Cloudflare WAF response rules: actions and body limits
The news at the time
Cloudflare WAF lets customers create up to three custom response rules supporting Log and Block actions.
The announcement explicitly says custom rules on the response body are not yet available.
Follow-up checked during renewal
No additional follow-up fact was established in this renewal. This does not establish that nothing changed.
What to review before applying this
Distinguish managed detections from customer-authored response rules when evaluating coverage. This preserved item had disappeared from the legacy listing after a newer digest replaced the page; renewal still requires explicit review.
Editorial review suggestions; no hands-on product experiment was performed.
Claim-by-claim source evidence
Cloudflare WAF lets customers create up to three custom response rules supporting Log and Block actions.
up to three custom response rules supporting Log and Block actions
Evidence source ↗
The announcement explicitly says custom rules on the response body are not yet available.
Creating rules on the response body is not yet available.
Evidence source ↗
Korean digest for the historical date: 2026-10-24. Quotations and source context were reviewed editorially; this is not an independent experimental verification.
Discussion