Cloudflare for websites, online stores and web applications
We set up and manage Cloudflare so your site is faster, better protected and easier to run: from DNS and SSL to WAF, caching, Workers, R2 and Zero Trust. We work with WordPress, WooCommerce and custom applications.
What you get
- An audit of your current setup
- A plan of changes ranked by priority and risk
- Rollout without site downtime
- Documentation of every rule
- Monitoring after the changes
What we set up in Cloudflare
Cloudflare has dozens of products. We set up the ones that solve a specific problem for your site.
DNS and domains
We move your DNS zone to Cloudflare without downtime and organise the records for the site, email and external services.
- DNS zone migration with every record checked
- DNSSEC
- SPF, DKIM and DMARC for email
- Domain transfers to Cloudflare Registrar
Example
A zone with dozens of records for email, CRM and marketing tools is moved without losing a single message.
SSL/TLS and secure connections
We configure encryption between the visitor, Cloudflare and your server correctly, without redirect loops or mixed content.
- Full (strict) mode with an Origin certificate
- HSTS and a minimum TLS version
- Authenticated Origin Pulls
- Automatic redirect to HTTPS
Example
A site stuck in a redirect loop after SSL was turned on: we change the mode, issue an Origin certificate and the site loads normally again.
WAF and attack protection
We build rules that stop attacks before they reach your server, without getting in the way of real visitors.
- Managed Rules against known vulnerabilities
- Custom rules by country, ASN and URL
- Rate limiting for logins, forms and APIs
- DDoS protection
Example
We limit login attempts on wp-login.php, block xmlrpc.php and challenge only suspicious traffic.
Bots and AI crawlers
We control which bots can reach your site: search engines, AI crawlers, scrapers and spam.
- Bot Fight Mode and Super Bot Fight Mode
- AI Crawl Control for GPTBot, ClaudeBot and others
- Turnstile instead of reCAPTCHA on forms
- Access for verified search engine bots
Example
An online store hit by thousands of scraper requests: we stop them while Googlebot and Bingbot keep crawling without limits.
Caching and performance
We cache content close to your visitors and reduce server load, without caching personal data.
- Cache Rules for HTML and static files
- APO for WordPress
- Tiered Cache and Cache Reserve
- HTTP/3, Early Hints and image optimisation
Example
A WooCommerce store where the catalogue is served from cache, while the cart, checkout and account always show live data.
Rules and redirects
We manage redirects and request changes in Cloudflare, before traffic reaches your site.
- Redirect Rules and Bulk Redirects
- Transform Rules for URLs and HTTP headers
- Moving from Page Rules to the new rules engine
- Redirects by country and language
Example
Thousands of 301 redirects after a site migration, managed in Bulk Redirects instead of a plugin that slows down every request.
Workers and edge logic
We write code that runs on Cloudflare’s network, close to your visitors, without adding load to your server.
- Cloudflare Workers
- Workers KV and D1 for data
- Cron Triggers for scheduled jobs
- Front-end apps built with Vue.js and React
Example
Country-based redirects to another domain without plugins, A/B tests and API proxies that run before the request reaches WordPress.
R2 and file storage
We store media, backups and documents in R2, with no egress fees.
- R2 for the media library
- Off-server site backups
- Signed URLs for protected files
- Cloudflare Images for resizing and optimisation
Example
A large media library moves to R2, the server gets lighter and files are delivered through Cloudflare’s network.
Zero Trust, Access and Tunnel
We protect admin panels, staging sites and internal tools without exposing them publicly.
- Cloudflare Access with email code or SSO login
- Protection for /wp-admin and staging sites
- Cloudflare Tunnel with no open ports
- Access rules by role and device
Example
Your staging site and internal CRM are available only to your staff, after signing in with a company email.
Email, analytics and monitoring
We round off the setup with tools that show what is happening with your site and domain.
- Email Routing for your domain addresses
- Cookie-free Web Analytics
- Health Checks and alerts when something fails
- Analysis of WAF and cache events
Example
The office@ and sales@ addresses forward to your team’s inboxes, with no separate mail service for them.
Typical cases
Problems people often bring to us and how we solve them with Cloudflare.
The site is under attack
ProblemThousands of requests to the login form overload the server.
SolutionWAF rules, rate limiting and a challenge only for suspicious traffic.
A slow online store
ProblemThe catalogue loads slowly during peak hours.
SolutionCache Rules, Tiered Cache and rules that never cache the cart or account.
Domain change
ProblemThousands of old URLs must lead to the new ones without losing rankings.
SolutionBulk Redirects with a redirect map and checks after the switch.
Internal tool without a VPN
ProblemThe team needs to reach an internal system from different locations.
SolutionCloudflare Access and Tunnel with company email login.
A full server disk
ProblemMedia files take up most of the hosting space.
SolutionMoving the files to R2 and serving them through Cloudflare.
Spam in forms
ProblemForms receive hundreds of fake submissions every day.
SolutionTurnstile instead of reCAPTCHA, plus bot rules.
How we work with Cloudflare
Every change in Cloudflare affects all traffic to your site, so we work carefully and in stages.
Audit
We review DNS, SSL, rules, cache and security events.
Plan
We rank the changes by priority and risk.
Rollout
We make the changes in stages and check the site after each one.
Monitoring
We watch the WAF, cache and errors after the changes.
Documentation
We document every rule, so you know what is set up and why.
Moving to Cloudflare without downtime
We prepare the zone in advance, compare the records with your current provider and switch the nameservers at the right time.
- A full copy of the DNS records before the switch
- Checks of MX, SPF, DKIM and DMARC for email
- An active SSL certificate before the cutover
- Cache rules that protect the cart and account
- Site and email checks after the switch
Questions about Cloudflare
Cannot find your answer? Write to us and we will reply personally.
Cloudflare is a trademark of Cloudflare, Inc. Pixadoro is not affiliated with Cloudflare, Inc.
Is the free Cloudflare plan enough?
For most sites the free plan covers DNS, SSL, basic protection and caching. Paid plans add more WAF rules, image optimisation and advanced bot protection. We recommend a plan based on your traffic and the risks of the project.
Will there be downtime when we move to Cloudflare?
We prepare the DNS zone in advance and check every record, including the email records. With proper preparation, the nameserver switch happens without downtime for visitors.
Does Cloudflare work with WooCommerce?
Yes, with the right cache rules. The catalogue is served from cache, while the cart, checkout and customer account are never cached.
Can Cloudflare block Google or other useful bots?
Cloudflare recognises verified search engine bots. We set up the rules so they do not interfere with indexing, and we monitor events after every change.
Do we need to change hosting?
No. Cloudflare sits in front of your existing hosting. If the server is the reason the site is slow, we will tell you.
Can you take on a single task?
Yes. For example just redirects, login form protection, a Workers script or your email DNS records.
What access do you need?
An invitation to your Cloudflare account with a role limited to the domains and permissions we need. You do not need to share your password.
