Non-affiliated technical assistance for efficient Cloudflare™ configuration

Effectively block malicious bot traffic
with Cloudflare™.
Keep every real visitor.

Expert configuration assistance for your Cloudflare™ setup, tailored to your goals and your context.
Support for Free, Pro and Business plans.
No sales calls, fixed price, no retainer.
You measure before and after our work: refund if there's no improvement.

Does this sound familiar?

Bot Fight Mode is on, but it's not working

You enabled it, checked the box, moved on. Traffic to your origin barely moved and you're not sure what's actually being blocked.

AI crawlers are bringing your server to its knees

GPTBot and friends are scraping your site around the clock. You want Googlebot and Bingbot to keep working. Everything else, gone.

Cloudflare™ blocks real customers, but not the bots!

A "phishing" or "malware" false positive quietly rejected a real signup or a real payment, and nobody noticed until a customer complained.

I get waves of abusive account creation on my site

Your signup form is a magnet for throwaway accounts and credential-stuffing attempts. Rate limiting rules exist, but nobody configured them for this.

I think I might have blocked Googlebot!

An overly broad security rule ended up blocking Googlebot or Google Ads' verification crawlers, and nobody noticed. The result: a sudden drop in organic traffic or suspended ad campaigns, with a direct, immediate hit to your audience and revenue.

I've read every forum, but I'm still stuck without a solution

You've posted on forums or social media. You got a generic reply, nothing really actionable. You need someone to actually configure it and prove it worked.

Who this is for

A

Site owner

You run your own website, e-commerce store or SaaS on Cloudflare™, and the settings feel far too complex and risky.

B

Small internal IT team

One specific problem to fix, no bandwidth to become a Cloudflare™ specialist to fix it.

C

Hosting & managed services provider

Need effective Cloudflare™ configuration for your clients, for immediate results.

D

Web agency / dev shop

Your clients require you to work within their existing Cloudflare™ setup, and it disrupts your migration or launch process.

How it works

A methodical approach to bot protection. Fixed price, three stages, a measured result. Available as two plans (see pricing): you can implement the changes yourself, or have us do it for you.

Step one

Diagnostic & baseline

You give us minimum, read-only access.

We analyze your real traffic and your domain's Cloudflare™ configuration.

Together, we define the success criterion: the measurable indicator to improve.

Step two

Rule design & adjustments

Do It Yourself plan: we hand you the exact rule expressions and configuration changes to apply yourself.

Done for you plan: we apply and iterate WAF, Bot Fight Mode, Rate Limiting, Challenge, CacheRule, etc. rules directly, until your target is hit or after three iterations, whichever comes first.

Step three

Final measurement & guarantee

We compare the final result to the initial situation, after iterating on step two as needed to achieve measurable results.

If there is no measurable improvement, we commit to refunding you.

Examples of the technical success criterion set at the start of the engagement

  • Reduce the number of requests reaching your origin server per day, for traffic outside your target audience
  • Block every crawler except a whitelist you name (e.g. keep Googlebot/Bingbot, block AI scrapers like GPTBot)
  • Stop spam account sign-ups
  • Increase your Cloudflare™ cache hit ratio
  • Improve Core Web Vitals scores for a specific page on your site
  • Reduce the number of 500 errors returned by your origin server
  • Make your site discoverable by AI crawlers

Least privilege, by design

You only grant what's needed for the plan you picked. Nothing else. The exact scope depends on whether you implement the changes yourself or have us do it for you.

Do It Yourself plan

  • Read-only access to Security Rules (WAF)
  • Read-only access to Rate Limiting Rules
  • Read-only access to Analytics
  • Read-only access to Zone settings
  • Read-only access to DNS
  • Read-only access to Cache

Done for you plan

  • Edit access to Security Rules (WAF)
  • Edit access to Rate Limiting Rules
  • Read-only access to Analytics
  • Edit access to Zone settings
  • Edit access to DNS
  • Edit access to Cache

Fixed price. No surprises.

Pick how hands-on you want this to be.

Do It Yourself illustration

Do It Yourself

Together, we define the technical success criterion for your objective; we perform the analysis and diagnosis and provide you with detailed procedures; you carry out the implementation yourself

120 USD excl. VAT
per website

  • You grant us read access
  • Diagnostic and identification of the baseline measurement (step one)
  • Detailed, ready-to-apply rule and configuration proposals (step two), up to 3 iterations
  • Satisfaction guarantee: if you apply our recommendations within 5 business days and see zero improvement, we refund you via Stripe
  • Written communication only, no calls or meetings included

About

We are a team of experts specialized in Cloudflare™ and in website optimization and protection more broadly, with years of combined experience. CFGarage is a focused, productized service: we configure Cloudflare™ Free, Pro and occasionally Business plans at a fixed, transparent price, with no affiliation to Cloudflare™, Inc.