Getting your site protected

The full path, from adding your site to the DNS cutover. Allow about twenty minutes.

6 minUpdated Aug 16, 2026

You will be asked for three things: prove the domain is yours, tell us where your server is, then point the domain at us. The wizard walks you through it; this page is the overview and the reference if you would rather work directly in your DNS zone.

Your site stays online

No step takes your site down, not even the cutover. During propagation some visitors still go direct and others already go through the firewall — both see the same site.

Before you start

Access to your DNS zone. That is at whoever your domain's nameservers point to — often your host, sometimes your registrar, sometimes Cloudflare.
A way to put a file on your site. Your host's file manager, FTP access, or your CMS admin area.

The steps

1
Add the site
Enter your site address. Its technology and host are detected automatically. The technology selects which rule set applies: if you are not sure, leave "Other" — the generic protection stays complete.
2
Prove the domain is yours
A TXT record to add to your DNS zone. See Verify your domain.
3
Declare and prove your origin
Your server address, plus a file proving you control it. See The origin server.
4
Cut the DNS over
Your domain's A record now points at us. See The DNS cutover.
5
Cover the www version
www.your-site is a separate address with its own record. See The www version.

Right after the cutover

Put the site in observation mode for a few days. Rules run and record everything without blocking: that is what lets you spot a false positive on your contact form before a real customer hits it.

While observation is on, your site is not protected. It is a tuning phase, not a destination.