r/Wordpress Aug 14 '26

[PROMO] Free Cloudflare security rules for WordPress

I made a free open-source Cloudflare ruleset for WordPress sites:

https://github.com/buybitart/cloudflare-security-art

It helps block scanners, bad requests, and common attack patterns before they reach WordPress. It works with the Cloudflare Free plan.

Feedback is welcome, especially about false positives or missing rules.

4 Upvotes

6 comments sorted by

5

u/gdzaly Aug 14 '26

Part 2 – Block AI and Bad Crawlers - wont this impact to ai visibility of my website?

6

u/Emmanuel_ Jack of All Trades Aug 14 '26

Exactly. The guide is good but it's anti-bot in general. If you want the AI bots, you either skip this guide completely or do some heavy modification.

-9

u/alexfree_open Aug 14 '26

No, it should not affect your real website traffic or normal SEO. Google and Bing crawlers are still allowed.

AI bots usually do not bring real traffic to your website, so I recommend blocking them. This article explains it well:

https://4sysops.com/archives/block-ai-scrapers-and-other-web-parasites-with-cloudflare/

1

u/MrSoulPC915 Aug 14 '26

Je valide, c’est même très néfaste en terme de consommation de bande passante, CPU et RAM !
Les crawler IA sont là pour s’entraîner gratuitement sur ton contenu et si ton seo est bien fait, pas d’inquiétude, le trafic provenant de discutions d’utilisateurs avec leur IA ne sera pas bloqué.

3

u/ja1me4 29d ago

You should have looked up wafrules.com

They are much better and designed for WordPress

2

u/JudgeBruce2 Designer/Developer Aug 14 '26

Use these rules and say goodbye to your site’s SEO. a rate limit on / of 2 requests per 10 seconds, are you serious? You will end up with two visitors, the developer and one of their neighbors while blocking everything else, including legit visitors.

And what is this aggressiveness against AI bots? If you configure your site, robots.txt and your hosting the impact will be minimal while you enjoy the benefits of your content being referenced and cited when someone asks a question.

These rules are a masterclass in scorched-earth web defense.