Tang Rufus

Typist Tech

<p>Connecting WordPress with Cloudflare firewall, protect your WordPress site at DNS level. Automatically create firewall rules to block dangerous IPs.</p>
<h4>Features</h4>
<ul>
<li>Blacklist IP if attempt to login with bad usernames</li>
</ul>
<h4>Integrations (Coming soon as add-ons)</h4>
<ul>
<li><a href="https://www.typist.tech/go/ithemes-security/" rel="nofollow ugc">iThemes Security</a></li>
<li><a href="https://wordpress.org/plugins/contact-form-7/" rel="ugc">Contact Form 7</a></li>
<li><a href="https://wordpress.org/plugins/zero-spam" rel="ugc">WordPress Zero Spam</a></li>
</ul>
<h4>How does WP Cloudflare Guard different from Cloudflare’s official plugin?</h4>
<p>At the time of writing, Cloudflare’s <a href="https://wordpress.org/plugins/cloudflare/" rel="ugc">official plugin</a> doesn’t block any IP for WordPress when other plugins discover dangerous activities. Here comes WPCFG! WPCFG focus on integrating other plugins with Cloudflare.</p>
<h4>Compatibility</h4>
<ul>
<li>Works with Cloudflare’s <a href="https://wordpress.org/plugins/cloudflare/" rel="ugc">official plugin</a></li>
<li>Works with <a href="https://wordpress.org/plugins/sunny/" rel="ugc">Sunny (Purging CloudFlare caches for WordPress)</a></li>
</ul>
<h4>Things You Need to Know</h4>
<ul>
<li>You need PHP 7.0 or later</li>
<li>You need WordPress 4.7 or later</li>
<li>You need a Cloudflare account (free plan is okay)</li>
<li>This plugin was not built by <a href="https://www.cloudflare.com/" rel="nofollow ugc">Cloudflare, Inc</a></li>
</ul>
<blockquote>
<p>If you like the plugin, feel free to <a href="https://wordpress.org/support/plugin/wp-cloudflare-guard/reviews/#new-post" rel="ugc">rate it</a> or <a href="https://www.typist.tech/donate/wp-cloudflare-guard/" rel="nofollow ugc">donate via PayPal</a>. Thanks a lot! 🙂</p>
</blockquote>
<h4>For Bloggers</h4>
<p>If you have written an article about <code>WP Cloudflare Guard</code>, do <a href="https://www.typist.tech/contact/" rel="nofollow ugc">let me know</a>. For any questions, shoot me an email at <a href="mailto:info@typist.tech" rel="nofollow ugc">info@typist.tech</a></p>
<h4>For Developers</h4>
<p>WP Cloudflare Guard is open source and hosted on <a href="https://github.com/TypistTech/wp-cloudflare-guard" rel="nofollow ugc">GitHub</a>. Feel free to make <a href="https://github.com/Typisttech/wp-cloudflare-guard/pulls" rel="nofollow ugc">pull requests</a>.</p>
<h4>Who make this plugin?</h4>
<p><a href="mailto:info@typist.tech" rel="nofollow ugc">Tang Rufus</a>, a freelance developer for hire.<br />
I make <a href="https://www.typist.tech/" rel="nofollow ugc">Typist Tech</a> also.</p>
<h4>Support</h4>
<p>To save time so that we can spend it on development, please read the plugin’s <a href="https://wordpress.org/plugins/wp-cloudflare-guard/faq/" rel="ugc">FAQs</a> first.<br />
Before requesting support, and ensure that you have updated WP Cloudflare Guard and WordPress to the latest released version and installed PHP 7 or later.</p>
<p>We hang out in the WordPress <a href="https://wordpress.org/support/plugin/wp-cloudflare-guard" rel="ugc">support forum</a> for this plugin.</p>
<p>If you know what <code>GitHub</code> is, use <a href="https://github.com/Typisttech/wp-cloudflare-guard/issues" rel="nofollow ugc">GitHub issues</a> instead.</p>


WP Cloudflare Guard

Connecting WordPress with Cloudflare firewall, protect your WordPress site at DNS level. Automatically create firewall rules to block dangerous IPs.

5 Star Plugins (Rob)

<p>Cloud Maestro brings centralized Cloudflare Web Application Firewall (WAF) controls directly into WordPress.</p>
<p><strong>Why would I use a plugin when I can create rules in Cloudflare?</strong><br />
If you manage multiple Cloudflare-connected sites, Cloud Maestro is a productivity tool that helps oversee several domains from a central dashboard using WordPress. If you only manage one domain in Cloudflare, you wouldn’t benefit from this plugin.</p>
<p>It’s useful for someone managing:<br />
– Their own sites and client sites<br />
– Multiple businesses<br />
– Separate Cloudflare accounts</p>
<p>People like using Cloud Maestro because configuring security rules one domain at a time is inefficient and error-prone. It allows you to configure WAF rules once and deploy them consistently across all domains in your Cloudflare account — instantly.</p>
<p>The free version supports one Cloudflare account with multiple domains.</p>
<p>An optional premium version is available for managing unlimited domains across multiple Cloudflare accounts at once.</p>
<h3>🛡️ Why Use Cloud Maestro – WAF Security Suite for Cloudflare?</h3>
<p>Managing security rules across multiple Cloudflare domains is tedious and time-consuming. This plugin streamlines the process, allowing you to:</p>
<ul>
<li><strong>Deploy in One Click</strong> – Apply comprehensive WAF rules to multiple domains simultaneously</li>
<li><strong>Save Time</strong> – No more manually configuring rules on each domain, one at a time</li>
<li><strong>Enterprise Security</strong> – Protect against bots, aggressive crawlers, malicious IPs, and common threats</li>
<li><strong>Reduce Mistakes</strong> – Maintain consistent security rules across domains</li>
</ul>
<h3>✅ Free Standard Features</h3>
<ul>
<li>One Cloudflare account</li>
<li>Multiple domains</li>
<li>One-click WAF rule deployment</li>
<li>Centralized Cloudflare controls</li>
<li>Secure API credential storage (AES-256-CBC encryption)</li>
<li>Plugin updates<br />
The free plugin does not require an upgrade.</li>
</ul>
<h3>🔥 What Gets Protected</h3>
<p>The plugin deploys <strong>3 optimized trusted security rules</strong> (prior versions used 5) that work together to protect your sites:</p>
<ul>
<li><strong>Good Bot Allowlist</strong> – Ensures legitimate bots (Google, Bing, monitoring tools) can access your site</li>
<li><strong>Managed Challenges for Suspicious Traffic</strong> – Automatically challenges requests from certain ASNs and non-US traffic</li>
<li><strong>Aggressive Crawler Protection</strong> – Blocks unauthorized crawlers and bots (Yandex, Semrush, Ahrefs, etc.)</li>
<li><strong>VPN & Login Protection</strong> – Adds extra challenges for VPN traffic and WordPress login attempts</li>
<li><strong>Block Known Threats</strong> – Automatically blocks web hosts, malicious IPs, TOR nodes, and attack vectors</li>
</ul>
<h3>✨ Premium Upgrade (Optional)</h3>
<p>For agencies and professionals managing multiple Cloudflare accounts, a Premium version is available with expanded functionality and tech support. <strong><a href="https://5starplugins.com/cloud-maestro-cloudflare-waf-rules/" rel="nofollow ugc">Check out our free trial</a></strong> for these features:</p>
<ul>
<li><strong>Multi-Account Management</strong> – Automatically manage domains across ALL your Cloudflare accounts</li>
<li><strong>Easy Bot Whitelisting</strong> – Built-in checkboxes for 50+ trusted services across 8 categories</li>
<li><strong>Custom User Agents</strong> – Add your own user agent strings to the Good Bot Rule</li>
<li><strong>Custom IP Whitelisting</strong> – Add trusted IP addresses to the Goot Bot Rule</li>
<li><strong>IP Rules management</strong> – View and edit Cloudflare’s IP Rules that block or allow access even before hitting WAF rules (and we are working on connecting to fail2ban and Wordfence blocks)</li>
<li><strong>Bulk DNS Manager</strong> – Search and manage DNS records across all domains, bulk migrate IP addresses, CNAME targets, and convert A records to CNAME with a single action</li>
<li><strong>Priority Support</strong> – Get expert help when you need it</li>
<li><strong>Advanced Customization</strong> – Fine-tune rules to match your exact requirements</li>
<li><strong>Multi-Account Management</strong> – Centrally manage unlimited domains across all your Cloudflare accounts</li>
</ul>
<h3>📋 Important Information</h3>
<p><strong>Rule Replacement:</strong> This plugin replaces existing custom WAF rules on targeted domains. Make sure to back up any custom rules you want to keep.</p>
<p><strong>Compatibility:</strong> Works with Cloudflare Free, Pro, and Business plans. Not compatible with Enterprise plans managed by hosting providers.</p>
<p><strong>Service Monitoring:</strong> These rules might challenge some monitoring or uptime services. Check Cloudflare’s Events log if services stop connecting, and add exceptions as needed.</p>


Cloud Maestro – WAF Security Suite for Cloudflare


The idea of this plugin is simple but quite effective. Having a comprehensive set of rules and a centralized WAF strategy helps a lot in mitigating server attacks while hosting many sites. And all still enjoying CF Free.


CF WAF in Bulk for free

Bulk deploy powerful WAF security rules to multiple Cloudflare domains with one click. Protect your sites from bots, malicious traffic, and threats.

WP Cloudflare Guard vs Cloud Maestro – WAF Security Suite for Cloudflare