Hardening part 2

Secure Cloudflare

  • Enable WAF managed rules for your hostname
  • Set up rate limiting rules for login endpoints
  • Use Cloudflare Access to put SSO/MFA in front of anything semi-private
  • Turn on Bot Fight Mode in your zone settings