> ## Documentation Index
> Fetch the complete documentation index at: https://laraowl.mintlify.site/llms.txt
> Use this file to discover all available pages before exploring further.

# Security & firewall

> Built-in threat detection and Cloudflare firewall management.

LaraOwl doesn't just watch performance — it inspects incoming traffic for attacks and gives you a security dashboard to investigate and respond. If you use Cloudflare, you can also manage your firewall directly from LaraOwl.

## Threat detection

LaraOwl includes a built-in WAF analysis engine that inspects requests for common attack patterns:

* **SQL injection**
* **Cross-site scripting (XSS)**
* **Path traversal**
* **Command injection**
* **Local / remote file inclusion (LFI / RFI)**

### Risk scoring

Detected threats are scored by a **risk-scoring engine** with configurable thresholds across three levels:

| Level        | Meaning                              |
| ------------ | ------------------------------------ |
| **Medium**   | Suspicious activity worth reviewing  |
| **High**     | Likely malicious, warrants attention |
| **Critical** | Active, high-confidence attack       |

### IP-based tracking

* Threats are tracked **per IP address** with automatic pattern recognition, so repeat offenders and coordinated activity stand out.
* The **security audit dashboard** presents a threat timeline for investigation.

<Tip>
  Review the **Security** section of the dashboard regularly, or wire security events into your [alert channels](/alerts) so the team is notified of high-risk activity.
</Tip>

## Cloudflare integration

Connect your Cloudflare account to manage your edge firewall without leaving LaraOwl:

* **Direct Cloudflare API connection** for WAF management.
* **Firewall rule CRUD** — create, read, update, and delete rules from the dashboard.
* **Traffic analytics and audit-log visualization**.
* **One-click IP blocking** for addresses flagged by threat detection.

Configure the connection in **Settings → Cloudflare**, then manage rules from the **Firewall** section of the dashboard.

<Note>
  The Cloudflare integration is optional. LaraOwl's threat detection works independently — Cloudflare simply lets you act on findings at the edge.
</Note>