For CIO / CTO / CISO / Chief Product & AI Officers
Executive decision brief | Consumer financial services

Three reasons Oportun and Cloudflare should talk.

Simplify application delivery, reduce client-side complexity, and extend consistent controls to customer and workforce workflows.

Cloudflare already fronts oportun.com. Six consecutive profitable quarters and the new Column partnership create a rare change window.

CSP / page inspection

Cloudflare protects the apex while WP Engine and a CloudFront distribution are also visible in headers, CSP, and page assets.

CSP / page inspection

The live CSP and HTML expose a broad client-side set including Medallia, VWO, Amplitude, Tealium, Adobe, Google, Meta, and others.

CSP / page inspection

Cloudinary is identified in both the CSP and loaded page assets while Cloudflare protects the site edge.

What to prove together

Prioritized by business impact and strength of public evidence.

01 Business outcome

Consolidate overlapping delivery layers

Cloudflare CDN + Cache Reserve + Tiered Cache + Argo Smart Routing What Cloudflare does

Extend the web edge to reduce redundant caching paths and simplify delivery while retaining the chosen origin platform where needed.

Bounded pilot

Proxy one low-risk hostname or route with the current origin preserved for rollback.

Measure

p95 latency, cache hit ratio, origin offload, blocked attacks, operating cost.

02 Business outcome

Reduce third-party script drag

Cloudflare Zaraz + Web Analytics + Page Shield What Cloudflare does

Move eligible tags off the main thread, govern script changes, and monitor client-side supply-chain risk.

Bounded pilot

Monitor one high-value journey and move one eligible script or event flow.

Measure

Script inventory, main-thread time, page speed, policy alerts, conversion or completion.

03 Business outcome

Consolidate image transformation and delivery

Cloudflare Images + Image Resizing What Cloudflare does

A measured image migration can remove a separate transformation and delivery path and keep optimization on the edge.

Bounded pilot

Move one image collection or video class while retaining the current path for rollback.

Measure

Bytes delivered, startup or load time, quality, transformations, cost per asset.

01
30-day DiscoverBaseline cache paths, CloudFront and Cloudinary traffic, client-side scripts, bot events, and identified SaaS access; identify service timelines
02
60-day ProvePilot direct Cloudflare caching for one CloudFront-served asset group and move a low-risk tag or image class to Zaraz or Cloudflare Images
03
Scale by evidenceRetire validated overlap, expand API and bot controls to discovered member flows, and extend identity-aware access and SaaS posture controls...
BaselineCurrent vendor run-rate + egress/compute + operating hours.
ValueRetired overlap + avoided load/incidents + hours returned.
DecisionAnnualized pilot delta - Cloudflare run-rate - one-time migration cost.
ProtectWAF, DDoS, bot, API and email security
AccelerateCDN, DNS, load balancing and smart routing
ConnectZero Trust, private access and secure networking
BuildWorkers, R2, AI and developer services