How to Enable Cloudflare WAF, Bot Protection & Rate Limiting Print

How to Enable Cloudflare WAF, Bot Protection & Rate Limiting

Cloudflare provides multiple tools to secure your website against bots, attacks, and brute-force attempts.

1. Enable WAF (Web Application Firewall)

Go to Security → WAF and enable:

• Managed Rules
• Cloudflare OWASP Core Ruleset

2. Enable Bot Protection

Under Security → Bots, turn ON:

• Bot Fight Mode
• Super Bot Fight Mode (if available)

3. Enable Rate Limiting

Go to Security → WAF → Rate Limiting and set rules like:

URL: /wp-login.php
Limit: 10 requests / minute
Action: Block

This stops brute-force attacks on WordPress or any CMS.