Security Blog

Blocking Access to Deployment Previews and app pages dev Domains in Cloudflare Pages
Cloudflare Security Pages

Blocking Access to Deployment Previews and app.pages.dev Domains in Cloudflare Pages

After creating my first Cloudflare Pages application, I wanted to ensure that access to the app.pages.dev URL and all deployment preview URLs was restricted. Unfortunately, these options don't currently exist on the Pages applications themselves so a few workarounds are necessary.

Read Article
Securing a Site With a Cloudflare Client Certificate and mTLS
Cloudflare Security

Securing a Site With a Cloudflare Client Certificate and mTLS

When a website required limited access, I needed a way to lock it down to specific physical devices. I couldn't rely on IP addresses which might change regularly, and while a strong password requirement might be sufficient I wanted something a little more secure. Not to mention that it shouldn't be crawled by any search engines either. The solution was a Cloudflare client certificate and mTLS firewall rule.

Read Article