Announcing the Magic Pages Open House. Quarterly calls with our team!

Web Application Firewall (WAF) On All Plans

All Magic Pages sites now run on Bunny.net's Web Application Firewall for enhanced security, with a 7-day learning period to tailor protection without.

💡
As of 2 January 2026, all Magic Pages sites have an additional WAF component, in addition to Bunny.net Shield: https://www.magicpages.co/roadmap/enhanced-security-layer-with-crowdsec-waf/

Every website hosted on Magic Pages now benefits from Bunny.net's new Web Application Firewall, Bunny.net Shield:

Bunny Shield: Security simplified
Stop losing revenue and uptime due to web attacks. Sleep worry-free and focus on building your product, not putting out fires.

This enhances the security of all websites, no matter whether you're on the Starter or Pro plan. I have tested this on the Magic Pages website over the last few weeks, and while there were no dangerous incidents reported by the WAF, it found over 3000 requests that were suspicious (including a few DDoS attempts).

The WAF is rolled out in the next days on all websites.

Learning Period

All websites will go through a 7-day learning period by Bunny.net during which the WAF analyses your site's traffic patterns. Based on the patterns found, the WAF rules are then fine-tuned and applied to provide optimal protection without interfering with legitimate functionality.

During this learning period, the WAF is active but operating in a more permissive mode to avoid false positives while it learns your site's normal behavior.

Configuration

In a future update of the customer portal, WAF rules will be editable for customers who want more granular control over their security settings. This will allow you to customize protection levels, whitelist specific IPs, and create custom security rules (paid feature, since Bunny.net charges for this).


If you spot any issues with your website during or after the learning period, please reach out to me directly. While the WAF is designed to be transparent to legitimate traffic, every site is a bit different, and I want to make sure this doesn't interfere with your traffic.

Released on 31 May 2025

This update is live for all Magic Pages customers.

New to Magic Pages? Start your 14-day free trial — no credit card required.

Questions or feedback?

Let us know what you think about this update below.

Websites powered by Magic Pages

From personal blogs to growing businesses — published with Ghost®, hosted with care.

Loading showcase sites...

Start Your 14-Day Free Trial

No credit card required