERMS WILL NOT EXCEED THE GREATER OF (A) THE AMOUNTS YOU HAVE PAID US FOR THE SERVICE IN THE TWELVE MONTHS BEFORE THE EVENT GIVING RISE TO THE CLAIM, WHICH DURING THE BETA IS NOTHING, AND (B) ONE HUNDRED US DOLLARS (US$100).

These limitations are a fundamental basis of our providing the Service to you free of charge. Some jurisdictions do not allow certain exclusions or limitations; to that extent they apply to you only as far as the law permits, and nothing in these Terms excludes liability that cannot lawfully be excluded, including for death or personal injury caused by negligence, or for fraud.

17. Indemnification

You agree to defend, indemnify and hold harmless the Operator and anyone working on the Service from and against any claim, demand, loss, liability, damage, cost or expense (including reasonable legal fees) arising out of or relating to: (a) your use of the Service; (b) any change approved or configured in your workspace and its effects on any site, system or person; (c) your Cloudflare accounts, zones, credentials and the data you connect, including claims by your clients or their visitors; (d) your breach of these Terms or of any third party's terms; or (e) your violation of any law or of anyone's rights.

18. Term and termination

These Terms apply from the moment you accept them and continue until your access ends. You may stop using the Service and ask us to delete your workspace at any time by emailing [email protected]. We may suspend or end your access at any time: with notice for convenience, including if the beta ends or your workspace has gone quiet, and immediately for breach of these Terms or to protect the Service or other customers.

When access ends, your workspace becomes read-only for 30 days so you can export your data, after which it and its database are deleted. You should revoke the Cloudflare tokens you gave the Service on Cloudflare's side. Sections 5, 6, 7, 10, 11, 13, 15, 16, 17, 19 and 20 survive termination.

19. Governing law and disputes

These Terms are governed by the laws of the United States and of the state in which the Operator has its principal place of business, without regard to conflict-of-laws rules. Before starting any formal proceeding, you agree to contact us at [email protected] and try in good faith to resolve the matter informally for at least 30 days. Any dispute that cannot be resolved that way will be brought exclusively in the state or federal courts located where the Operator has its principal place of business, and you consent to their jurisdiction. Each party waives any right to a jury trial to the extent permitted by law. Any claim must be brought within one year of the event giving rise to it, or it is permanently barred.

20. General

• Changes to these Terms. We may update these Terms as the Service and the beta evolve. We'll post the new version here with a new date and, for material changes, email the owner of each workspace. Continued use after the effective date is acceptance; if you don't agree, stop using the Service and ask us to delete your workspace.
• Entire agreement. These Terms and the Privacy Policy are the whole agreement between us about the Service and replace any earlier discussions or descriptions, including marketing copy on this site, which is descriptive and not a warranty.
• Severability and waiver. If any part of these Terms is unenforceable, the rest remains in effect. Our not enforcing a term is not a waiver of it.
• Assignment. You may not assign these Terms without our consent. We may assign them to a successor or to an entity formed to operate the Service.
• Force majeure. We are not liable for any failure caused by events beyond our reasonable control, including failures of Cloudflare, model providers, hosting, networks or email delivery.
• Independent parties. Nothing here creates a partnership, agency or employment relationship.
• Notices. We may notify you by email to any workspace member's sign-in address or in the Service. Notices to us go to [email protected].

Contact

Questions about these Terms: [email protected]. Security matters: [email protected].