I will configure cloudflare waf and security rules for your website
About this Gig
Is your website receiving suspicious traffic, malicious requests, bad bots, or repeated unwanted requests?
I will configure Cloudflare WAF and security rules to help protect your website while keeping legitimate visitors and important services accessible.
What I can configure:
- Cloudflare WAF
- Custom security and firewall rules
- Managed WAF rules
- Bot and suspicious traffic protection
- Rate limiting rules
- IP, country, ASN and user-agent rules
- Login and sensitive URL protection
- API endpoint protection
- Security level and challenge settings
- False-positive review and rule tuning
- Cloudflare security configuration review
I can work with WordPress, WooCommerce, Laravel, PHP, React, Next.js and other web applications.
I configure rules based on your website and traffic instead of blindly applying aggressive rules that could block real users, APIs, checkout pages or search engines.
Please contact me before ordering if your website is currently under an active or advanced attack.
I do not provide penetration testing, malware removal, or guaranteed protection against every attack through this Gig.
Cloud provider:
Amazon Web Services
Expertise:
Debugging
•
Development
•
Configuration
•
Performance
Cloud computing resource:
DNS
FAQ
What access do you need?
I normally need access to the Cloudflare account or an appropriate Cloudflare member invitation. Please do not send your Cloudflare password. Depending on the task, I may also need limited website or server access.
Can you configure Cloudflare WAF rules?
Yes. I can configure Cloudflare WAF and custom security rules based on your website, traffic patterns, URLs, APIs and security requirements.
Can you block malicious bots and suspicious traffic?
Yes. I can configure appropriate WAF, firewall, bot protection, challenge and rate-limiting rules to help reduce unwanted or abusive traffic.
Can you configure rate limiting?
Yes. I can configure rate limiting for suitable endpoints such as login pages, APIs, forms and other sensitive URLs, depending on your Cloudflare plan and requirements.
Will Cloudflare security block real visitors?
I configure rules carefully and test important website functionality to reduce false positives. However, no security configuration can guarantee that every unwanted request will be blocked without any false positives.
Does this work with the Cloudflare Free plan?
Yes, many security improvements can be configured on the Free plan. Some advanced WAF, rate limiting and bot-management features depend on the Cloudflare plan available on your account.
Do you provide penetration testing?
No. This Gig focuses on Cloudflare configuration, WAF, firewall rules, traffic protection and security hardening. Penetration testing and vulnerability assessments are outside this Gig's scope.

