Skip to content
Merged
Show file tree
Hide file tree
Changes from 4 commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 2 additions & 4 deletions src/content/docs/waf/tools/security-level.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -6,12 +6,10 @@ title: Security Level

import { Render } from "~/components";

<Render file="security-level-description" product="waf" />

---
<Render file="security-level-scores" product="waf" />

<Render file="threat-score-definition" product="waf" />

<Render file="security-level-scores" product="waf" />


---
4 changes: 2 additions & 2 deletions src/content/fields/index.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -602,9 +602,9 @@ entries:
data_type: Number
categories: [Request]
keywords: [request, cloudflare, score, client, visitor]
summary: Represents a Cloudflare threat score from 0–100, where 0 indicates low risk.
summary: Represents a Cloudflare threat score.
description: |-
Values above 10 may represent spammers or bots, and values above 40 identify bad actors on the Internet. It is rare to see values above 60. A common recommendation is to challenge requests with a score above 10 and to block those above 50.
Threat score is defaulted to `0`.

- name: cf.tls_cipher
data_type: String
Expand Down
4 changes: 1 addition & 3 deletions src/content/partials/waf/security-level-scores.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -2,9 +2,7 @@
{}
---

## Security level

Cloudflare provides _I'm Under Attack!_ as a security level.
Cloudflare provides _Always protected_ and _I'm Under Attack!_ as security levels.

Cloudflare's Under Attack mode performs additional security checks to help mitigate layer 7 DDoS attacks.

Expand Down
4 changes: 1 addition & 3 deletions src/content/partials/waf/threat-score-definition.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -4,9 +4,7 @@

## Threat score

The threat score measures IP reputation across Cloudflare services. This score is calculated based on [Project Honeypot](https://www.projecthoneypot.org/), external public IP information, as well as internal threat intelligence from our [WAF managed rules](/waf/reference/legacy/old-waf-managed-rules/) and [DDoS](/ddos-protection/about/).

The threat score of a request has a value from 0 to 100, where 0 indicates low risk. Values above 10 may represent spammers or bots, and values above 40 identify bad actors on the Internet.
Previously, a threat score represented a Cloudflare threat score from 0–100, where 0 indicates low risk. Now, the threat score is always `0` (zero).

:::note[Recommendation]
Currently we do not recommend creating rules based on the threat score, since this score is no longer being populated.
Expand Down
Loading