Drupal Bots, scrapers, and proxies: defending Drupal sites in an automated internet Bots are over half of web traffic. Here is the layered defence I use to keep Drupal sites running - companion to my DrupalSouth Wellington 2026 talk.
Drupal Custom Cloudflare WAF rules that every Drupal site should run This blog post helps to summarise some of the default rules I will deploy to every Drupal (7 or 8) site as a base line.
