{"id":18402,"date":"2026-09-29T23:17:36","date_gmt":"2026-09-29T20:17:36","guid":{"rendered":"https:\/\/www.hyyat.com\/knowledgebase\/cloudflare-under-attack-mode\/"},"modified":"2026-09-29T23:17:36","modified_gmt":"2026-09-29T20:17:36","password":"","slug":"cloudflare-under-attack-mode","status":"publish","type":"docs","link":"https:\/\/www.hyyat.com\/en\/knowledgebase\/cloudflare-under-attack-mode\/","title":{"rendered":"How to Turn On Cloudflare “I’m Under Attack” Mode"},"content":{"rendered":"
In short:<\/strong> To turn on I’m Under Attack Mode in Cloudflare: log in to the Cloudflare dashboard, select your domain, and turn on Under Attack Mode from the Overview page (Quick Actions) or from Security, then Settings. Every visitor sees a short check page before reaching your site. Use it only during a DDoS attack and turn it off afterwards.<\/div>\n

I’m Under Attack Mode is an extra protection level in Cloudflare for when your website is under a DDoS attack. It shows visitors a short check page for a few seconds before they reach your site, which blocks most attack traffic.<\/p>\n

Turn it on<\/h2>\n
    \n
  1. Log in to the Cloudflare dashboard<\/a>.<\/li>\n
  2. Select your domain.<\/li>\n
  3. On the Overview<\/strong> page, find Quick Actions<\/strong> and turn on Under Attack Mode<\/strong>. You can also find it under Security<\/strong>, then Settings<\/strong>.<\/li>\n<\/ol>\n

    When to turn it off<\/h2>\n

    Turn it off once the attack is over. The check page adds a short delay for every visitor and can affect search engines and services that call your site (such as APIs and payment notifications).<\/p>\n

    New to Cloudflare? See how to sign up and activate Cloudflare<\/a> and how to turn off Cloudflare<\/a>.<\/p>\n

    Related service:<\/strong> Hyyat Host hosting<\/a> works with Cloudflare, with 24\/7 support.<\/p>\n","protected":false},"excerpt":{"rendered":"

    In short: To turn on I’m Under Attack Mode in Cloudflare: log in to the Cloudflare dashboard, select your domain, and turn on Under Attack Mode from the Overview page (Quick Actions) or from Security, then Settings. Every visitor sees a short check page before reaching your site. Use it only during a DDoS attack […]<\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"closed","template":"","meta":{"inline_featured_image":false,"_templately_pack_id":"","_templately_imported_at":"","_templately_source":"","_templately_import_session_id":"","footnotes":""},"doc_category":[2746],"doc_tag":[],"class_list":["post-18402","docs","type-docs","status-publish","hentry","doc_category-cloudflare"],"year_month":"2026-10","word_count":200,"total_views":"3","reactions":{"happy":"0","normal":"0","sad":"0"},"author_info":{"name":"ahmed fathy","author_nicename":"ahmed-fathy","author_url":"https:\/\/www.hyyat.com\/en\/author\/ahmed-fathy\/"},"doc_category_info":[{"term_name":"Cloudflare","term_url":"https:\/\/www.hyyat.com\/en\/kb\/cloudflare\/"}],"doc_tag_info":[],"knowledge_base_info":[],"knowledge_base_slug":[],"_links":{"self":[{"href":"https:\/\/www.hyyat.com\/en\/wp-json\/wp\/v2\/docs\/18402","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.hyyat.com\/en\/wp-json\/wp\/v2\/docs"}],"about":[{"href":"https:\/\/www.hyyat.com\/en\/wp-json\/wp\/v2\/types\/docs"}],"author":[{"embeddable":true,"href":"https:\/\/www.hyyat.com\/en\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/www.hyyat.com\/en\/wp-json\/wp\/v2\/comments?post=18402"}],"version-history":[{"count":0,"href":"https:\/\/www.hyyat.com\/en\/wp-json\/wp\/v2\/docs\/18402\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.hyyat.com\/en\/wp-json\/wp\/v2\/media?parent=18402"}],"wp:term":[{"taxonomy":"doc_category","embeddable":true,"href":"https:\/\/www.hyyat.com\/en\/wp-json\/wp\/v2\/doc_category?post=18402"},{"taxonomy":"doc_tag","embeddable":true,"href":"https:\/\/www.hyyat.com\/en\/wp-json\/wp\/v2\/doc_tag?post=18402"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}