nowfound

Growth · alternatives · 2026

CM

24 alternatives to Cloudflare marking all traffic from Pakistan as threat

whenever I click through to a site managed through cloudflare I end up seeing a screen asking me to identify myself. This has happened often enough especially with HN articles that I just close some articles outright and read the discussion on HN instead. As an experiment I setup cloudflare for website of mine which gets majority of its traffic from Pakistan (where I am located). This is what I see https://dl.dropbox.com/u/8037186/cloudflare.png It basically shows cloudflare marking 100% of traffic from Pakistan as known threats. I would be interested to find out if its a common problem…

This post documents an issue where Cloudflare's security system flags all traffic originating from Pakistan as threats, requiring users to complete captcha verification to access protected websites. The poster, located… Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes. Prices are shown for the 1 we have checked on their own sites, 1 of them free or with a free tier. Cloudflare marking all traffic from Pakistan as threat launched in 2012; newer entries below may have overtaken it.

  1. 1

    Faster, more private internet by Cloudflare, now on mobile

    2018 · apps.apple.com · its alternatives →

  2. 2

    The Internet’s fastest, privacy-first DNS resolver

    2018 · one.one.one.one · its alternatives →

  3. 3

    NextDNS protects you from all kinds of security threats, blocks ads and trackers on websites and in apps and provides a safe and supervised Internet for kids — on all devices and on all networks.

    2019 · nextdns.io · its alternatives →

  4. 4AS
  5. 5

    Free, privacy-focused web analytics.

    2020 · dash.cloudflare.com · its alternatives →

  6. 6

    Alright so if you run a self-hosted blog, you've probably noticed AI companies scraping it for training data. And not just a little (RIP to your server bill). There isn't much you can do about it without cloudflare. These companies ignore robots.txt, and you're competing with teams with more resources than you. It's you vs the MJs of programming, you're not going to win. But there is a solution. Now I'm not going to say it's a great solution...but a solution is a solution. If your website contains content that will trigger their scraper's safeguards, it will get dropped from their data…

    Dec 2025 · github.com · its alternatives →

  7. 7

    After down detector went down with the rest of the internet during the Cloudflare outage today I decided to build a robust, independent tool which checks if down detector is down. Enjoy!!

    Nov 2025 · downdetectorsdowndetector.com · its alternatives →

  8. 8

    OP here. I built this because I recently caught myself almost pasting a block of logs containing AWS keys into Claude. The Problem: I need the reasoning capabilities of cloud models (GPT/Claude/Gemini), but I can't trust myself not to accidentally leak PII or secrets. The Solution: A Chrome extension that acts as a local middleware. It intercepts the prompt and runs a local BERT model (via a Python FastAPI backend) to scrub names, emails, and keys before the request leaves the browser. A few notes up front (to set expectations clearly): Everything runs 100% locally. Regex detection…

    Dec 2025 · github.com · its alternatives →

  9. 9

    Tool to check if site uses CloudFlare

    2017 · its alternatives →

  10. 10

    Check your browsing history for sites using Cloudflare - chrome.py

    2017 · gist.github.com · its alternatives →

  11. 11
  12. 12

    I've been building a lot of landing pages and small sites lately, and i wanted analytics on them. Google analytics was the obvious first option, but i didn't want it for privacy reasons. Also, some privacy blockers block them. Plausible was the next best thing, but having a VPS for sites which that doesn't get too much traffic, felt too much. So i built Edgemetry. Its a worker, a bit of frontend, and a D1 database. Everything runs in Cloudflare's free tier. If you've got a site that doesn't get ton of traffic but you still wnat to see your visitors and their actions, give it a go.

    Aug 2026 · github.com · its alternatives →

  13. 13

    Hey HN, I'm so excited to finally share with you what I've been working on recently. One month ago I asked my audience what they wanted to learn about Websites, APIs and Servers security [0]. From the feedback, I've identified a few recurring pain points that I've started to address (and many more) in this new book. From theory to practice, you will learn how low-level network and security protocols work. How to configure Cloudflare to secure and scale your web applications. How to create serverless applications and which database to chose with serverless functions. How to optimize your…

    2023 · kerkour.com · its alternatives →

  14. 14
    Direktor▲119

    A/B testing as easy as short URLs

    2019 · direktor.io · its alternatives →

  15. 15

    BoringSSL and nghttp2. Matches JA3N, JA4, and JA4_R fingerprints. Supports HTTP/2, async/await, and works with Cloudflare-protected sites. Not trying to compete with curl_cffi - just a learning project that turned into something functional.

    Nov 2025 · github.com · its alternatives →

  16. 16

    Inspired by the recent justfuckingusetailwind.com, I built a similar "love letter" to the Cloudflare ecosystem. I find myself reaching for Workers, R2, D1, and KV for almost every project lately, so I wanted to capture that sentiment in a single, slightly over-the-top page. It’s a simple side project, but the stack is: - Vite + TypeScript - Biome + Ultracite - Deployed (obviously) on Cloudflare First draft in Claude, the copy was drafted with Grok to get that specific tone, then I used Google's AI Studio to accelerate the build with touch up's in Cursor. Link:…

    Dec 2025 · justfuckingusecloudflare.com · its alternatives →

  17. 17

    This is an educational reference implementation showing how to build reasonably secure, standards-compliant authentication from first principles on Cloudflare Workers. Stack: Hono, Turso (libSQL), PBKDF2-SHA384 + normalization + common-password checks, JWT access + refresh tokens with revocation support, HTTP-only SameSite cookies, device tracking. It's deliberately minimal — no OAuth, no passkeys, no magic links, no rate limiting — because the goal is clarity and auditability. I wrote it mainly to deeply understand edge-runtime auth constraints and to have a clean Apache-2.0 example that…

    Feb 2026 · github.com · its alternatives →

  18. 18

    Managing traffic to protect your website during peak demands

    2020 · blog.cloudflare.com · its alternatives →

  19. 19

    It's a self-hosted mailbox for all emails coming to your own domains, with Web interface and CLI included. Notes: - all emails share the same inbox, as long as set your DNS correctly - Web client via self-hosted Docker or Cloudflare Pages - need additional access controls, may use Basic Auth or Forward Auth with Cloudflare deployment

    2024 · github.com · its alternatives →

  20. 20

    Protect any origin from CSRF by checking if the Origin/Referer header match the Host header for "unsafe" methods. - csrf-protection-cloudflare-worker.js

    2018 · gist.github.com · its alternatives →

  21. 21

    I've launched the new product, xhr.dev (https://xhr.dev/) The initial product is a 1 line code integration that does bot detection avoidance via a forward proxy. Ideal customer is someone who gets blocked by anti-bot defences like cloudflare or other captcha challenges. Usually these customers have web scraping use cases. You can view our historical performance on our status page (https://status.xhr.dev). ty v much, john

    2024 · xhr.dev · its alternatives →

  22. 22AU

    I run 3mins.news (https://3mins.news), an AI news aggregator built entirely on Cloudflare Workers. The backend has 10+ cron triggers running every few minutes: RSS fetching, article clustering, LLM calls, email delivery. The problem: Workers Paid Plan has hard monthly limits (10M requests, 1M KV writes, 1M queue ops, etc.). There's no built-in "pause when you hit the limit", CF just starts billing overages. KV writes cost $5/M over the cap, so a retry loop bug can get expensive fast. AWS has Budget Alerts, but those are passive notifications, by the time you read the email,…

    Mar 2026 · its alternatives →

  23. 23

    Simple, free dynamic DNS via Cloudflare. Contribute to lyoshenka/cloudflare-ddns development by creating an account on GitHub.

    2015 · github.com · its alternatives →

  24. 24

    I found out Cloudflare has a DNS over HTTPS api via 1.1.1.1 resolver, figured I'd make a small tool out of it, as somene who keeps checking domain names for side projects which I never build, this kinda helps me look for something. It's not fully accurate, because it returns unavailable even for parked pages, which technically are available, but works for me. It just checks for A records via this endpoint https://cloudflare-dns.com/dns-query?name=${domain}&type=A Just make sure to pass this header - "application/dns-json"

    2024 · supersaas.dev · its alternatives →

Also compare

Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →