Page Shield alerts

Note

New resource alerts require a Business plan or higher. Code change and malicious resource alerts require an Enterprise plan with a paid add-on. For details, refer to Alert types.

Once you have activated Page Shield, you can set up one or more alerts informing you of relevant client-side changes on your zones.

You can configure unscoped or scoped alerts:

• Unscoped alert: An alert configured for all zones in your Cloudflare account. Unscoped alerts are trigged either daily, hourly, or immediately, depending on the alert type.

• Scoped alert: An alert scoped to one or more zones. You must configure policies for the zones you select to receive any notifications. Scoped alerts are triggered immediately. Policy violations will not trigger an alert. For more information, refer to Scoped alerts.

  Note

  Cloudflare only takes into account policies in allow mode for scoped alerts.

For alerts sent at regular intervals, you might experience a delay between adding a new script and receiving an alert.

For instructions on configuring alerts, refer to Configure a Page Shield alert.

Scoped alerts

Note

Applies to Enterprise customers with a paid add-on.

If you have configured allow policies in a zone — policies which allow specific scripts and connections and block everything else — you can filter alert notifications according to those policies. These alerts are called scoped alerts.

When you create a scoped alert using the Policies of these zones alert filter, you will only receive the most relevant notifications based on the values of the allow policies you configured.

For each scoped alert, Page Shield does the following:

1. Check which allow policies in a zone are enabled.
2. For every enabled policy, compare the URL of the new or changed resource against the allowed sources in the policy.
3. If the resource is allowed by the policy, check if the new or modified resource should trigger the current Page Shield alert.
4. If the alert should trigger, send an alert notification to the configured destinations.

When you create a scoped alert you will not receive notifications for resources blocked by an allow policy. These are policy violations that you can review in the dashboard, through GraphQL, or via Logpush.

Note

You will not receive notifications for a scoped alert in the following cases:

• No configured policies in the zone
• Policy configured in log mode
• Policy is not enabled

For unscoped alerts, you will receive alerts for resources detected in all your zones, and you may receive alerts about resources that are blocked by one of your configured allow policies.