Configured for your shop, not left on defaults
DNS, SSL, security and performance settings set up for WordPress and WooCommerce, including forgotten domains and old records.
Call Us Now 0333 444 0283
- Call Us Now 0333 444 0283
- Discover
Established 2003
Websites, software and connected business systems
Discuss your project →
Cloudflare · Bot protection · Server health
Cloudflare Setup & Bot Protection for WooCommerce
Before you buy a bigger server, find out what’s eating this one.
Your website is slow, the server keeps hitting its limits, and an automated email suggests upgrading to a larger plan. Sometimes that’s the right answer. Often it isn’t.
Much of the traffic hitting online shops today isn’t customers at all. AI training crawlers, scrapers and bad bots can consume most of a server’s capacity. Give them a bigger server and they simply consume that too, while your monthly bill rises and the real cause stays hidden.
Digital Flair provides Cloudflare set-up, bot protection and server health checks for UK businesses. We find out what is really using your server, stop what shouldn’t be there, and only recommend more capacity when you genuinely need it.
- Suitable for
- WooCommerce shops and busy WordPress websites
- Platforms
- Cloudflare, WordPress, WooCommerce and cloud servers
- Approach
- Evidence from Cloudflare, the server and the website together
- Outcome
- Real visitors served, bad traffic stopped, no unnecessary upgrade
The upgrade email
A bigger server is the easy answer, not always the right one
When a server runs short of capacity, the obvious fix is more capacity. But if bots are using it, a larger server just raises the ceiling they can reach. You pay more each month to serve traffic that will never buy anything, and the problem returns.
Common signs your server is feeding bots rather than customers:
- Your host warns about high CPU, memory or resource limits.
- The site slows down or fails at random times, often at night or weekends.
- Visitors see timeout or “service unavailable” errors.
- Analytics show traffic spikes from unexpected countries with no extra sales.
- Bounce rate jumps while orders stay the same or fall.
- Your hosting costs keep rising but the business hasn’t grown to match.
What’s included
Cloudflare and server protection, from the edge to the code
Bad traffic is best stopped before it reaches your server. We set up Cloudflare properly, analyse what it sees, and connect that to what is happening on the server and in the website.
Fast pages without breaking checkout
Caching planned and tested in stages, so pages are served from close to your visitors while baskets, accounts and checkout keep working.
See exactly who is visiting
We analyse Cloudflare’s traffic and security events to separate real customers from bots, scrapers and attacks.
Decide which bots get in
Search engines stay welcome. AI training crawlers, scrapers and bad bots are challenged or blocked, according to what suits your business.
Block abusive ranges and patterns
Rules for abusive IP ranges, networks, countries you don’t sell to, and crawlers working through pages that can’t be cached.
Stop floods before they land
Sensible limits on how fast any one visitor can request pages, logins or checkouts, so a single source can’t overwhelm the site.
Emergency response
When a site is being flooded, we tighten protection straight away to get it back online, then find the cause.
No way round Cloudflare
We check that traffic can’t bypass Cloudflare to reach your server directly, so the protection actually protects.
Look inside the server too
Caches, PHP, the database and slow pages are checked, because not every overload comes from outside.
Proof
What we’ve found behind “not enough server”
On one WooCommerce shop, daily visits suddenly jumped to more than ten times normal. It wasn’t customers. We traced it to an AI company’s training crawlers working through the whole catalogue, and stopped it at Cloudflare. The bots had also been distorting the shop’s analytics, inflating visits and bounce rate.
On a cloud server hosting several busy shops, CPU sat at 100% and client sites went offline. The causes included a forgotten redirect domain taking around 245,000 crawler requests a day. Fixing every layer brought the server back to a steady 15 to 40%, with no upgrade needed.
Read the server case study
10×
Normal daily visits, from one AI crawler
245,000
Crawler requests a day on a forgotten domain
100% → 15–40%
Server CPU, without an upgrade
380 → 35
Database queries per page
How we work
Find the cause before spending money
Every server health check follows the evidence across the whole stack.
-
01
Check
Review Cloudflare traffic, security events, server resources and analytics side by side.
-
02
Find
Identify what is really using the server: bots, crawlers, heavy pages or settings.
-
03
Stop
Block or challenge the traffic that shouldn’t be there, without affecting customers or search engines.
-
04
Fix
Tune caching, the server and the website where the load comes from inside.
-
05
Watch
Monitor afterwards, and recommend more capacity only if the evidence shows you need it.
Ways we can help
Start with a server health check
Find out what’s really happening before you spend more on hosting.
Server health check
We review your traffic, Cloudflare, server and website, then tell you plainly what is using your capacity and what to do about it.
Book a health checkCloudflare set-up and protection
Cloudflare configured for your shop, with caching, bot rules, rate limiting and origin protection in place.
Discuss thisMonitoring and managed hosting
We keep watching traffic and server health, as part of our managed support or on our managed cloud hosting.
See managed hostingFAQs
Cloudflare and bot protection: common questions
My host says I need a bigger server. Do I?
Maybe, but find out first. Much of the load on online shops today comes from bots, AI crawlers and pages that can’t be cached. Upgrading feeds that traffic rather than fixing it. A server health check shows what is really using your capacity, so you only pay for more if you genuinely need it.
What are AI training bots, and should I block them?
AI companies run crawlers that copy website content to train their models. They can request thousands of pages a day and bring you no customers. AI assistants that send visitors to your site are different, and many shops want to keep those. We help you decide which to allow and which to stop.
Will blocking bots affect my Google rankings?
No, when it’s done properly. Google, Bing and other genuine search engines are verified and kept welcome. We only challenge or block traffic that isn’t doing your business any good.
Why does my analytics show lots of visitors from abroad?
Often it is bot traffic rather than real people, especially if those visitors leave immediately and never buy. Besides using server capacity, it distorts your reports. We identify it and stop it, so your figures reflect real customers again.
Do I need a paid Cloudflare plan?
Not always. Many websites are well protected on Cloudflare’s free or lower-cost plans when they are set up properly. We recommend a paid plan only where its features would make a real difference.
Can bots get around Cloudflare?
They can if the server accepts traffic that doesn’t come through Cloudflare. We check for that, along with forgotten domains and old DNS records that can quietly send traffic to your site.
My website is down right now. Can you help?
Yes. Call 0333 444 0283. We tighten protection first to get the site back online, then find and fix the cause.
Do you work with businesses across the UK?
Yes. We work with online shops and businesses throughout the UK, remotely, with a direct line to your technical lead.
Before you upgrade, find out what’s using your server
Tell us what’s happening. We’ll look at the evidence across Cloudflare, the server and the website, and tell you plainly whether you need more capacity or just less bad traffic.