Security Blog
Posted By Gregory

Cloudflare and WP Cerber

How to make them play nice together on your WordPress


If your site is behind the Cloudflare proxy service and your WordPress is protected by the WP Cerber plugin, you have to do two things to let them work well together.

  1. Enable My site is behind a reverse proxy on the Main Settings page.
  2. If you have configured the Custom login URL, you have to exclude it from caching by Cloudflare’s servers. Do that by adding a rule on the Page Rules settings page in your Cloudflare account settings as described here: https://support.cloudflare.com/hc/en-us/articles/200172316-How-do-I-exclude-a-specific-URL-from-CloudFlare-s-caching-

Integration with the Cloudflare firewall

Consider using an optional Cloudflare add-on to synchronize locked out malicious IP addresses and access-lists entries with the Cloudflare cloud-based firewall.

Have any questions?

If you have a question regarding WordPress security or WP Cerber, leave them in the comments section below or get them answered here: G2.COM/WPCerber.


I'm a team lead in Cerber Tech. I'm a software & database architect, WordPress - PHP - SQL - JavaScript developer. I started coding in 1993 on IBM System/370 (yeah, that was amazing days) and today software engineering at Cerber Tech is how I make my living. I've taught to have high standards for myself as well as using them in developing software solutions.

View Comments