Optimize Security

Keep your website and your visitors safe

Ensure your website is as secure as possible by turning on each recommended feature on your Cloudflare dashboard.

security ddos

Stop DDoS Attacks

Stop site interruptions from massive DDoS attacks with Cloudflare's layered security.

Enabled automatically Learn more
security setssl

Secure Connections

Encrypt communication to and from your website using Cloudflare's Universal SSL (TLS). Configure Full SSL for advanced security.

Configure Now Learn more
security https

Enable HTTPS For All Traffic

Prevent data leaks and improve visitor trust by encrypting web traffic.

Turn on Learn more
security dnssec

Ensure DNS integrity with DNSSEC

Guarantee visitors are directed to your web server and not a malicious spoof of your site.

Turn on Learn more

Do Even More

security waf owasp rules

Enable Web Application Firewall

Block the latest threats observed by Cloudflare.

Customize Learn more
security owasp

Enable OWASP Protection

Protect your site from roughly 12% of all attacks by blocking the Top 10 OWASP threats, including cross-site scripting and SQL injection.

Turn on Learn more
security manged ruleset

Enable Managed Ruleset

Protect your site against new vulnerabilities for technology and web specific applications. Managed Rulesets are frequently updated and improved.

Turn on Learn more
Learn more about your security settings. Configure Advanced Settings

Get More Secure with Upgrades

Upgrades starting at $200/month

performance argo

Enable Argo tunnel

Secure application traffic to any type of infrastructure. Prevent data snooping in transit and brute force login attacks starting at $5/month.

Enable Argo Tunnel Learn more
security access

Control Identity and Access Management with Cloudflare Access

Secure, authenticate, and monitor user access to any domain, application, or path on Cloudflare, starting at $3 per month.

Enable Access Learn more
security custom waf rules

Configure Custom WAF Rules

Defend your website against application attacks with Cloudflare rulesets, OWASP ModSecurity rulesets, and up to 25 custom rulesets.

Upgrade to Business Plan Learn more
security custom waf certificate

Upload Custom SSL Certificate

Encrypt data in transit with your own custom SSL certificate to Cloudflare. Use a Single-Domain or Wildcard certificate instead of a Multi-Domain certificate.

Upgrade to Business Plan Learn more
security pci

Ensure PCI Compliance

Bring your business into compliance with the latest PCI standards by enabling the Cloudflare WAF and Modern TLS Only mode.

Upgrade to Business Plan Learn more
helpfulresources support light

24/7/365 prioritized chat and email support

Chat and email support with a median response time of 15 minutes.

Upgrade to Business Plan
We love the peace of mind that we get knowing that we can set up Cloudflare, forget about it, and trust that we won't be affected by any kind of malicious DDoS attack.
Lee McNeil,  CTO at Buycraft

Finished with security optimization?

Explore upgraded plans

Helpful Resources

helpfulresources faq
Check out our Troubleshooting FAQ
Resolve the most common issues and questions when adding a new domain to Cloudflare.
FAQ
helpfulresources support
Try Cloudflare Support
Still stumped? 95% of all user questions can be solved by searching in the Cloudflare Help Center.
Support
helpfulresources communityforum
Join the Community
Join the Cloudflare Community, where you can find and contribute tips, tricks, and troubleshooting assistance.
Community Forum
helpfulresources blog
Read the Cloudflare Blog
Stay up-to-date on product announcements, updates, and new features.
Blog