What if my client gets attacked after setup?

Our WAF rules provide a solid baseline of protection from day one. If an active attack happens later, we offer a dedicated attack mitigation service where we analyze the traffic, add targeted rules, and stop it.

Launching a Client Site?
We’ll Handle the Cloudflare Setup.

Custom v3 WAF rules, DNS, SSL, bot protection, and email records configured and verified in a single session. Flat $97 per domain. Your client never knows we were there.

Book Cloudflare Setup See what’s included ↓

TL;DR

Complete Cloudflare onboarding for a client domain. DNS migrated, SSL mode configured, WAF rules installed, and email records verified in one session.

DNS records migrated to Cloudflare
SSL mode set to Full (Strict)
Custom WAF and bot protection rules applied
SPF, DKIM, and MX records verified

$97

flat rate per domain

Book a Session

Who this is for

Web designers and agencies who want Cloudflare done right from the first day, without spending an hour in the dashboard figuring it out.

You are launching a new client site and want Cloudflare in place from day one

Setting up Cloudflare at launch is far easier than adding it later. We configure everything before traffic hits so there are no surprises post-launch.

Moving a client domain to Cloudflare for the first time

Nameserver migrations are high stakes. Wrong DNS records can take down email, break the site, or disrupt third-party services. We handle the records and verify everything before the switch.

Client is already on Cloudflare but has no rules or outdated security settings

A lot of sites land on Cloudflare with nothing configured beyond the defaults. No WAF rules, no cache rules, no bot protection. We come in, apply best practice settings, and install the v3 WAF rules so the account is actually doing something.

You want WAF rules and security in place from the start

A default Cloudflare setup with no rules is not protected. We install our custom v3 WAF rules that block the traffic patterns we see targeting WordPress and agency managed sites every day.

Email needs to keep working after the nameservers change

Email is the most common casualty of a Cloudflare migration. We verify MX, SPF, DKIM, and DMARC records before and after so delivery is not interrupted.

You want performance settings configured correctly, not left at defaults

Cache rules, browser TTL, and SSL mode all affect how fast and reliably the site loads. We set them correctly for your hosting stack so Cloudflare actually helps performance instead of causing issues.

Security first. Everything else too.

Custom v3 WAF rules and bot protection are the core of every setup. Everything else gets configured and verified before we hand it back.

DNS Records Added and Verified

We start from the Cloudflare DNS scan and cross-reference against your current registrar. Every record is rebuilt accurately. Hosting, email, third-party services all accounted for.

Bot Fight Mode Configured

Bot Fight Mode enabled and set correctly for the site. We review whether it is appropriate for the traffic type so legitimate bots like search crawlers get through while bad actors get blocked.

Custom v3 WAF Rules

Our custom v3 WAF rules target the most common threats hitting agency managed sites. Installed and tested so they block real threats without flagging legitimate visitors.

SSL/TLS Mode Set for Your Stack

The wrong SSL mode is the most common cause of redirect loops and 525 errors after a migration. We set the correct mode for your hosting environment so it does not happen.

SPF, DKIM, DMARC, and MX Verification

Email authentication records verified before and after the migration. If a basic DMARC record is missing, we add one. Email delivery stays intact through the transition.

Cache Rules and Browser TTL

Cache configured so static assets cache and dynamic pages do not. Browser TTL set to take full advantage of Cloudflare's CDN without causing stale content issues.

DNS Records Export

We hand you a clean export of all the DNS records we built so you have documentation for your files. Useful if the domain ever moves or a client asks for a copy.

Cloudflare Access for Protected Pages

Lock down staging sites, admin pages, or client portals with Cloudflare Access. Visitors must authenticate before they can reach the page. We configure the application and map it to the login gate.

Verification Before We Leave

Site loading on HTTPS, email flowing, third-party services confirmed. We do not close the session until the domain is fully on Cloudflare and operating correctly.

Already on Cloudflare?

Something broken after a Cloudflare change?

This page is for getting a domain onto Cloudflare from scratch. If the site is already on Cloudflare and something is misconfigured, broken, or not working right, our Cloudflare support service covers that instead.

See Cloudflare Support Service

Not sure if this is the right service?

Submit a request and describe your situation. We will point you to the right service and let you know what to expect.

Submit a Request

The agencies we work with. Now they’re heroes.

What agency partners say about working with us.

"I run a full scale digital marketing agency and have been using Troy for over 10 years now. Whenever we run into server, email, high level tech or website issues, he is the guy that takes care of it for us."

Jason FillerVision Fillers • Digital Marketing Agency

"As our agency grew, so did the support tickets! Troy has helped us handle DNS and firewall issues, random plugin conflicts, migrations, email authentication and more. R5 loves counting Troy as part of the team!"

Austin ReasonR5 Website Management

"Troy literally saved all my sites from an attack. His Cloudflare setup is the reason they survived. I cannot recommend him enough."

Howard SpaethH Grant Designs

"I watched my malicious login attempts drop to zero almost immediately after implementing Troy’s WAF rules. Game changer."

Craig CarusoAgency Owner

"Those moments I just love having Troy in my back pocket. When a client site is on fire and you have a timer ticking, knowing we can call someone who picks up and fixes it is everything."

Yvonne HeimannAsk YVI

"I’m comfortable with most things DNS, but when I needed to implement SPF, DKIM and DMARC records, Troy’s guidance made it straightforward."

Christian van ’t HofBrightsol

How a Cloudflare setup session works

Book and share access Book the session, then share the domain registrar login and Cloudflare account access. Tell us what hosting, email provider, and third-party services are attached to the domain so we know what to carry over.

We configure everything Nameservers updated at the registrar. DNS records rebuilt and verified. SSL mode set for your stack. Custom v3 WAF rules and bot protection installed. Email records confirmed. Cache rules configured.

We verify and hand it over Before we close the session we confirm the site is loading cleanly on HTTPS, email is flowing, and nothing is broken. We hand you a DNS records export for your files and walk away knowing everything is working.

Cloudflare Setup, done right.

Flat fee per domain. We configure everything and hand it back ready to go.

Frequently Asked Questions

Common questions about our Cloudflare setup service.

Does my client need a Cloudflare account before you start?

Yes. Cloudflare accounts should be created under the domain owner, not under our account. If your client does not have one yet, we walk you through creating it at the start of the session. We never add client domains to our own account.

Will you need access to the domain registrar?

Yes. To put the domain on Cloudflare we need to update the nameservers at the registrar. Once nameservers are pointed, everything else is configured inside the Cloudflare dashboard. We walk you through exactly what access we need before starting.

What if my client already has some DNS records set up?

We start from the Cloudflare DNS scan and cross-reference against the current registrar or the records you provide. Nothing gets deleted without verification. We rebuild them accurately and give you an export at the end.

Is this the same as Cloudflare support for fixing problems?

No. This service is for getting a domain onto Cloudflare correctly from the start. If the domain is already on Cloudflare and something is broken or misconfigured, see our Cloudflare support service instead.

What if my client gets attacked after the setup?

Our WAF rules give the site solid baseline protection from day one. If an attack happens later, we offer a dedicated Cloudflare support service where we analyze the live traffic, add targeted rules, and stop it.

Give us a call or text.

Call us directly or submit a ticket and we’ll get your setup scheduled.

757-346-1234

Mon – Fri, 9am – 5pm ET

or submit a ticket anytime

Tickets are always monitored. For questions about what is included or how to share access, submit a ticket before booking.

Submit a Support Ticket

Have a question before booking? Tell us about the domain and we’ll confirm the right service and what we need from you.

Tell us the domain, hosting stack, email provider, and what you need
We confirm scope and walk you through what access to have ready
We handle it behind the scenes. Your client never knows

Open a Support Ticket

Confidential. We never contact your clients directly.

Launching a Client Site?We’ll Handle the Cloudflare Setup.