跳转到主要内容

Cloudflare Web Application Firewall

import { Description, Feature, Plan, RelatedProduct, Render, Stream, } from "~/components";

Get automatic protection from vulnerabilities and the flexibility to create custom rules.

Learn how to get started.

Features

<Feature header="Application Profiles" href="/waf/detections/application-profiles/"

Compare requests with an application-specific expected structure. Review
profile detections before mitigating violations with Custom Rules.
Create your own custom rules to protect your website and your APIs from malicious incoming traffic. Use advanced features like [WAF attack score](/waf/detections/attack-score/) and [malicious uploads detection](/waf/detections/malicious-uploads/) in your custom rules. Define rate limits for incoming requests matching an expression, and the action to take when those rate limits are reached. Enable the pre-configured managed rulesets to get immediate protection. These rulesets are [regularly updated](/waf/change-log/), offering advanced zero-day vulnerability protections, and you can adjust their behavior. Create and deploy rulesets to multiple Enterprise zones.

<Feature header="Security Events" href="/waf/analytics/security-events/" cta="Explore Security Events"

Review mitigated requests (rule matches) using an intuitive interface. Tailor
your security configurations based on sampled logs.

<Feature header="Security Analytics" href="/waf/analytics/security-analytics/" cta="Explore Security Analytics"

Displays information about all incoming HTTP requests, including those not
affected by security measures.

Availability

Feature Free Pro Business Enterprise
Attack score No No Yes (one field) Yes
Leaked credentials detection Yes (one field) Yes Yes Yes
Malicious uploads detection No No No Paid add-on
AI Security for Apps No No No Paid add-on
Custom rules Yes Yes Yes Yes
Rate limiting rules Yes (one rule) Yes Yes Yes
Advanced Rate Limiting No No No Paid add-on
WAF Managed Rules Free Managed Ruleset only Yes Yes Yes
Sensitive Data Detection (SDD) No No No Yes
Account-level WAF configuration No No No Yes
Custom lists Yes Yes Yes Yes
Managed IP Lists No No No Yes
Email Address Obfuscation Yes Yes Yes Yes
Hotlink Protection Yes Yes Yes Yes
Replace insecure JS libraries Yes Yes Yes Yes
IP Access rules Yes Yes Yes Yes
User Agent Blocking Yes Yes Yes Yes
Zone Lockdown Yes Yes Yes Yes
Security Analytics (zone) Yes Yes Yes Yes
Security Analytics (account) No No Yes Yes
Security Events Yes (sampled logs only) Yes Yes Yes
Security Events alerts No No Yes Yes
Advanced Security Events alerts No No No Yes

This is a summary of available features per Cloudflare plan. Refer to the documentation of individual features for more details.

<RelatedProduct header="DDoS Protection" href="/ddos-protection/" product="ddos-protection"

Cloudflare DDoS protection secures websites, applications, and entire networks
while ensuring the performance of legitimate traffic is not compromised.

<RelatedProduct header="Client-side security" href="/client-side-security/" product="client-side-security"

Client-side security (formerly known as Page Shield) is a comprehensive
client-side security solution to ensure the safety of your website visitors'
browser environment.
Cloudflare bot solutions identify and mitigate automated traffic to protect your domain from bad bots.
这篇文档对你有帮助吗？
想留言或继续讨论？请到 Cyberforums 赛博论坛参与。 参与讨论 / 回复