Ensure your website is as secure as possible by turning on each recommended feature on your Cloudflare dashboard.
Protect Your Site
Get familiar with your Cloudflare SSL/TLS Tab. Turn on each feature below to begin optimizing security with your Business plan.
Stop DDoS Attacks
Stop site interruptions from massive DDoS attacks with Cloudflare's layered security.
Encrypt communication to and from your website using Cloudflare's Universal SSL (TLS). Configure Full SSL for advanced security.
Enable HTTPS For All Traffic
Prevent data leaks and improve visitor trust by encrypting web traffic.
Ensure DNS integrity with DNSSEC
Guarantee visitors are directed to your web server and not a malicious spoof of your site.
Do Even More
Enable Web Application Firewall
Block the latest threats observed by Cloudflare.
Enable OWASP Protection
Protect your site from roughly 12% of all attacks by blocking the Top 10 OWASP threats, including cross-site scripting and SQL injection.
Enable Managed Ruleset
Protect your site against new vulnerabilities for technology and web specific applications. Managed Rulesets are frequently updated and improved.
Configure Custom WAF Rules
Defend your website against application attacks with Cloudflare rulesets, OWASP ModSecurity rulesets, and up to 25 custom rulesets.
Upload Custom SSL Certificate
Encrypt data in transit with your own custom SSL certificate to Cloudflare. Use a Single-Domain or Wildcard certificate instead of a Multi-Domain certificate.
Ensure PCI Compliance
Bring your business into compliance with the latest PCI standards by enabling the Cloudflare WAF and Modern TLS Only mode.
Get More Secure with Cloudflare Enterprise
24 / 7 / 365 Support and Dedicated Account Management
Enterprise-grade phone, chat, and email support with 100% uptime and 25x reimbursement
Take charge of your data and run your own analytics using raw log data from web assets on Cloudflare's network.
Extend the power of Cloudflare DDoS, TLS, and IP Firewall solutions to your other TCP-based services, keeping gaming services, SSH, or SMTP online and secure.
Enable Rate Limiting
Identify and block high request rates automatically, either for specific URLs or for an entire domain.
Enable Bot Management
Detect and stop malicious bots using machine learning that harnesses data from more than 16 million Internet properties, all with one click.
Enable Argo tunnel
Secure application traffic to any type of infrastructure. Prevent data snooping in transit and brute force login attacks starting at $5/month.
Control Identity and Access Management with Cloudflare Access
Secure, authenticate, and monitor user access to any domain, application, or path on Cloudflare, starting at $3 per month.