Your uptime monitor pages you at 3 AM. You check — site's up. Customer says it's up. Monitor swears it's down.
If your site's on Cloudflare, that's not a flaky monitor — it's a bot challenge being read as an outage.
The header that fixes it 👇
Full write-up — the headers, why every off-the-shelf monitor misses this, the false-negative trade-off, and the actual production code:
https://t.co/wntG8I8gGS
6/6
Your uptime monitor pages you at 3 AM. You check — site's up. Customer says it's up. Monitor swears it's down.
If your site's on Cloudflare, that's not a flaky monitor — it's a bot challenge being read as an outage.
The header that fixes it 👇
Same idea, every major WAF:
Akamai → server: AkamaiGHost + akamai-grn
AWS WAF → x-amzn-requestid + "Request blocked"
Imperva → "incapsula incident id" or x-iinfo
Read the WAF's own signal. Trust it. Skip the alert.
5/6