
About
Supercharge your website security in minutes! WAF Security Suite for Cloudflare lets you deploy enterprise-grade Web Application Firewall rules across all your domains instantly—no technical expertise required. You only need to install it on one WordPress site for it to work across all the sites in your account.
Why WAF Security Suite?
Managing security rules across multiple Cloudflare domains is tedious and time-consuming. This plugin streamlines the process, allowing you to:
- Deploy in One Click – Apply comprehensive WAF rules to multiple domains simultaneously
- Save Time – No more manually configuring rules on each domain
- Enterprise Security – Protect against bots, aggressive crawlers, malicious IPs, and common threats
- Bank-Level Encryption – Your API credentials are secured with AES-256-CBC encryption
- Multi-Account Support – Manage domains across different Cloudflare accounts (Premium)
Get Notified
Sign up to be first to know when the new improved version of the WAF Security Suite for Cloudflare Plugin is released.

Note from the developer
Here’s what we have planned for development to enhance the plugin:
- Adding additional functionality for improved security
- Support for bulk creation across all accounts you have access to
- Bulk IP Blocking across all domains at once
- Support for updating existing rules, instead of overwriting all rules
- Integrating more advanced features with Wordfence or fail2ban IP blocking
Be sure to sign up for a notification when a new version is released. I can’t wait to share the newest versions of this plugin with everyone. In the meantime, I’d love to hear your thoughts, so please feel free to drop a comment!
Thanks,
Rob Marlbrough

Looking forward to the new plugin. I’d love if it stored the API key securely, or use environment variables.
Tried to sign up for the notification for release and it gave an error -1
Hi David, I see that you were able to sign up, it must have been a temp issue. It’s working well for others, so I think we’re all good. ~Rob
I’m seeing a dozen or so have already signed up – awesome! I’m already working hard on securing the plugin better, and adding some great new features as well.
Thanks for your support,
~ Rob
Looking forward to this. Do you have a rough estimate for a release date?
Also wondering if it will support the creation of different rule sets I can apply to websites I select. Not all my sites are WordPress based.
Thanks Tom. Hopefully it will be released in a few weeks, that’s the target anyway. It still has to go through WP Repo review and approval process, security review, and more testing.
I hope to have it more flexible with the rules, but in any event you’ll def be able to customize them within Cloudflare after bulk creation. The WP parts such as wp-login.php won’t affect non-WP sites, anyway.
Just found the blot, that lead to github, that lead to this.. Can’t wait :)
Is there an estimated release date on this?
Hi Max, we’re working on releasing it by the end of June, if all goes well. We’re in the queue for getting it in the WP repo. It’s an overhaul with new bulk user agent and IP blocking management features, and some advanced server security sync options.
Hey Rob, are you still on track to release this at the end of this month?
A bit delayed due to some other projects taking longer than expected. We’re wrapping them up this week, and so we’ll plan and really push to have the basic version released a few weeks from there.
Any update on release timing? Thanks
Nice, looking forward to it. I tried signing up to be alerted, but got this error: Error: -1
Not sure what I did wrong.
Any update on the release date?