---
id: 3762
title: "Whitelisting an IP Address for Penetration Testing in Cloudflare"
source_domain: projectblack.io
source_url: "https://projectblack.io/blog/whitelisting-ip-for-penetration-testing-in-cloudflare/"
published_at: "2024-02-12T00:31:21Z"
tags: ["waf", "penetration-testing", "cloudflare", "rate-limiting", "whitelisting", "web-application"]
phying_url: "https://phying.com/item/3762"
lang: en
---

# Whitelisting an IP Address for Penetration Testing in Cloudflare

## Summary

Why to whitelist a penetration tester's IP in Cloudflare's WAF: rate limits slow testing and the WAF can mask code-level flaws. Includes steps for a skip rule, then re-testing with the WAF enabled.

## Intelligence Metadata

- **Sources:** projectblack.io
- **Published:** 2024-02-12T00:31:21Z
- **Original:** https://projectblack.io/blog/whitelisting-ip-for-penetration-testing-in-cloudflare/
- **Phying News:** https://phying.com/item/3762