Protect your website from attacks with Cloudflare

Your website stays online during attacks, your contact form brings real inquiries instead of spam, and Google and ChatGPT still find you.

Works with your website on

Cloudflare checks every request, your customers notice nothing

One minute on your-company.com in Cloudflare's log. Customers, Google and ChatGPT get through, bots stay out.

Security eventsyour-company.com, the last minute
TimeWhoPageResult
09:41:02Visitor/servicesallowed
09:41:05Googlebot/servicesallowed
09:41:07Password bot/wp-login.phpblocked
09:41:09OAI-SearchBot/aboutallowed
09:41:12Form bot/contactfiltered
09:41:15PerplexityBot/blogallowed
09:41:18Requests every second/slowed
09:41:20Visitor/contactallowed

When Cloudflare stops an attack, your team gets an email.

Example. This is how the entries look in your Cloudflare dashboard under Security, Events.

Signs that bots are dragging your website down

If one of these sounds familiar, bots are already crawling your site and doing nothing for you.

  • Your contact form receives messages no person wrote.

  • The site is slow at times, without more customers coming.

  • Your visitor numbers spike on single days.

  • Your host reports high usage or sends a bigger bill.

A workshop website that shrugs off attacks

Leather workshop · Bremen, Germany

Customers find the workshop, attacks never reach the website

Before
The old website was an export from 2021. It had run unchanged for years and was reachable twice, with and without www.
Now
Today it runs behind Cloudflare. Attacks get stuck there, while customers and Google get through without a hurdle.
Caught
about one in three requests
Period
calendar weeks 32 to 44, 2026
See the whole project
“Chris and I have been working together frequently for over a year and every time he delivers flawlessly. Extremely responsive (often within seconds), knowledgable, ethical and quick.”
Tomáš MrázekClientReview on Contra

What I set up to protect you

Four things that protect your website without your customers noticing.

I only move your DNS to Cloudflare, including your email records. Your team doesn't notice the switch.

DNS move for your-company.comall records carried over
  • Websiterunning
  • Email inboxesrunning
  • Cloudflare protectionactive

How the setup works

Website, CMS and hosting stay as they are. Cloudflare simply sits in front of it.

  1. 01Intro callWe look at your website and your DNS records together in 30 minutes.
  2. 02Fixed-price quoteYou get in writing what I set up, what it costs and when it's done.
  3. 03SwitchI set the rules and move your DNS. Your visitors don't notice a thing.

What protection costs

You get scope, price and timeline in writing before I start.

Cloudflare for most business websites
in the free plan
Setting up the protection rules
fixed price after the intro call
Ongoing support up to 20 pages
from €199 a month

Two ways to a protected website

Talk to me directly, or first see how search engines and AI assistants read your site today.

30-minute intro call

We look at your website and your DNS records together. Afterwards you know what's missing and what the setup costs.

Free, by phone or video

Free AI check

You see whether ChatGPT, Perplexity and Google can read your site. Protection that's too strict shows up there at once.

Start the AI checkResult in seconds

Questions about website protection

Christian Schmitt answers

In a DDoS attack, a huge number of computers send requests to your website at once until it slows down or goes offline. Often it only shows when your host charges for extra data volume. For one business website in December 2025 it was almost a hundred times a normal month.

Christian Schmitt answers

No, usually it gets faster. Images, scripts and, where possible, whole pages come from Cloudflare's cache, from a data center close to the visitor.

Christian Schmitt answers

Yes. Blocking bots too strictly often locks out the crawlers of Google and AI assistants too. I set protection up so Google, Bing, ChatGPT and Perplexity get through and harmful bots have to pass a check.

Christian Schmitt answers

Cloudflare stops it without anyone stepping in. As soon as Cloudflare has stopped an attack of more than 100 requests per second, your team gets an email.

Christian Schmitt answers

No. Your website stays on Webflow, WordPress or your own server, and your team keeps working in the same CMS. The Cloudflare account is in your name.

Christian SchmittChristian SchmittWeb developer in Bremen30 minutes, free

On the call we look at your website together over video.