Case Studies
Real security problems, what was found, what was done, and what changed afterwards.
114,000 files were encrypted but the database survived
How I recovered a hacked production server, saved the client's data, and rebuilt the entire system from scratch.
Read the case study
680,000 real readers were challenged while the attackers were not
How I replaced a blunt WAF response with targeted protection and recovered the cache performance of a high-traffic news site.
Read the case study
Active Magento attacks bypassed the existing WAF
How I audited 7 Cloudflare zones, stopped active Magento exploitation attempts, and cut unwanted bot traffic by 70%.
Read the case study
Patient data was exposed through a wide open public S3 bucket
How I discovered a public healthcare S3 bucket exposing patient records, verified the exposure safely, and delivered a responsible-disclosure report.
Read the case study
An IIS memory leak allowed the Cloudflare WAF to be bypassed
How I reproduced a critical IIS 8.0 HTTP.sys memory disclosure and proved that exposed origin IPs could bypass Cloudflare WAF.
Read the case study
WordPress was locked down and Cloudflare was fixed end-to-end
How I configured Cloudflare across DNS, WAF, SSL, DDoS protection and Zero Trust Access, while repairing broken migration records.
Read the case study
A single entry point caused a year of reinfections with over 383 malware files
How I cleaned 7 WordPress sites, closed the original entry point, and hardened the entire shared-hosting account.
Read the case study