I have two websites that are proxied, both with Free Plan. I carried out a waf-detect test on both sites, but with different results. Only one website showed active waf. Expected behavior? Has anyone already performed this test?
Do both sites have the same WAF settings & rules?
Yes, same settings & rules.
I used another tool to perform waf-detect and it worked. Both sites detected WAF.
detected WAF may be overstating it. There are certainly some default rules in place, but the Cloudflare WAF is a paid plan option.
This topic was automatically closed 3 days after the last reply. New replies are no longer allowed.