Instant WAF Blocklists for Security Incidents
Comment an IP in a Linear security issue, and Notis creates a Cloudflare WAF list to block it. No delays, no manual work, no context-switching during incident response.
Trigger
Comment Received Trigger
Triggered when a comment is received.
Action
Create WAF List
Tool to create a new empty waf list for the account. use after confirming the account id. example: create list(account id="<id>", kind="ip", name="blocklist")
Why this helps
During a security incident, you're toggling between Linear, Slack, and Cloudflare to create WAF lists and block IPs. Every context-switch costs seconds you don't have.
- Response time drops from minutes to seconds
- Stay in Linear during incident response
- Clear audit trail in Linear comments
- No manual Cloudflare list creation
Setup
Build it in a few focused steps.
- 1Connect Linear and Cloudflare to Notis via the portal.
- 2Tell Notis: 'When a comment is posted on a Linear issue, if it contains an IP address, create a WAF list in Cloudflare with that IP.' Choose Comment Received as the trigger and set your reporting channel.
- 3Tag or assign security incident issues to yourself or a specific team in Linear.
- 4During an incident, comment an IP in the issue (e.g., 'Block 192.168.1.1') and Notis creates a WAF list immediately. Test this flow with a test IP.
Questions about this workflow
What if I comment a range of IPs?
You can tell Notis during setup: 'Extract all IPs or CIDR blocks from comments and add them to a single WAF list.' Or create separate lists for each IP.
Will Notis block internal IPs by accident?
Notis can filter by IP range. Tell it to ignore ranges like 10.0.0.0/8 or 127.0.0.1 if you're concerned.
Can I review before the list is created?
Notis will report the IP and list creation in your channel before applying it. You have a chance to cancel if needed.
When this happens · Trigger
Do this · Action
Supported Triggers and Actions
Notis builds workflows that link Linear to Cloudflare. A trigger fires from one place; an action lands in another.
Linear triggers
Cloudflare actions
Recurring trigger
Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.
Create DNS record
Tool to create a new dns record within a specific zone. use after obtaining the zone id to programmatically add dns entries.
Webhook trigger
Notis starts this workflow when an external tool or custom backend sends an HTTP request.
Create WAF List
Tool to create a new empty waf list for the account. use after confirming the account id. example: create list(account id="<id>", kind="ip", name="blocklist")
Comment Received Trigger
Triggered when a comment is received.
Create Zone
Tool to create a new zone. use after confirming account id when adding a domain to cloudflare.
Issue Created Trigger
Triggered when a new issue is created.
Delete DNS Record
Tool to delete a dns record within a specific zone. use after confirming zone and record ids. example: "delete dns record 372e6795... from zone 023e105f4ecef..."
Issue Updated Trigger
Triggered when an issue is updated. For example labels are changed, issue status is changed, etc.
Delete WAF List
Tool to delete a waf list. use when you need to remove a list after verifying no filters reference it. example: delete list(account id="<account id>", list id="<list id>")
Private Team Comment Created
Fires when a new comment is posted on an issue in a private Linear team (polled with the connected user's token).
Delete Zone
Tool to delete a zone. use after confirming the zone identifier to permanently remove a dns zone from your cloudflare account. example: delete zone(zone identifier="023e105f4ecef8ad9ca31a8372d0c353")
Private Team Issue Created
Fires when a new issue appears in a private Linear team (polled with the connected user's token).
List WAF Lists
Tool to fetch all waf lists (no items) for an account. use after confirming account id.
Private Team Issue Properties Updated
Fires when properties on an issue change in a private Linear team (polled with the connected user's token).
List Account Members
Tool to list members of a given cloudflare account. use after confirming the account id.
Connect any two apps with Notis in the middle.
Linear and Cloudflare, or any other combination from 1,000+ integrations.
When this happens · Trigger
Do this · Action
Save your first hour today.
7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Cloudflare.