Does anybody know why CloudFlare advertise Business as PCI DSS 3.2 compliant but Pro not?
From what I can work out, the WAF and a sensible set of PCI compliant ciphers can be enabled for both plans but on https://www.cloudflare.com/en-gb/plans/ the tickbox is unchecked for Pro.