A powerful command-line tool and interactive TUI for decoding and extracting Cloudflare DLP (Data Loss Prevention) forensic copies from compressed log files.
Cloudflare DLP Forensic Copy Decoder is a command-line tool and interactive terminal UI (TUI) for decoding Cloudflare Data Loss Prevention (DLP) forensic copies from compressed log files. Built in Go for speed and portability, it automatically extracts, pretty-prints, and decodes base64-encoded and gzipped JSON payloads from .log.gz files, handling multiple content types. The tool offers both an interactive TUI for visual inspection and export, as well as a non-interactive CLI mode ideal for automation and scripting. It is cross-platform (Linux, macOS, Windows), dependency-free, well-tested, and easy to install via Homebrew, Winget, or direct binary download. Cloudflare DLP Forensic Copy Decoder is open source, backward compatible with the original shell script, and designed to simplify forensic and compliance analysis of Cloudflare DLP data.
Technical details
Publisher
SALT Cyber Security
Author
Thomas van den Nieuwenhoff
Version
2.3.0
Release date
2026-05-19
License
As-is
Installer type
portable
Architecture
x64, arm64
Package ID
Devolvio-B-V.cf-dlp-decode
Install Cloudflare DLP Forensic Copy Decoder from the command line
Cloudflare DLP Forensic Copy Decoder version history
2.2.0Apr 22, 2026
Support multi-payload forensic copy files, and support plain JSON forensic copy files as input.
2.1.0
Add file browser, flexible flag parsing, Cloudflare-themed UI, and expanded content type support
Frequently asked questions
Is Cloudflare DLP Forensic Copy Decoder free?
Cloudflare DLP Forensic Copy Decoder is as-is software from SALT Cyber Security. Check the publisher's license terms for pricing and usage rights.
What is the latest version of Cloudflare DLP Forensic Copy Decoder?
The latest version is 2.3.0, released on May 19, 2026.
Is it safe to download Cloudflare DLP Forensic Copy Decoder?
The download button links to the official installer published on github.com, the same file Windows Package Manager installs. You can verify the downloaded file by comparing its SHA-256 checksum with 70908d619035a3e5b24cf5d33b9d26778a32d51b0ec480fcbfc59c5ece325d82.
Which Windows versions does Cloudflare DLP Forensic Copy Decoder support?
Cloudflare DLP Forensic Copy Decoder runs on Windows and is available for 64-bit (x64), ARM64 systems.
How do I uninstall Cloudflare DLP Forensic Copy Decoder?
Open Settings › Apps › Installed apps, find Cloudflare DLP Forensic Copy Decoder and select Uninstall. From the command line, run winget uninstall --id=Devolvio-B-V.cf-dlp-decode -e.
Is there a portable version of Cloudflare DLP Forensic Copy Decoder?
Yes. Cloudflare DLP Forensic Copy Decoder is available as a portable program (cf-dlp-decode-windows-amd64.exe, 64-bit (x64)) that runs without installation. Copy it to any folder or USB drive and run it from there.
Alternatives to Cloudflare DLP Forensic Copy Decoder
Other Command Line Tools programs for Windows from different developers.
