Services

Consulting and advisory

Hands-on advice to fine-tune your WAF, CDN and edge security, tailored to your goals and your risk tolerance. I work alongside your team – reviewing, planning and pairing on changes – not instead of it.

At a glance

Who it’s for

In-house IT teams, MSPs and developers who run Cloudflare and want an experienced second pair of eyes.

Plans

Free, Pro, Business and Enterprise.

Cost

One-off reviews quoted up front, or a retainer for regular reviews.

How we work together

Within your change control and approvals. Every change planned, agreed and documented.

Ways I help

Reviews, plans and a second opinion

Setup review

I review and document your current Cloudflare setup, then tell you in plain English what to fix first, and why.

Change planning

Change plans with testing and rollback steps, written to fit your change control – and a second opinion before a risky change goes in.

Pairing on changes

I work through changes with your developers, sysadmins or MSP, so your team knows what changed and why.

After an incident

I help you work out what happened, put fixes in place, and plan so it’s less likely – and less painful – next time.

What’s included

Alongside your team, not instead of it

I don’t replace your in-house or outsourced IT team – I support it. I fit in with how you already work: your change control, your approvals and your maintenance windows.

And I’ll tell you what you actually need, even when that means less work for me.

I help with

How it runs

From question to a plan you can follow

1

Tell me the goal

What you’re protecting, what’s worrying you, and how much risk you can live with.

2

Review

With only the access the job needs, I look at your setup and your traffic.

3

Recommend

Plain-English findings in priority order, with the trade-offs explained.

4

Make it stick

I make the changes with your team, or hand over a plan they can follow, with notes on what changed and why.

Further reading

From the blog

Does Blocking Countries Actually Work? (Geo-blocking)

Does Blocking Countries Actually Work?

How to Test a New WAF Rule Without Locking Out Customers (Cloudflare WAF)

How to Test a New WAF Rule Without Locking Out Customers

Naming Conventions for DNS Records, Lists and API Tokens (Naming conventions)

Naming Conventions for DNS Records, Lists and API Tokens

Want a second opinion on your Cloudflare setup? Tell me what you’re trying to protect, and I’ll tell you honestly what it needs.

Under attack right now? Call +61 2 8363 3348.