Audit
We review existing DNS records, Cloudflare settings (if you already have them), open ports, certificates and internal systems that are reachable from the internet. We list what needs to change and agree a plan.
Cloudflare management
Cloudflare protects your websites, APIs and internal systems from DDoS, bots and intrusions, but only when it is properly configured and maintained. We take over all Cloudflare management, from DNS migration to WAF rules and Zero Trust access.
Built for ISO 27001NIS2 DORA
- DNS and CDN
- WAF and DDoS protection
- Bot management and rate limiting
Turning Cloudflare on is easy. Configuring it properly is not
- 0 downtime DNS and certificate migration with no interruption
- WAF + DDoS rules built for your systems, not the defaults
- Zero Trust access to internal systems without open ports
- 24/7 monitoring and response to alerts
Many companies have Cloudflare: DNS moved, the orange cloud switched on, and the website looks protected. But the default settings do not stop a targeted attack. The WAF runs only in a basic mode, bots scrape prices and login forms, admin panels are reachable from anywhere in the world, and the server IP is still visible in an old DNS record, so an attack simply bypasses Cloudflare.
Cloudflare management as a service means that configuration, monitoring and response are our responsibility. We migrate DNS without downtime, configure WAF, DDoS and bot rules for your systems, hide the real server IP, enable Zero Trust access to internal systems instead of open ports and VPN, monitor alerts and report every month on what was stopped. It suits websites, online stores, APIs and internal systems, regardless of where they are hosted.
What is included
The whole Cloudflare layer in one service, with configuration, maintenance and reports.
DNS and CDN
Secure DNS migration to Cloudflare, DNSSEC, CDN acceleration and caching rules so your website loads faster in every market.
WAF and DDoS protection
Managed WAF rules (OWASP, Cloudflare Managed Rules) tailored to your systems, L3-L7 DDoS protection, and geographic and IP restrictions.
Bot management and rate limiting
We block price scraping, brute force on login forms and order spam without getting in the way of real customers and search engines.
SSL/TLS and certificates
Full (strict) encryption to the origin server, automatic certificates, HSTS, TLS 1.3 and old protocols disabled, with no forgotten expired certificates.
Zero Trust access and Tunnel
Internal systems (admin panels, ERP, RDP) are reached through Cloudflare Access with your Microsoft Entra ID or Google identity, while servers keep no open ports.
Monitoring and reports
Alerts about attacks, anomalies and certificate expiry come to us; you receive a monthly report on how many threats of which kinds were stopped.
Cloudflare on your own, and Cloudflare with MDP CLOUD
The same Cloudflare, a different result.
| Set up on your own | Managed by MDP CLOUD | |
|---|---|---|
WAF rules | defaults | tailored to your systems, reviewed monthly |
Real server IP | often visible in old records | hidden, access only from Cloudflare |
Admin panels | reachable from anywhere in the world | only through Zero Trust Access with MFA |
Bots and brute force | basic filtering | rules based on real traffic, rate limiting |
Certificates | someone has to remember | automatic, strict mode, monitored |
Who responds to an attack | whoever notices | MDP CLOUD, based on alerts |
Reports for audits | – | monthly report, ISO 27001 / NIS2 evidence |
Plan (Free / Pro / Business / Enterprise) | a guess | chosen by need, no overpaying |
How we take over Cloudflare
Usually within 1-2 weeks, with no website or email downtime.
DNS and certificate migration
We move DNS to Cloudflare with all records (email, SPF/DKIM/DMARC, subdomains), and enable DNSSEC and strict TLS mode. Email and the website keep working throughout; we make changes in stages and verify them.
Protection configuration
We configure WAF and bot rules for your systems, hide the server IP, enable rate limiting for login forms and Zero Trust Access for internal systems through Cloudflare Tunnel. At first the rules run in monitoring mode, so real customers are not blocked.
Monitoring and maintenance
Alerts about attacks and anomalies go to our monitoring, we review the rules every month, and you receive a report with the threats that were stopped and our recommendations.
Cloudflare frequently asked questions
Do we need to change where our website is hosted?
No. Cloudflare works in front of any server: MDP CLOUD, another provider or your own office. Only DNS changes, and the server stays where it is.
Will Cloudflare slow down the website?
On the contrary: the CDN cache and the nearest Cloudflare data centre (in Vilnius, Riga, Warsaw, Frankfurt and elsewhere) usually make a website faster. Slowdowns only come from a faulty cache configuration, which we fix.
Which Cloudflare plan do we need?
Pro is enough for most websites, online stores and APIs with heavier traffic need Business, and Enterprise is only for very high traffic or special requirements. We choose the plan by need, not by the highest price list.
Can Zero Trust replace a VPN?
In most cases, yes: employees reach internal systems through a browser with their company identity and MFA, and servers have no open ports. A VPN remains only where full network-level connectivity is needed.
What happens during an attack?
Cloudflare absorbs DDoS attacks automatically. For other anomalies we receive an alert, assess the traffic and tighten the rules (for example, enable "Under Attack" mode or a geographic restriction), and keep you informed as it develops.
Related services
SentinelOne Singularity: autonomous protection with AI
AI-driven endpoint security: fast, efficient, reliable.
Bitdefender GravityZone
Security for computers, servers and mobile devices: advanced prevention, extended detection, effective response and risk analytics.
Expertise confirmed by certifications
This service is delivered by specialists with valid international certifications. Their expertise is confirmed by independent organisations, not by us.
-
Lead Cloud Security Manager
Cloud security is managed following ISO/IEC 27017 and 27018 practices.
-
Certified Information Security Manager
Security governance, policies and incident processes following the ISACA methodology.
Get a quote for Cloudflare management
Tell us which websites, APIs or internal systems need protecting, and we will send a quote within 1 business day.
We reply within 1 business day