For CIO / CTO / CISO / Chief Product & AI Officers
Executive decision brief | AI-first governance, risk, and compliance software

Three reasons MetricStream and Cloudflare should talk.

Point of view

Unify authoritative DNS with application security, email protection, client-side risk controls, and governed AI delivery.

Why Cloudflare?
Why now?

Cloudflare already provides MetricStream's authoritative DNS. MetricStream's May 2026 release added assistants, semantic search, document reasoning, and AI-assisted workflows for 1M+ professionals.

DNS / HTTP recon

Cloudflare provides authoritative DNS, while the apex is delivered by Pantheon and Varnish without a cf-ray header.

Public technical evidence

MetricStream's May 2026 product update describes embedded assistants, semantic search, survey autofill, and document reasoning...

DNS / HTTP recon

Microsoft 365 is the inbound mail platform; SPF also authorizes HubSpot, Salesforce, and OpenAir senders.

Three highest-impact use cases

What to prove together

Prioritized by business impact and strength of public evidence.

01 Business outcome

Unify DNS and public application security

Cloudflare CDN + WAF + Bot Management + DDoS Protection What Cloudflare does

This is a low-friction next step: preserve Pantheon as origin while adding one security and delivery control plane at the edge.

Bounded pilot

Proxy one low-risk hostname or route with the current origin preserved for rollback.

Measure

p95 latency, cache hit ratio, origin offload, blocked attacks, operating cost.

02 Business outcome

Govern the AI-first GRC model layer

AI Gateway + Workers AI + Workers What Cloudflare does

AI Gateway can centralize model observability, rate controls, caching, and provider policy while Workers AI offers an additional inference path for suitable workloads.

Bounded pilot

Route one non-sensitive model workflow through the governance layer for 30 days.

Measure

Model requests, token cost, cache rate, policy violations, p95 latency.

03 Business outcome

Unify inbound email defense and sender governance

Cloudflare Email Security + DMARC Management What Cloudflare does

A single email-security and authentication program can protect Microsoft 365 while reducing spoofing and configuration risk across several authorized SaaS senders.

Bounded pilot

Run a 30-day parallel evaluation for one mail domain or user cohort.

Measure

Detection lift, false positives, analyst time, mailbox cost, user-reported misses.

Discover
Prove
Scale
01
30-day DiscoverConfirm zones and products currently in use; Measure Pantheon traffic, cacheability, bots, and origin load
02
60-day ProvePilot Cloudflare application security on a low-risk hostname; Run an email-security evaluation against Microsoft 365
03
Scale by evidenceRoute one non-sensitive model workflow through AI Gateway; Benchmark one document pipeline on Workers, Queues, and R2
Compact value model
BaselineCurrent vendor run-rate + egress/compute + operating hours.
ValueRetired overlap + avoided load/incidents + hours returned.
DecisionAnnualized pilot delta - Cloudflare run-rate - one-time migration cost.
Cloudflare
overview
ProtectWAF, DDoS, bot, API and email security
AccelerateCDN, DNS, load balancing and smart routing
ConnectZero Trust, private access and secure networking
BuildWorkers, R2, AI and developer services