# Cloudflare Security

> Use when working with Cloudflare security products: WAF, DDoS protection, Bot Management, API Shield, Turnstile, Rules, Ruleset Engine, firewall rules, network firewall, client-side security, challenges, DMARC, or security troubleshooting.

- Skill: `wenerme/cloudflare-security` (Agent Skill, multi-file: 1022 files)
- Install (CLI): `npx skillmds@latest add wenerme/cloudflare-security`
- Raw SKILL.md: https://api.skillmd.com/api/skills/wenerme/cloudflare-security/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: wenerme (https://skillmd.com/u/wenerme)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/wenerme/cloudflare-security

---


# Cloudflare Security Docs

Official Cloudflare developer docs fetched from [developers.cloudflare.com](https://developers.cloudflare.com), focused on security, rules, bot protection, and application/network defense.

## Hard Rules

- MUST search `references/` before giving ruleset, WAF, DDoS, Bot, Turnstile, API Shield, or firewall syntax and behavior.
- MUST distinguish security rules from caching/routing/networking behavior; use `cloudflare-networking` for DNS/TLS/cache/load-balancing.
- NEVER invent expression syntax, phase names, ruleset IDs, challenge behavior, bot score meanings, or WAF managed rule behavior.

## Fast Lookup

```bash
rg -n "WAF|DDoS|Bot|Turnstile|API Shield|challenge" skills/cloudflare-security/references
rg -n "Ruleset Engine|ruleset|phase|expression|firewall" skills/cloudflare-security/references
rg -n "client-side security|DMARC|security center" skills/cloudflare-security/references
```

## Reference Map

- `references/waf/` — Web Application Firewall.
- `references/ddos-protection/` — DDoS protection.
- `references/bots/` — Bot products.
- `references/api-shield/` — API Shield.
- `references/turnstile/` — Turnstile.
- `references/rules/` and `references/ruleset-engine/` — Rules and Ruleset Engine.
- `references/firewall/` and `references/cloudflare-network-firewall/` — firewall products.
- `references/client-side-security/`, `security-center/`, `security/` — additional security docs.