Cloudflare & web security

Securing the future: WebControl insights

Naming Conventions for Cloudflare WAF Rules (and Why Ours Needed Fixing) (Cloudflare WAF)

Naming Conventions for Cloudflare WAF Rules (and Why Ours Needed Fixing)

Here’s a question that sounds boring until it’s 11pm and a customer can’t get into your website: what’s that rule called, and what does it actually do? When Cloudflare blocks

Read More

Naming Conventions for DNS Records, Lists and API Tokens (Naming conventions)

Naming Conventions for DNS Records, Lists and API Tokens

Stop Using Your Cloudflare Global API Key (Cloudflare API)

Stop Using Your Cloudflare Global API Key

SPF, DKIM and DMARC for the Domain You Actually Send From (Email security)

SPF, DKIM and DMARC for the Domain You Actually Send From

Block, Challenge or Skip? Choosing the Right Cloudflare Rule Action (Cloudflare WAF)

Block, Challenge or Skip? Choosing the Right Cloudflare Rule Action

What Is a Cloudflare Ray ID, and Why We Ask for It (Troubleshooting)

What Is a Cloudflare Ray ID, and Why We Ask for It

Orange Cloud vs Grey Cloud: What Cloudflare Proxy Status Really Means (Cloudflare DNS)

Orange Cloud vs Grey Cloud: What Cloudflare Proxy Status Really Means

Domain Hygiene: Alias Domains, Redirects and Stopping Typo-Squatters (Domains)

Domain Hygiene: Alias Domains, Redirects and Stopping Typo-Squatters

How to Use Lists in Cloudflare (With Real Examples) (Cloudflare Lists)

How to Use Lists in Cloudflare (With Real Examples)

How to Lock Down Your Origin Server Behind Cloudflare (Origin security)

How to Lock Down Your Origin Server Behind Cloudflare