Shed Turnstile vs Cloud Maestro – WAF Security Suite for Cloudflare

Shed Turnstile provides centralized management of Cloudflare Turnstile Site Key and Secret Key, offering a shared API for compatible plugins such as Shed Form. Features: Centralized Site Key / Secret Key management API functions callable from other plugins Turnstile widget rendering helper Server-side token verification API Functions shedturn_is_configured() — Check if keys are configured shedturn_render_widget( $args ) — Return widget HTML shedturn_verify_token( $token, $ip ) — Verify a Turnstile token shedturn_enqueue_script() — Enqueue Cloudflare JS 日本語の説明 Shed Turnstile は Cloudflare Turnstile の Site Key / Secret Key を一元管理し、Shed Form などの対応プラグインに共通の API を提供します。 主な機能: Site Key / Secret Key の一元管理 他プラグインから呼び出せる API 関数 Turnstile ウィジェットの描画ヘルパー トークンのサーバーサイド検証 Third-Party Services This plugin connects to Cloudflare’s servers for Turnstile verification. Service: Cloudflare Turnstile Privacy Policy: https://www.cloudflare.com/privacypolicy/ Terms of Service: https://www.cloudflare.com/website-terms/ Data sent: Turnstile token, site key, user IP address When: Each time a form with Turnstile enabled is submitted

Cloud Maestro brings centralized Cloudflare Web Application Firewall (WAF) controls directly into WordPress. Why would I use a plugin when I can create rules in Cloudflare? If you manage multiple Cloudflare-connected sites, Cloud Maestro is a productivity tool that helps oversee several domains from a central dashboard using WordPress. If you only manage one domain in Cloudflare, you wouldn’t benefit from this plugin. It’s useful for someone managing: – Their own sites and client sites – Multiple businesses – Separate Cloudflare accounts People like using Cloud Maestro because configuring security rules one domain at a time is inefficient and error-prone. It allows you to configure WAF rules once and deploy them consistently across all domains in your Cloudflare account — instantly. The free version supports one Cloudflare account with multiple domains. An optional premium version is available for managing unlimited domains across multiple Cloudflare accounts at once. 🛡️ Why Use Cloud Maestro – WAF Security Suite for Cloudflare? Managing security rules across multiple Cloudflare domains is tedious and time-consuming. This plugin streamlines the process, allowing you to: Deploy in One Click – Apply comprehensive WAF rules to multiple domains simultaneously Save Time – No more manually configuring rules on each domain, one at a time Enterprise Security – Protect against bots, aggressive crawlers, malicious IPs, and common threats Reduce Mistakes – Maintain consistent security rules across domains ✅ Free Standard Features One Cloudflare account Multiple domains One-click WAF rule deployment Centralized Cloudflare controls Secure API credential storage (AES-256-CBC encryption) Plugin updates The free plugin does not require an upgrade. 🔥 What Gets Protected The plugin deploys 3 optimized trusted security rules (prior versions used 5) that work together to protect your sites: Good Bot Allowlist – Ensures legitimate bots (Google, Bing, monitoring tools) can access your site Managed Challenges for Suspicious Traffic – Automatically challenges requests from certain ASNs and non-US traffic Aggressive Crawler Protection – Blocks unauthorized crawlers and bots (Yandex, Semrush, Ahrefs, etc.) VPN & Login Protection – Adds extra challenges for VPN traffic and WordPress login attempts Block Known Threats – Automatically blocks web hosts, malicious IPs, TOR nodes, and attack vectors ✨ Premium Upgrade (Optional) For agencies and professionals managing multiple Cloudflare accounts, a Premium version is available with expanded functionality and tech support. Check out our free trial for these features: Multi-Account Management – Automatically manage domains across ALL your Cloudflare accounts Easy Bot Whitelisting – Built-in checkboxes for 50+ trusted services across 8 categories Custom User Agents – Add your own user agent strings to the Good Bot Rule Custom IP Whitelisting – Add trusted IP addresses to the Goot Bot Rule IP Rules management – View and edit Cloudflare’s IP Rules that block or allow access even before hitting WAF rules (and we are working on connecting to fail2ban and Wordfence blocks) Bulk DNS Management – Search and manage DNS records across all domains, bulk migrate IP addresses, CNAME targets, and convert A records to CNAME with a single action Priority Support – Get expert help when you need it Advanced Customization – Fine-tune rules to match your exact requirements Multi-Account Management – Centrally manage unlimited domains across all your Cloudflare accounts 📋 Important Information Rule Replacement: This plugin replaces existing custom WAF rules on targeted domains. Make sure to back up any custom rules you want to keep. Compatibility: Works with Cloudflare Free, Pro, and Business plans. Not compatible with Enterprise plans managed by hosting providers. Service Monitoring: These rules might challenge some monitoring or uptime services. Check Cloudflare’s Events log if services stop connecting, and add exceptions as needed.