Security Level

Cloudflare's Security Level uses the threat score (IP reputation) to decide whether to present a challenge to the visitor. Once the visitor enters the correct challenge, they receive the appropriate website resources.

---

Threat score

The threat score measures IP reputation across Cloudflare services. This score is calculated based on Project Honeypot ↗, external public IP information, as well as internal threat intelligence from our WAF managed rules and DDoS.

The threat score of a request has a value from 0 to 100, where 0 indicates low risk. Values above 10 may represent spammers or bots, and values above 40 identify bad actors on the Internet.

Recommendation

Currently we do not recommend creating rules based on the threat score, since this score is no longer being populated.

Security level

Cloudflare provides I'm Under Attack! as a security level.

Cloudflare's Under Attack mode performs additional security checks to help mitigate layer 7 DDoS attacks.

When you select I'm Under Attack!, which enables Under Attack mode, Cloudflare will present a JS challenge page.

Warning

Only use Under Attack mode when a website is under a DDoS attack. Under Attack mode may affect some actions on your domain, such as your API traffic.

To set a custom security level for your API or any other part of your domain, create a configuration rule.

---