Supercharge your website security in minutes! WAF Security Suite for Cloudflare lets you deploy enterprise-grade Web Application Firewall rules across all your domains instantly—no technical expertise required.
🛡️ Why WAF Security Suite?
Managing security rules across multiple Cloudflare domains is tedious and time-consuming. This plugin streamlines the process, allowing you to:
- Deploy in One Click - Apply comprehensive WAF rules to multiple domains simultaneously
- Save Time - No more manually configuring rules on each domain
- Enterprise Security - Protect against bots, aggressive crawlers, malicious IPs, and common threats
- Bank-Level Encryption - Your API credentials are secured with AES-256-CBC encryption
- Multi-Account Support - Manage domains across different Cloudflare accounts (Premium)
🚀 How It Works
- Connect Your Cloudflare Account - Securely enter your API credentials (encrypted and stored safely)
- Select Your Domains - View all domains in your account with convenient checkboxes
- Deploy Rules - Click once to apply proven security rules across all selected domains
- Stay Protected - Your sites are now shielded from common threats and malicious traffic
🔥 What Gets Protected
The plugin deploys
5 powerful security rules that work together to protect your sites:
- Good Bot Allowlist - Ensures legitimate bots (Google, Bing, monitoring tools) can access your site
- Managed Challenges for Suspicious Traffic - Automatically challenges requests from certain ASNs and non-US traffic
- Aggressive Crawler Protection - Blocks unauthorized crawlers and bots (Yandex, Semrush, Ahrefs, etc.)
- VPN & Login Protection - Adds extra challenges for VPN traffic and WordPress login attempts
- Block Known Threats - Automatically blocks web hosts, malicious IPs, TOR nodes, and attack vectors
✨ Premium Features
Upgrade to unlock advanced customization and enterprise management:
- 🌐 Multi-Account Management - Automatically manage domains across ALL your Cloudflare accounts
- ✅ Smart Bot Whitelisting - Built-in checkboxes for 50+ trusted services across 8 categories
- 🔧 Custom User Agents - Add your own user agent strings to the allowlist
- 🌍 Custom IP Whitelisting - Bypass rules for specific trusted IP addresses
- 💬 Priority Support - Get expert help when you need it
- 🎯 Advanced Customization - Fine-tune rules to match your exact requirements
Try Premium Free for 14 Days → (No credit card required)
📋 Important Information
⚠️
Rule Replacement: This plugin replaces existing custom WAF rules on targeted domains. Make sure to back up any custom rules you want to keep.
✅
Compatibility: Works with Cloudflare Free, Pro, and Business plans. Not compatible with Enterprise plans managed by hosting providers.
⚠️
Service Monitoring: These rules might challenge some monitoring or uptime services. Check Cloudflare's Events log if services stop connecting, and add exceptions as needed.
🔐 Security & Privacy
Your security is our priority:
- All API credentials are encrypted using military-grade AES-256-CBC encryption
- Credentials are securely stored in your WordPress database
- Delete settings with one click when not in use
- No data is sent to third-party servers (except Cloudflare's API)
Automatic Installation
- Log in to your WordPress admin panel
- Navigate to Plugins → Add New
- Search for "WAF Security Suite for Cloudflare"
- Click Install Now and then Activate
Manual Installation
- Download the plugin ZIP file
- Log in to your WordPress admin panel
- Navigate to Plugins → Add New → Upload Plugin
- Choose the ZIP file and click Install Now
- Click Activate Plugin
Getting Started
- After activation, navigate to WAF Security in your WordPress admin menu
- Enter your Cloudflare credentials:
- API Key - Get yours here
- API Email - The email address for your Cloudflare account
- Account ID (Free version only) - Find it here
- Click Save Settings to retrieve your domains
- Select the domains you want to protect
- Click Create/Overwrite All WAF Rules
- Verify and edit further as needed the rules in your Cloudflare dashboard!
That's it! Your sites are now protected.