From a90069e064c0ca3c861fd6d7ff12fcbf613a7906 Mon Sep 17 00:00:00 2001 From: Brad Bell Date: Tue, 28 Apr 2026 10:06:45 -0700 Subject: [PATCH 1/2] add WAF section --- docs/cloud/faq.md | 17 +++++++++++++++++ 1 file changed, 17 insertions(+) diff --git a/docs/cloud/faq.md b/docs/cloud/faq.md index cc2c0e385..66bc7db83 100644 --- a/docs/cloud/faq.md +++ b/docs/cloud/faq.md @@ -213,6 +213,23 @@ The [Cloud filesystem](assets.md) has a special “fallback” feature for worki Check out our [migration guide](migrating.md)! As long as you are using Craft CMS {{ $activeSetVars.minCraftVersion }} or later, your project is apt to work on Craft Cloud with very few changes. +## WAF + + + +### Will you make a specific firewall rule for my site? + +Only if it benefits Craft Cloud sites. We do make site-specific WAF rules for enterprise projects. + + + +### Will you disable WAF rules so I can have my site pentested? + +No. The WAF rules are designed to protect the Craft Cloud infrastructure against the types of things pentests perform. + +As part of the [shared responsibility model](security.md), we would not disable those purposefully. + +If you want to pentest your application, you can do that locally or on a separate, non-Craft Cloud installation. ## Billing + Legal From e71573e43cc4aafdef9c24b80b1c11a1253d2a9e Mon Sep 17 00:00:00 2001 From: Brad Bell Date: Tue, 28 Apr 2026 10:08:37 -0700 Subject: [PATCH 2/2] cleanup --- docs/cloud/faq.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/cloud/faq.md b/docs/cloud/faq.md index 66bc7db83..5fb5627af 100644 --- a/docs/cloud/faq.md +++ b/docs/cloud/faq.md @@ -219,7 +219,7 @@ As long as you are using Craft CMS {{ $activeSetVars.minCraftVersion }} or later ### Will you make a specific firewall rule for my site? -Only if it benefits Craft Cloud sites. We do make site-specific WAF rules for enterprise projects. +Only if it benefits all Craft Cloud projects.