Auto-protection

Automatic protection — even at 3 a.m.

Set your thresholds. Let the engine worry about the rest. If something needs to happen, it happens within seconds — not hours.

1

Block known-bad IPs

No user impact. Happens instantly when an IP hits the threat threshold.

2

Challenge suspect networks

Cloudflare managed challenge. Mild user impact. Bots fail; humans pass.

3

Raise security level

Cloudflare zone goes from Medium to High. Tighter scrutiny on suspect traffic.

4

Under Attack mode

Last resort. 5-second JS challenge for everyone. Climbed back down automatically.

Three signals. All must be true.

Resource pressure

CPU > threshold for configured minutes, based on rolling average.

📈

Anomalous traffic

Volume above baseline learned per hour-of-week. Black Friday is not an alert.

🎯

Threat indicators

High concentration of risk IPs from four different reputation sources.

No more 3am wake-ups