Speed and protection with no server to administer
Cloudflare Services
We put Cloudflare in front of your site so content is served from the point nearest the visitor and malicious traffic never reaches your server.
Included
What this service covers
Cloudflare installs in minutes and is misconfigured almost every time: rules that block real customers, caching that serves stale pages, certificates half migrated. The work is in the configuration, not the activation. We review what should and shouldn’t be cached, tune the rules against real traffic, and document what each one does so nobody is afraid to touch them later.
- A delivery network serving your site from the point nearest each visitor
- Security rules tuned against your real traffic
- Certificates configured and renewed automatically
- Cache rules reviewed section by section
- Cloudflare Workers for logic that runs at the edge
- Documentation of what each rule does and why it is there
What it’s for
What changes in your operation
- 01
Just as fast far from your city
Content is served from the network point closest to whoever visits, so distance to the server stops mattering.
- 02
Malicious traffic never reaches your server
Attacks and bots are filtered ahead of it, so your server only serves real visitors.
- 03
Without blocking real customers
Rules are tuned against real traffic before being enforced. An aggressive configuration blocks purchases and nobody finds out.
- 04
Less load, less cost
What the network serves your server never processes, so more visits are sustained without paying for more infrastructure.
The costliest mistake
Switching Cloudflare on and calling it configured
It turns on in ten minutes, and that is precisely the trap. Default rules cache things they should not, and one badly set security rule blocks purchases without a single error appearing anywhere.
- What usually happens
- It is switched on, the site loads, and nobody looks again.
- What we do instead
- Rules are tuned against real traffic before being enforced, and what each one does is written down.
How the work goes
From the first call to production
The same process on every project, whatever the size.
- 01
Review what's there
We go through the current configuration, the certificates and the inherited rules nobody remembers adding.
- 02
Cache
We define what is stored, for how long and what must never be stored, so nobody sees stale pages or another session's data.
- 03
Security
Rules are switched on in observation mode, we check who they would have blocked, and only then are they enforced.
- 04
Documentation
What each rule does is written down, so whoever comes next can change them without fear.
When it applies
Situations this service solves
If one of these sounds familiar, this is probably the service you’re after.
You get visitors from several countries and the site drags in some
The delivery network brings content closer to each region without standing up new servers.
You were attacked and don't know what to do
Traffic is filtered before it reaches the server, and the rules that stop it happening again are left in place.
The site shows old content after you update it
That is badly set cache rules; they get fixed and documented so it does not come back.
Plans
What it costs
Prices in US dollars, with the scope written down. If your case fits none of them, that is what the last plan is for.
Configuration
Cloudflare properly set in front of your site, not merely switched on.
$750one-time
Includes · 6
- DNS, certificate and automatic renewal
- Cache rules reviewed section by section
- Compression, images and delivery optimisation
- Redirects and cleanup of inherited rules
- Speed measured before and after, by region
- Documentation of what each rule does
Protection
Rules tuned against your real traffic, without blocking your customers.
$1,600one-time
Includes · 6
- Everything in configuration
- Web application firewall tuned against your traffic
- Bot filtering and per-route rate limits
- Protection for the admin panel and the login
- Turnstile on forms, with no captchas for your customers
- Report of what was blocked and a review after two weeks
Edge logic
Logic running on the network, closer to the visitor than your server is.
$3,600one-time
Includes · 5
- Workers for redirects, A/B tests or APIs
- Per-route caching with automatic purge on publish
- Edge storage for frequently read data
- Integration with your deployment process
- Edge error monitoring with alerts
Custom
Several domains, high traffic or compliance requirements.
Based on scope
Includes · 4
- Several zones and domains under one policy
- Rules by country or by traffic type
- Logs pushed to your analytics system
- Support during incidents
Whatever Cloudflare plan your traffic needs is purchased in your own account. Before you buy it we tell you which one is required and why; in most cases the work is in the configuration, not in the licence.
Seasonal pricing, subject to change. The price in your proposal is fixed from the moment you receive it. In USD, local taxes not included.
Also
Services that usually go together
Next step
Which of these do you need?
If you’re not sure, that’s fine too: the first call defines the scope before anyone talks about price.