
About
The Cloudflare WAF Rules Wizard plugin allows you to use your Cloudflare API to bulk-create WAF rules for all the sites associated with your Cloudflare account. You only need to install it on one WordPress site for it to work across all the sites in your account.
The new and improved plugin will be released as a free version in the WordPress.org plugin directory.
Get Notified
Sign up to be first to know when the new improved version of the Cloudflare Bulk WAF Plugin is released.

Note from the developer
Here’s what we have planned for development to enhance the plugin further:
- Adding additional functionality for improved security
- Support for bulk creation across all accounts you have access to
- Suport for updating existing rules, instead of overwriting all rules
- Integrating optional advanced features with Wordfence and fail2ban
Be sure to sign up for a notification when it’s released. I can’t wait to share this new and more advanced plugin with everyone. In the meantime, I’d love to hear your thoughts, so please feel free to drop a comment!
Thanks,
Rob Marlbrough

Looking forward to the new plugin. I’d love if it stored the API key securely, or use environment variables.
Tried to sign up for the notification for release and it gave an error -1
Hi David, I see that you were able to sign up, it must have been a temp issue. It’s working well for others, so I think we’re all good. ~Rob
I’m seeing a dozen or so have already signed up – awesome! I’m already working hard on securing the plugin better, and adding some great new features as well.
Thanks for your support,
~ Rob
Looking forward to this. Do you have a rough estimate for a release date?
Also wondering if it will support the creation of different rule sets I can apply to websites I select. Not all my sites are WordPress based.
Thanks Tom. Hopefully it will be released in a few weeks, that’s the target anyway. It still has to go through WP Repo review and approval process, security review, and more testing.
I hope to have it more flexible with the rules, but in any event you’ll def be able to customize them within Cloudflare after bulk creation. The WP parts such as wp-login.php won’t affect non-WP sites, anyway.
Just found the blot, that lead to github, that lead to this.. Can’t wait :)
Is there an estimated release date on this?
Hi Max, we’re working on releasing it by the end of June, if all goes well. We’re in the queue for getting it in the WP repo. It’s an overhaul with new bulk user agent and IP blocking management features, and some advanced server security sync options.
Hey Rob, are you still on track to release this at the end of this month?
A bit delayed due to some other projects taking longer than expected. We’re wrapping them up this week, and so we’ll plan and really push to have the basic version released a few weeks from there.
Any update on release timing? Thanks
Nice, looking forward to it. I tried signing up to be alerted, but got this error: Error: -1
Not sure what I did wrong.