Will this work with the Cloudflare Free plan?
Yes. Useful controls are available on the Free plan. An upgrade is recommended only when a specific requirement justifies it.
Can security changes block legitimate users?
They can if controls are too aggressive. That is why business-critical traffic is identified, changes are scoped carefully, and important functions are validated afterward.
Do you need my Cloudflare password?
No. Never send a password. When access is required, MHCS provides instructions for granting the minimum necessary account access, which can be revoked after the engagement.
Can you completely stop every bot?
No—and legitimate bots such as search engines and monitoring services may be important. The goal is to reduce malicious and abusive traffic while preserving legitimate access.
Does this include malware cleanup or website repair?
No. These packages focus on Cloudflare configuration, traffic filtering, and edge protection. A compromised website should be contained and cleaned under a separate scope.
Which one-time package should I choose?
Choose Security Review if you want findings and a prioritized plan without production changes. Choose Security Optimization for approved tuning and validation. Advanced Protection & Tuning adds deeper investigation and a seven-day follow-up. If the right scope is unclear, contact us before purchasing.
What happens after checkout?
You complete a short intake so we can confirm your domain, business-critical functions, scope, and timing. Any required access is arranged separately using a least-privilege method. Testing and production changes require written authorization.