Skip to main content

Application Security

Beyond DDoS protection, Cloudflare offers tools to protect your application from bots, abuse, and automated attacks. This module covers the free and free-limited security features available to every Cloudflare user.

What's Free

On the free plan, you get Turnstile (unlimited), Challenges, and Super Bot Fight Mode. The full WAF, API Shield, and Rate Limiting are paid features.

What You Will Learn​

LessonWhat It Covers
TurnstilePrivacy-preserving CAPTCHA alternative for bot detection
ChallengesCloudflare's challenge mechanisms — JS Challenge, Managed Challenge, and Interactive Challenge
Super Bot Fight ModeAutomated bot detection and blocking for free and Pro plans

Prerequisites​

  • Domain added to Cloudflare with proxied DNS records (Module 1)
  • Basic understanding of web forms (for Turnstile integration)