I built the Cloudflare WAF Rule Generator (
https://alivecheck.io/waf-generator) to make WAF rules less of a headache, and you all ran with it—over 900 rules generated in 7 days! Based on that, I added a template library with free, pre-made rules for WordPress, Node.js, Flask, Django, database servers, and more. “Magic” mode’s smarter now too, and I’m experimenting with code scanning to auto-suggest rules for API endpoints. Still free, no signups. Thoughts? What WAF pain points should I tackle next?