How does CloudFlare make your website more secure?

By January 20, 2015 Security, Tips & Tricks
How CloudFlare Protects Your Site

CloudFlare protects and accelerates any website online. Once your website is a part of the CloudFlare community, your website’s traffic is routed through CloudFlare’s intelligent global network. CloudFlare automatically optimizes the delivery of your website so your visitors get the fastest page load times and best performance. They also block threats and limit abusive bots and crawlers from wasting your bandwidth and server resources. The result: CloudFlare-powered websites see a significant improvement in performance and a decrease in spam and other attacks.

As a CloudFlare partner, all sites with One of a Kind Solutions receive this performance and security boost. This is all great, however, how does CloudFlare specifically improve the security of your website?

Browser integrity

Automatically performs a browser integrity check for all requests to your website by evaluating the HTTP headers for threat signatures. If a threat signature is found, the request will be denied.

Visitor reputation

CloudFlare uses threat data from a variety of sources to build a reputation for every visitor online. You set the desired security setting for your site and then CloudFlare’s network stops the threats before it reaches your website. Reputation-based security provides a first line of defense for your website.

Block list / trust list

In addition to CloudFlare’s automatic detection, you can easily add an IP address, IP ranges or entire countries to your Trust and Block list.

Saved bandwidth and server resources

By stopping threats before they get to your website you save bandwidth and resources. Your server is also freed up to serve your legitimate traffic optimally.

Protect SSH / Telnet / FTP ports

Add a layer of protection to ports like SSH, FTP and Telnet by disabling them for your root domain. Continue to access them from a subdomain of your choosing.

Breaking the cycle of malware

Websites are empowered to inform visitors with compromised computers so these visitors can take action to clean the malware infection.

Collaborative security

CloudFlare uses the collective intelligence of its community to get smarter. CloudFlare’s network learns from every new attack and then shares that information with the rest of the CloudFlare community. What this means is that since CloudFlare continually learns, every site, regardless of size, makes the system smarter.

Jeremiah Benes

About Jeremiah Benes

4 Comments

  • Tel Aviv Net says:

    How does the Browser integrity check actually works?
    How can I be sure that the browser challenge is not being displayed for many humans that might have a phishy IP or use TOR or other proxy?

    • Cloudflare checks the HTTP headers and user agent. If someone is visiting from a fishy IP or a proxy system like TOR, they will not see the page unless they display other suspicious behaviors. Learn more here.

  • Hi, For the last couple of days when I want to visit any site, I am getting the message “One more step
    Please complete the security check to access”

    Then I need to enter Captcha and then I am able to view the page. I am not sure why I am getting this page before viewing a website. Do you have any idea? How Can I get rid of it?

    • Hi Himadri,
      First, you should enter in the correct information for the security check captcha and ensure that you have Javascript enabled in your browser. This should resolve the issue. If not, try these steps:

      • You should verify that your IP address has not been flagged as spam. If so, you’ll need to either change your IP or have it removed from any blacklists.
      • Second, you should make sure that you do not have any type of viruses on your computer. This can cause your computer to exhibit bot-like behavior and be flagged by CloudFlare.

      Let me know if this doesn’t do the trick for you!

Leave a Reply