Documentation Index
Fetch the complete documentation index at: https://docs.ahq.lat/waf/llms.txt
Use this file to discover all available pages before exploring further.

Skip to content

Select theme

No results found. Try a different search term, or use our .

Overview
Get started
Concepts
Traffic detections
- Overview
- Attack score
- Leaked credentials
  
  Overview
  Get started
  Common API calls
  Terraform examples
  Example mitigation rules
- Malicious uploads
  
  Overview
  Get started
  Example rules
  Common API calls
  Terraform examples
- AI Security for Apps
  
  Overview
  Get started
  PII detection
  Unsafe and custom topic detection
  Prompt injection detection
  Token counting
  Example mitigation rules
  Log mode vs production mode
  Available fields
- Bot score ↗
Custom rules
Rate limiting rules
Managed rules
- Overview
- Deploy in the dashboard
- Deploy via API
- Deploy using Terraform ↗
- Troubleshooting
- Create exceptions
  
  Overview
  Add an exception in the dashboard
  Add an exception via API
- Log the payload of matched rules
  
  Overview
  Configure in the dashboard
  View the payload content in the dashboard
  Configure via API
  Store decrypted matched payloads in logs
  
  Command-line operations
  
  Overview
  Generate a key pair
  Decrypt the payload content
- Check for exposed credentials Deprecated
  
  Overview
  How it works
  Configure via API
  Configure using Terraform
  Test your configuration
  Monitor exposed credentials events
  Upgrade to leaked credentials detection
- Rulesets reference
  
  Cloudflare Managed Ruleset
  
  Cloudflare OWASP Core Ruleset
  
  Overview
  Concepts
  Evaluation example
  Configure in the dashboard
  Configure via API
  Configure in Terraform ↗
  
  Cloudflare Exposed Credentials Check Managed Ruleset Deprecated
  Cloudflare Sensitive Data Detection
Additional tools
- Lists
  
  Overview
  Custom lists
  Bulk Redirect Lists ↗
  Managed Lists
  Create in the dashboard
  Use lists in expressions
  
  Lists API
  
  Overview
  JSON object
  Endpoints
- IP Access rules
  
  Overview
  Create a rule
  Parameters
  Actions
- Scrape Shield
  
  Overview
  Email Address Obfuscation
  Hotlink Protection
- User Agent Blocking
- Zone Lockdown
- Browser Integrity Check
- Enable security.txt ↗
- Privacy Pass
- Replace insecure JS libraries
- Security Level
- Validation checks
Account-level configuration
- Overview
- Custom rulesets
  
  Overview
  Use the dashboard
  Use the API
  Use Terraform ↗
- Rate limiting rulesets
  
  Overview
  Create in the dashboard
  Create via API
  Create using Terraform ↗
- Managed rulesets
  
  Overview
  Deploy in the dashboard
  Deploy via API
  Deploy using Terraform ↗
  Create exceptions ↗
Analytics
- Security Analytics
- Security Events
Security features interoperability
Reference
- Alerts
- Phases
- Legacy features
  
  WAF managed rules (previous version)
  
  Overview
  Troubleshooting
  WAF managed rules upgrade
  
  Rate Limiting (previous version)
  
  Overview
  Troubleshooting
  Rate limiting upgrade
  
  Firewall rules ↗
  Firewall rules upgrade
Troubleshooting
Glossary
Changelog
Agent resources

Select theme

On this page

Overview

On this page

Overview

Directory
WAF
Managed Rules
Rulesets reference

Rulesets reference

| View as Markdown | |

Cloudflare Managed Ruleset
Cloudflare OWASP Core Ruleset
Cloudflare Exposed Credentials Check Managed Ruleset
Cloudflare Sensitive Data Detection

Last updated: Jun 4, 2026