Auto-protection
Automatic protection — even at 3 a.m.
Set your thresholds. Let the engine worry about the rest. If something needs to happen, it happens within seconds — not hours.
1
Block known-bad IPs
No user impact. Happens instantly when an IP hits the threat threshold.
2
Challenge suspect networks
Cloudflare managed challenge. Mild user impact. Bots fail; humans pass.
3
Raise security level
Cloudflare zone goes from Medium to High. Tighter scrutiny on suspect traffic.
4
Under Attack mode
Last resort. 5-second JS challenge for everyone. Climbed back down automatically.
Three signals. All must be true.
⚡
Resource pressure
CPU > threshold for configured minutes, based on rolling average.
📈
Anomalous traffic
Volume above baseline learned per hour-of-week. Black Friday is not an alert.
🎯
Threat indicators
High concentration of risk IPs from four different reputation sources.