> Is there any other way? Sure, there's one other option. You can use CF for SaaS/SSL/TLS -> Custom

Is there any other way?
Sure, there's one other option. You can use CF for SaaS/SSL/TLS -> Custom Hostnames on your own account. You can then leverage WAF on that zone (would need Pro or higher just on that one), it just runs through it like normal. You get 100 Custom Hostnames for free and then pay 10 cents per month per hostname over. The tricky bit is that you can't point your fallback domain at Pages since Pages itself uses CF for SaaS, so you have to use a Worker (and pay for each invocation) or wait for Snippets to roll out further/come out of alpha which have no execution costs, ex:
customer.com -> cname -> yourzone.com -> worker/snippet -> pages.dev

You can even use Custom Metadata attached to each hostname to configure security level and such in your zone's Custom Rules: https://developers.cloudflare.com/cloudflare-for-platforms/cloudflare-for-saas/security/waf-for-saas/.
Cloudflare Docs
Web Application Firewall (WAF) allows you to create additional security measures through Cloudflare. As a SaaS provider, you can link custom rules,
Was this page helpful?