Where the security score comes from
Eight channels, each asking one question of the published record and reading a named set of fields to answer it. They multiply rather than add — the factor beside a channel is what is left after the pressure it found, and open a channel to see every field it read, as it is stored. How the model works
Security fields
67 55 of them feed a channel
Established
33 32 left unknown, 2 not applicable
Completeness
49% the share the model could weigh
Citations
44 across 14 documents
Every value carries what it rests on, and the model weighs the four levels differently. Weight, then how many citations on this record sit at that level:
B weighs 0.85 · 36 hereD weighs 0.35 · 8 here
The weights are methodology.json’s own; a claim seen in the artefact itself counts for more than the same claim reported second-hand. The date at the end of a row is the day that value was last read.
A channel does not price every field it reads. The ones it did are marked along their edge and carry what they added; everything else was read and cost nothing. Only a channel that composes field by field can mark a field at all — the rest price themselves by the parameters printed above their rows.
Still open on this record.
Audit scope. Cloudflare's only independent privacy examinations (2020 and 2026) covered the 1.1.1.1 public DNS resolver's declared retention practices, not the WARP VPN tunnel. The report itself sits behind a dashboard login rather than being published, so V11_audit_findings rests on Cloudflare's own blog summary rather than the document, and could not be confirmed first-hand.
Store declaration conflict. The WARP application privacy policy states it collects no unique device identifiers and cannot link Operational Data to an individual, while the same app's Google Play Data Safety form declares Device or other IDs, precise location, name, email address and web-browsing history as both collected and shared with third parties. Which document accurately describes the shipping app is unresolved, and C12_device_identifier is left unknown rather than settled from the store category alone.
the rest of what is open — 114 more words
No user-selectable exit country found. Unlike a conventional commercial VPN, no page located this session describes WARP as letting a user pick an exit country; the product documentation describes routing to the nearest Cloudflare point of presence for performance instead. U02_server_countries, U06_censorship_circumvention and U12b_streaming_works are left unknown rather than asserted, since no document was found stating the feature exists or is absent.
Enforcement history not researched this session. P01_seizure_event, P02_disclosure_history, P03_court_record, P07_warrant_canary and P12_case_history were not established: no dedicated search was made for seizures, court orders or canary discipline specific to the 1.1.1.1/WARP consumer product, as distinct from Cloudflare's business-customer transparency report, which is itself current and numeric but not broken out by product.
On the record as a whole.
Cloudflare WARP is the consumer VPN mode of the 1.1.1.1 app, built on Cloudflare's own global network and its 1.1.1.1 public DNS resolver. It is scored as commercial_vpn because WARP+ is sold as a standalone $4.99/month in-app subscription on top of a free WARP tier, not because the base product is marketed primarily as an anonymity tool. Cloudflare, Inc. is a US-incorporated public company (NYSE: NET) with no separate parent or owner group.
RetentionDoes a record exist that links traffic to a person, and who checked?13 fields read · 5 left unknown · 75.0 points of pressure×0.250
Composed rather than added: a prior of 0.55 on the silent branch, moved by what the paper says (0.0034) and by what the practice shows (0.0), at credence 0.0034 from the audit and 0.2082 from how the provider engaged, against a severity of 0.75 for what is actually retained.
How the report is published
Computed
×0.027 of a clean record completeness 49%
Where the drop comes from: Retention. It is the channel this record's risk is concentrated in — on its own it takes a clean record to ×0.250, and its bar above is filled to that.
Exposure is recorded as medium and the integrity status as unexamined.
Against the rest of the register, this record sits furthest above on Silence — ×1.000 where the register averages ×0.927 — and furthest below on Jurisdiction, ×0.380 against ×0.680.
Every row above is one field of the published record, and every one of them can be challenged: every row carries Report, or raise something about the record as a whole. A correction with a source behind it is made the same day, and if it moves the score it moves the rank.
