Security

Protect your website and visitors by enabling security features available for your plan.

Secure Your Site

Get familiar with your Cloudflare dashboard. Turn on each feature below to begin protecting your site with your Pro plan, or upgrade to the Business plan for even more security.

security ddos

Stop DDoS Attacks

Stop site interruptions from massive DDoS attacks with Cloudflare's layered security.

Enabled automatically Learn more
security setssl

Secure Connections

Encrypt communication to and from your website using Cloudflare's Universal SSL (TLS). Configure Full SSL for advanced security.

Configure Now Learn more
security https

Enable HTTPS For All Traffic

Prevent data leaks and improve visitor trust by encrypting web traffic.

Turn on Learn more
security dnssec

Ensure DNS integrity with DNSSEC

Guarantee visitors are directed to your web server and not a malicious spoof of your site.

Turn on Learn more

Do Even More

security waf owasp rules

Enable Web Application Firewall

Block the latest threats observed by Cloudflare.

Customize Learn more
security owasp

Enable OWASP Protection

Protect your site from roughly 12% of all attacks by blocking the Top 10 OWASP threats, including cross-site scripting and SQL injection.

Turn on Learn more
security manged ruleset

Enable Managed Ruleset

Protect your site against new vulnerabilities for technology and web specific applications. Managed Rulesets are frequently updated and improved.

Turn on Learn more
Learn more about your security settings. Configure Advanced Settings

Get More Secure with Upgrades

Upgrades starting at $200/month

performance argo

Enable Argo tunnel

Secure application traffic to any type of infrastructure. Prevent data snooping in transit and brute force login attacks starting at $5/month.

Enable Argo Tunnel Learn more
security access

Control Identity and Access Management with Cloudflare Access

Secure, authenticate, and monitor user access to any domain, application, or path on Cloudflare, starting at $3 per month.

Enable Access Learn more
security custom waf rules

Configure Custom WAF Rules

Defend your website against application attacks with Cloudflare rulesets, OWASP ModSecurity rulesets, and up to 25 custom rulesets.

Upgrade to Business Plan Learn more
security custom waf certificate

Upload Custom SSL Certificate

Encrypt data in transit with your own custom SSL certificate to Cloudflare. Use a Single-Domain or Wildcard certificate instead of a Multi-Domain certificate.

Upgrade to Business Plan Learn more
security pci

Ensure PCI Compliance

Bring your business into compliance with the latest PCI standards by enabling the Cloudflare WAF and Modern TLS Only mode.

Upgrade to Business Plan Learn more
helpfulresources support

24/7/365 prioritized chat and email support

Chat and email support with a median response time of 15 minutes.

Upgrade to Business Plan
We love the peace of mind that we get knowing that we can set up Cloudflare, forget about it, and trust that we won't be affected by any kind of malicious DDoS attack.
Lee McNeil,  CTO at Buycraft
>

Finished with Security?

Optimize Performance