Knsept
00 For developers on Cloudflare Workers

Brakes for your Cloudflare bill.

Workers, Durable Objects, Queues and D1 have no hard spending cap. One loop can run all night. Scan your account for the patterns behind runaway bills, for free, on your own machine.

npx knsept scan
fig. 01 · a sample account, hover or tap a node

Sample data, not a real account.

01 Runaway bills developers reported in 2026
  1. Queue retry loop~$36,000
  2. Durable Object alarm loop$34,895
  3. Durable Object alarm loop$10,811
  4. D1 write loop$4,868
  5. The Workers paid plan, per month$5

Bars are drawn to scale.

02 What the scan finds

The patterns behind the invoices.

Every finding shows the numbers behind it, what it would cost, and how to fix it.

Run the free scan
Scans today

Queue retry storms

Consumers retrying the same messages over and over, or set to retry many times with no dead letter queue.

The fix Keep max_retries low and add a dead_letter_queue, so failures stop and stay visible.

              
                  RUNAWAY
                   
                  Messages are being retried over and over
                
                  
                  
                  email-queue
                
                  
                  
                  300,000 retries for 100,000 messages (3.00 per message)
                
            
sample data
$ npx knsept scan --demo
03 How Guard works

Watch, alert, brake.

Watching, alerts and queue brakes all come with Guard Solo.

Guard Solo

Watch

Guard reads your usage from outside your account every few minutes, with read-only access. It can see usage. It can't edit anything.

Alert

Set a budget per Worker, Durable Object, queue and database, and hear about it when one starts to run away.

Brake

Watch-only by default. Opt in and a Worker in your account pauses a runaway queue. Other resources get alerts until a brake is proven.

04 Trust

Built to need as little as possible.

Read the security page

Read-only scanning

The CLI sends your token to Cloudflare's API and nowhere else. No signup and no telemetry.

Brakes in your account

Knsept will never hold a token that can change your apps. When brakes ship, the part that acts runs in your account, in code you can read.

Your backups, your bucket

Planned copies of your data go to storage you own. Knsept keeps only run records.

Your machineCloudflare APIKnseptread-only token
With npx knsept scan, your token goes to Cloudflare and nowhere else. The web scanner passes it through once and throws it away.
05 Pricing

Less than one bad night.

Full pricing
Available now

Risk Scanner

$0

Run it whenever you like. No signup.

Available now

Guard Solo

$19 per account / month

Daily budgets, email alerts and opt-in queue brakes for one account.

In development

Guard Team

$49 up to 10 accounts / month

Everything in Solo, plus off-account copies and restore tests.

06 Questions

Questions developers ask.

Won't Cloudflare just refund it?

Sometimes. But you find out after the fact, and you may spend days waiting on a ticket. The point is not getting there.

Why not write my own kill switch?

You can. The hard part is the watcher: a kill switch inside your account shares that account's problems, and per-resource budgets take real work to keep accurate.

What if Cloudflare ships spending caps?

Good. Whole-account caps would still stop everything at once. Guard's brakes act on one resource at a time, starting with queues, so the rest of your app stays up.

Can the scanner change my apps?

No. It uses a read-only token and only reads usage and settings. It never runs a D1 query or opens your KV values or R2 files.

Is Knsept part of Cloudflare?

No. Knsept LLC is an independent company that builds tools for developers on Cloudflare.

07 Stay close

Hear when brakes cover more than queues.