导航|地址|刷新
Managed Rules

Skip to contentDocumentation Index
Fetch the complete documentation index at: https://developers.cloudflare.com/learning-paths/llms.txt
Use this file to discover all available pages before exploring further.



DocsDirectoryAPISDKsChangelog

Search

Log in






Application Security (Learning Paths)

/





Account security


Overview

Set-up 2FA

Add and manage other members

Review active sessions

Review audit logs - v1

Audit Logs - v2 ↗Beta






Default traffic security


Overview

DDoS Protection

Browser Integrity

DNSSEC

SSL / TLS

Mutual TLS (mTLS)






Web Application Firewall


Overview

Managed Rules

Custom rules






Rate Limiting


Overview

Features

Use cases

Configurations






Lists


Overview

Features

Use cases

Configurations






Security Center


Overview

Security Insights

Brand Protection






Agent resources


Agent setup ↗

Cloudflare Skills ↗

Code Mode MCP Server ↗

Domain-specific MCP Servers ↗MCP

Learning Paths llms.txt ↗

Learning Paths llms-full.txt ↗

Cloudflare Docs llms.txt ↗

Cloudflare Docs llms-full.txt ↗













Home

/Learning Paths

/…
Application Security


/Web Application Firewall

/Managed Rules



Managed Rules


Last updated Apr 23, 2026|Copy as Markdown|View as Markdown|Agent setup

OverviewRulesets




Cloudflare provides pre-configured managed rulesets that protect against web application exploits such as the following:

Zero-day vulnerabilities

Top-10 attack techniques

Use of stolen/leaked credentials

Extraction of sensitive data

Managed rulesets are regularly updated. Each rule has a default action that varies according to the severity of the rule. You can adjust the behavior of specific rules, choosing from several possible actions.

Rules of managed rulesets have associated tags (such as wordpress) that allow you to search for a specific group of rules and configure them in bulk.


Rulesets


By default, Cloudflare offers the following rulesets:

Cloudflare Managed Ruleset

Cloudflare OWASP Core Ruleset

Cloudflare Exposed Credentials Check Managed Ruleset


PreviousOverviewNextCustom rules


Was this helpful?

YesNo

Edit pageReport issue




On this page

Overview

Rulesets


Edit pageReport issue














Getting started
PlansContact salesPartnersFind a partnerStartupsUnder attack?Domain name search


Company
AboutCareersInvestorsPressPress kitGlobal network




Public interest
Project GalileoAthenian ProjectCloudflare for CampaignsProject FairshotImpact/ESG


Compliance
Compliance resourcesTrust HubData ProtectionResponsible AITransparency reportReport abuse




Resources
App innovation reportCloudflare RadarCase studiesStatusSupportEventsBlog


Developers
DocumentationLearning centerCommunity




Solutions
SSE and SASE platformCloudflare AI CloudAI SecurityFrontend Development PlatformMulti-Tenant Platform DevelopmentWeb Security Platform


Start BuildingLog In












© 2026 Cloudflare, Inc.

Privacy policy|Report security issues|Terms of use|Trademark
|
Your privacy choices








Docs




------
导航页 打开网址