I will set up cloudflare waf rules and bot protection with a full test report
About this Gig
Bots, scrapers and login attacks waste server resources and can take your site down. I configure Cloudflare to filter that traffic before it reaches your server, and I show you the result in a test report.
What you get:
- Custom WAF rules written for your site, not a generic template
- Protection for login pages, XML-RPC and other sensitive URLs
- Bad bot and scraper blocking by user agent, ASN and behaviour
- Rate limiting for login, search and API endpoints (Standard, Premium)
- An AI crawler policy: you choose which AI bots to allow or block
- A check that Googlebot and Bingbot can still reach your pages
- A test report: every rule is tested with real requests, so you see what is blocked and what still passes
Premium also locks your origin server so it only accepts connections from Cloudflare. This stops attackers who bypass Cloudflare by hitting your server IP directly.
I run this setup every day on 29 production sites, including WordPress, WooCommerce and custom PHP.
Works on the Cloudflare Free plan. Packages are sized to fit its rule limits.
Is your site under attack right now? Please message me before ordering.
Server:
Virtual private server
•
DNS
•
Nginx
•
Web server
Operating system:
Linux
My Portfolio
FAQ
What do you need from me?
An invitation to your Cloudflare account as a member with permission to edit security settings. You do not need to share your password. Premium also needs SSH access to your server.
Will this block real visitors or customers?
Rules are tested against your login, checkout and API pages before delivery. The test report shows which requests pass.
Will this affect my SEO?
No. Verified search engine crawlers stay allowed, and I check this as part of the report.
Does it work on the Cloudflare Free plan?
Yes. All three packages are sized to fit within Free plan limits.
Do you cover more than one domain?
Each order covers one domain. Message me for a multi-site quote.
