by
5 Star Plugins (Rob)
5 (4 reviews)
Cloud Maestro – WAF Security Suite for Cloudflare
Bulk deploy powerful WAF security rules to multiple Cloudflare domains with one click. Protect your sites from bots, malicious traffic, and threats.
Cloud Maestro ranks #18,568 among WordPress.org plugins with 70+ active installations, is #1,041 of 4,566 in the Security category, a 5/5 rating from 4 reviews, and was last updated Aug 28, 2026. Data from WordPress.org, refreshed twice daily — see methodology.
Compatible with WP 7.1.2
v1.4.2
Current Version v1.4.2
Updated 3 weeks ago
Last Update on 28 Aug, 2026
Refreshed 11 hours ago
Last Refreshed on
#1,041 of 4,566 in Security
Top 25% by installs
Downloads -47.5% this week
Actively maintained
Rank
#18,568
—
No change
Active Installs
70+
-4.1%
KW Avg Position
52.3
3.3 worse
Downloads
1.9K
+1 today
Support Resolved
100%
—
No change
Rating
100%
Review 5 out of 5
5
(4 reviews)
Next Milestone 80
70+
80+
1,111
Ranks to Climb
-
Growth Needed
8,000,000
Active Installs
Pro
Unlock Exact Install Count
See the precise estimated active installs for this plugin, calculated from real-time ranking data.
- Exact install estimates within tiers
- Track install growth over time
- Milestone progress predictions
Need 6 more installs to reach 80+
Rank Changes
Current
#18,568
Change
Best
#
Downloads Growth
Downloads
Growth
Peak
Upgrade to Pro
Unlock 30-day, 90-day, and yearly download history charts with a Pro subscription.
Upgrade NowReviews & Ratings
5.0
4 reviews
Overall
100%
5
4
(100%)
4
0
(0%)
3
0
(0%)
2
0
(0%)
1
0
(0%)
Support Threads Overview
Resolved
Unresolved
1
Total Threads
1
Resolved
0
Unresolved
100%
Resolution Rate
Track This Plugin
Get detailed analytics, keyword tracking, and position alerts delivered to your inbox.
Start Tracking FreePlugin Details
- Version
- 1.4.2
- Last Updated
- Aug 28, 2026
- Requires WP
- 6.0+
- Tested Up To
- 7.1.2
- PHP Version
- 7.4 or higher
- Author
- 5 Star Plugins (Rob)
Support & Rating
- Rating
- ★ ★ ★ ★ ★ 5
- Reviews
- 4
- Support Threads
- 1
- Resolved
- 100%
Keywords
Upgrade to Pro
Unlock keyword rankings, search positions, and detailed analytics with a Pro subscription.
Upgrade NowSimilar Plugins
Adminify – White Label, Admin Menu Editor, Login Customizer
6K+ installs
#2,760
Master Addons for Elementor – Elementor Addons, Widgets, Mega Menu Builder, Popup Builder, Widget Builder & Template Kits
30K+ installs
#1,009
LiteSpeed Cache
7M+ installs
#5
Akismet Anti-spam: Spam Protection
5M+ installs
#8
Wordfence Security - Firewall, Malware Scan, and Login Security
5M+ installs
#11
Really Simple Security - Simple and Performant Security (formerly Really Simple SSL)
3M+ installs
#17
Hostinger Tools
3M+ installs
#20
WPS Hide Login
2M+ installs
#27
Limit Login Attempts Security - Login Security, 2FA, Firewall, Brute Force Prevention
1M+ installs
#33
WP Super Cache
1M+ installs
#37
Frequently Asked Questions
Common questions about Cloud Maestro – WAF Security Suite for Cloudflare
1. Install Once - You only need to install the plugin to one site to manage all of your Cloudflare-connected domains 2. Connect Your Cloudflare Account – Securely enter your API credentials (encrypted and stored safely) 3. Select Your Domains – View all domains in your account with convenient checkboxes 4. Deploy Rules – Click once to apply proven security rules across all selected domains 5. Stay Protected – Your sites are now shielded from thousands of common threats and malicious or resource-hungry traffic
Yes, this plugin replaces the custom WAF rules in your Cloudflare configuration. Any existing custom rules will be overwritten. The plugin does not affect Cloudflare's managed rulesets or other settings—only custom WAF rules.
Yes. It uses API Tokens that are stored encrypted using AES-256-CBC (bank-level encryption) securely within WordPress. For additional security, it has a Settings Expiration timer that automatically deletes the API settings, or manually using the "Delete Settings" button when you're not actively managing rules.
No. The free version works independently and includes centralized WAF rule deployment for one Cloudflare account with multiple domains. The free version is ideal for managing up to 25 domains under one Cloudflare account. Premium expands this to multiple Cloudflare accounts and unlimited domains for agencies and professionals. Additionally, powerful customization options are available, including built-in bot whitelisting, custom user agents, custom IP addresses, and the IP Rules Manager.
This plugin is designed for Cloudflare Free, Pro, and Business plans. WAF features depend on Cloudflare’s plan limitations. Enterprise plans typically have different WAF rule management and may be controlled by your hosting provider, so this plugin may not be compatible.
No. The first rule explicitly allows verified bots from major search engines (Google, Bing), monitoring services, and other legitimate services. The Premium version offers even more control with 50+ built-in trusted services you can whitelist.
If you notice a service can't connect after applying rules, check Cloudflare's Events log to see what was blocked. You can then add that service's user agent or IP to the allowlist. Premium users can do this directly in the plugin with custom user agents and IP fields.
Yes! Developers can use WordPress filter hooks to customize or completely replace each rule expression. The plugin provides three filters: fivestar_cfwaf_good_bot_expression, fivestar_cfwaf_managed_challenge_expression, and fivestar_cfwaf_block_expression. Add your custom code to your theme's functions.php, a code snippet, or a custom plugin. For documentation and examples, visit our support site. You can also more easily add 50+ pre-configured service user agents across 8 categories via the Premium version, which offers simple checkbox selection, and custom text fields to add your own user agents or IPs as desired, and saves those settings for repeated use. Fair Use Disclaimer: This plugin is independent and not affiliated, endorsed, or sponsored by Cloudflare®. Trademarks are used under fair use for compatibility and functionality only. No endorsement is implied. This plugin was inspired in part by Troy Glancy’s WAF Rules v3.
