For CIO / CTO / CISO / Chief Product & AI Officers
Executive decision brief | construction, civil engineering, and real estate development

Three reasons Obayashi USA and Cloudflare should talk.

Bring the North American web edge, authoritative DNS, and email threat protection into one control plane while preserving Microsoft 365 and supporting Obayashi's transformation goals.

Cloudflare can bring Azure CDN, NS1 DNS, application security, and Microsoft 365 threat protection into one operating plane while leaving Obayashi's applications and productivity... Obayashi's transformation plan calls for productivity gains and re-engineered processes across a $3B+ North American operation.

DNS / HTTP recon

The public www hostname is fronted by an Azure CDN CNAME; no cf-ray was observed during recon.

DNS / HTTP recon

Public NS records identify NS1 as the authoritative DNS provider.

DNS / HTTP recon

MX and SPF records identify Microsoft 365 as the mail platform; no separate email security gateway was visible in public MX records.

What to prove together

Prioritized by business impact and strength of public evidence.

01 Business outcome

Consolidate the North American web edge

CDN / Cache Rules + WAF + Bot Management + Load Balancing What Cloudflare does

Put performance, application security, traffic steering, and origin protection under one policy layer without changing the application first.

Bounded pilot

Proxy one low-risk hostname or route with the current origin preserved for rollback.

Measure

p95 latency, cache hit ratio, origin offload, blocked attacks, operating cost.

02 Business outcome

Unify authoritative DNS with the application edge

Cloudflare Authoritative DNS + DNS Firewall What Cloudflare does

Reduce control-plane handoffs and manage DNS, application security, and failover from the same global network.

Bounded pilot

Import one low-risk zone, validate records, DNSSEC, and rollback before delegation.

Measure

Query latency, availability, change time, failed lookups, retired DNS cost.

03 Business outcome

Add pre-inbox protection to Microsoft 365

Cloudflare Email Security What Cloudflare does

Augment Microsoft 365 with phishing, business email compromise, and supplier-impersonation detection while leaving the mailbox platform in place.

Bounded pilot

Run a 30-day parallel evaluation for one mail domain or user cohort.

Measure

Detection lift, false positives, analyst time, mailbox cost, user-reported misses.

01
30-day DiscoverInventory zones, Azure CDN traffic, origins, mailboxes, and identity flows; pilot one low-risk hostname behind Cloudflare WAF and CDN with...
02
60-day ProveMigrate authoritative DNS after parallel validation, add Email Security ahead of Microsoft 365, and launch one contractor-access application...
03
Scale by evidenceMove production www traffic from Azure CDN after performance and security acceptance, then expand image optimization and Zero Trust policies...
BaselineCurrent vendor run-rate + egress/compute + operating hours.
ValueRetired overlap + avoided load/incidents + hours returned.
DecisionAnnualized pilot delta - Cloudflare run-rate - one-time migration cost.
ProtectWAF, DDoS, bot, API and email security
AccelerateCDN, DNS, load balancing and smart routing
ConnectZero Trust, private access and secure networking
BuildWorkers, R2, AI and developer services