Cloudflare Docs
Learning Paths
Edit this page on GitHub
Set theme to dark (⇧+D)

Enable WAF

  1 min read

Once you proxy your DNS records, you should enable rulesets for Cloudflare’s Web Application Firewall (WAF).

The available rulesets depend on your zone’s plan, but all customers have access at least to the Cloudflare Free Managed Ruleset, which provides mitigations against high and wide-impacting vulnerabilities.

For more details and potential customizations, refer to Managed rulesets.