The same platform primitives behind this toy game run production traffic.
The game, this page, and the protected leaderboard are one Worker — a few hundred lines of
JavaScript with no servers, containers, or regions to choose. It was deployed from a terminal with
wrangler deploy, the same command an enterprise team wires into CI/CD.
/leaderboard — the app
only ever sees a verified identity header, never a password.Request → Cloudflare edge (WAF + rate limit + bot rules) → Access policy on
/leaderboard → Worker → Workers KV. Every hop is configuration or code,
not hardware.