Recommended Free Tools
The safe way to allow ScreenshotNeo through Cloudflare is to identify its requests with an operator-published signal, then create a narrowly scoped WAF custom rule for only the hostname and paths it must capture. Use a current ScreenshotNeo egress IP range, Web Bot Auth or another signed identity, or a documented non-configurable header. Put an Allow or Skip action before the challenge or block rule that is stopping the request. Do not invent an IP address or user-agent: ScreenshotNeo’s current values must come from its operator.
This approach lets normal visitors, managed WAF rules and bot controls continue protecting the rest of your site. The procedure below shows how to discover the blocked request, build the rule, test it and maintain it without publishing an unsafe global bypass.
What you need before creating a Cloudflare rule
Have these items ready:
- Cloudflare access with permission to edit WAF custom rules for the zone.
- The exact hostname ScreenshotNeo should capture, such as
www.example.com. - The smallest set of URL paths it needs, such as
/docs/or/pricing. - ScreenshotNeo’s current request identity, obtained from its operator: a dedicated source-IP range, Web Bot Auth or another signed identity, a documented non-configurable header, and the exact user-agent if one is supplied.
- A test URL that is safe to capture and a way to trigger one ScreenshotNeo request.
The public material available for this procedure does not establish ScreenshotNeo’s current IP ranges, user-agent string, header name or signing format. Do not fill those values with guesses. Ask ScreenshotNeo for the operator-published values before deploying a production rule.
Find the request Cloudflare is challenging
- In the Cloudflare dashboard, open your zone and go to Security → Events (the label may appear as Security Events in your account).
- Trigger one capture of the affected URL from ScreenshotNeo.
- Filter the event list by the hostname and approximate time of that request.
- Open the matching event and record the action, rule ID, hostname, URI path, source IP, user-agent and any stable request header shown in the event details.
- Confirm that the event belongs to ScreenshotNeo rather than an ordinary visitor, monitoring service or unrelated crawler.
Security Events tells you which rule actually challenged or blocked the request. That is more reliable than adding a broad allow rule and hoping it runs first. Save a copy of the event details for your change record.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
#1 Best Overall
- Read Before You Buy — No Video Output: These adapters support charging and USB 2.0 data transfer, but cannot transmit video signals. Except for standard USB webcams (which use USB data only), they are not compatible with HDMI/DisplayPort cables, video-capable USB-C hubs, or docking stations with video output.
- Convert USB-A Ports to USB-C: Designed to connect USB-C earphones, cables, flash drives, card readers, and other USB-C accessories to standard USB-A ports. Plug-and-play with no drivers or software required.
- Aluminum Alloy Housing: Built with a sturdy aluminum alloy shell that aids in heat dissipation and protects against daily wear and scratches. Designed to maintain a stable and secure connection.
- Compact & Travel-Friendly: The ultra-compact design allows the adapter to stay plugged into your device without blocking adjacent ports or adding bulk, reducing wear and tear on your original USB ports.
- 12-Month Warranty: Backed by a 12-month manufacturer warranty for peace of mind. Designed to meet strict quality control standards for reliable everyday performance.
Choose the strongest identity signal available
Cloudflare describes bot allowlists as lists of permitted bots matched by user-agent, IP address or both. Its verified-bot validation supports Web Bot Auth and IP validation. Prefer an identity that an outside party cannot cheaply imitate.
| Signal | Spoof resistance | Operational stability | How to use it |
|---|---|---|---|
| Web Bot Auth or another signed identity | Strong when Cloudflare validates the signature | Depends on the operator’s documented key and rotation process | Use the verification method documented by ScreenshotNeo; do not expose signing secrets in a rule. |
| Published, dedicated IP range | Strong when the range is exclusive and current | Good if the provider publishes change notices; weaker if ranges change frequently | Put the published addresses in a Cloudflare IP list and match ip.src against that list. |
| Documented non-configurable header | Stronger than a user-agent when the sender cannot choose its value | Requires keeping the header name and validation instructions current | Match the exact header and value only as documented by ScreenshotNeo. |
| User-agent | Weak by itself because clients can copy it | Easy to change and therefore easy to break | Use only as a fallback, combined with hostname, path and another constraint where possible. |
Cloudflare’s Browser Run documentation explicitly says, “The userAgent parameter does not bypass bot protection.” A caller can change a user-agent, so selecting a ScreenshotNeo-looking string is not proof of origin. Treat it as a correlation clue, not authentication.
Create a narrowly scoped WAF custom rule
Build the scope first
In Cloudflare, open Security → WAF → Custom rules, then create a rule that limits both the host and the paths ScreenshotNeo needs. For example, this expression uses a Cloudflare IP list named $screenshotneo_ips:
(http.host eq "www.example.com" and starts_with(http.request.uri.path, "/screenshots/") and ip.src in $screenshotneo_ips)Create the screenshotneo_ips list yourself from the current operator-published ranges. The example deliberately contains no guessed ScreenshotNeo address. If only one endpoint is required, use an exact path comparison instead of starts_with; if several paths are required, add explicit path conditions rather than allowing the entire site.
Rank #2
- 5-in-1 USB-C Hub: Experience comprehensive connectivity featuring a Power Delivery input, two USB-A 2.0 ports, a USB-A 3.0 port, and an HDMI port. (Note: The USB-C power delivery input port is only for connecting an external wall charger to power your laptop and cannot power peripheral devices.)
- 90W Pass-Through Charging: Achieve optimal charging with 90W pass-through power to your laptop, supported by a total input of 100W, with the hub reserving 10W for operational efficiency. (Note: Wall charger not included.)
- Quick Data Transfers: Accelerate your productivity with rapid data transfers using a high-speed 5Gbps USB 3.0 port and two 480Mbps USB 2.0 ports.
- 4K HDMI Display: Enhance your visual experience with a hub capable of delivering 4K resolution at 30Hz in both mirror and extend modes. Please note that this hub is compatible with MacBook (macOS 12 and newer), Windows 10 and 11, ChromeOS, and laptops equipped with DP Alt Mode and Power Delivery. Note: This device is not compatible with Linux.
- What You Get: Anker USB-C Hub (5-in-1, 4K HDMI), welcome guide, 18-month warranty, and our friendly customer service.
Add the identity match
For a documented user-agent fallback, use a Cloudflare string list containing the exact value observed in Security Events:
(http.host eq "www.example.com" and starts_with(http.request.uri.path, "/screenshots/") and http.user_agent in $screenshotneo_user_agents)Populate that list with the operator’s current value and, where possible, combine it with a published IP range or validated header. For a custom header or signed identity, follow ScreenshotNeo’s current instructions and match the header only on the same hostname and paths. A header that is merely configurable by the caller is not sufficient authentication.
Select Allow or Skip
Choose the action that addresses the event you found:
- Allow is appropriate when the custom rule should permit the request through the relevant Cloudflare security checks.
- Skip is appropriate when you need to bypass selected managed rules, rate limits or browser challenges while leaving other controls active. Select only the products or rules that caused the false positive.
Place this rule above the managed challenge or block rule shown in the event. Cloudflare evaluates rules in order; an allow or skip placed after the blocking rule cannot prevent that earlier action. Cloudflare’s user-agent rule documentation also notes that traffic allowed by Zone Lockdown skips user-agent rules, so review Zone Lockdown settings if your event shows that product.
Free tools Windows power users keep installed
One-click scans. No signup required.
Rank #3
- Sleek 7-in-1 USB-C Hub: Features an HDMI port, two USB-A 3.0 ports, and a USB-C data port, each providing 5Gbps transfer speeds. It also includes a USB-C PD input port for charging up to 100W and dual SD and TF card slots, all in a compact design.
- Flawless 4K@60Hz Video with HDMI: Delivers exceptional clarity and smoothness with its 4K@60Hz HDMI port, making it ideal for high-definition presentations and entertainment. (Note: Only the HDMI port supports video projection; the USB-C port is for data transfer only.)
- Double Up on Efficiency: The two USB-A 3.0 ports and a USB-C port support a fast 5Gbps data rate, significantly boosting your transfer speeds and improving productivity.
- Fast and Reliable 85W Charging: Offers high-capacity, speedy charging for laptops up to 85W, so you spend less time tethered to an outlet and more time being productive.
- What You Get: Anker USB-C Hub (7-in-1), welcome guide, 18-month warranty, and our friendly customer service.
Save a useful description
Name the rule with its scope and owner, for example “ScreenshotNeo captures — www.example.com /screenshots/”. In the description, record when the identity was verified and where the operator’s current ranges or header instructions are maintained. Do not put API keys, signing secrets or private credentials in the rule name or notes.
Test the rule without opening a site-wide bypass
- Deploy the rule in the zone, preferably during a low-risk change window.
- Trigger one ScreenshotNeo capture of the test URL.
- Return to Security Events and verify that the request matched your intended rule and was not challenged by another rule.
- Test an ordinary browser request to the same path and a different path. It should not match the ScreenshotNeo rule merely because it has the same hostname.
- Test a request from an address outside the published range, or without the documented identity, to confirm that the rule does not become a general bypass.
- Check the captured output for redirects, authentication pages, missing lazy-loaded content and consent overlays.
Keep the rule disabled or scoped to a staging hostname if the event evidence is ambiguous. A false positive in a screenshot is preferable to weakening protection for every visitor.
Common failures and precise fixes
The request is still challenged
- Cause: The rule is below the challenge rule. Fix: Move the Allow or Skip rule earlier in the custom-rule order.
- Cause: The hostname or path does not match after a redirect. Fix: Inspect the final request in Security Events and add only the required destination host or path.
- Cause: A managed challenge, Zone Lockdown policy or another product acts first. Fix: Identify that product in the event and use a narrowly scoped Skip action or an IP-list condition supported by that product.
- Cause: The IP range or header changed. Fix: Reconfirm the current values with ScreenshotNeo and update the list; never broaden the rule to compensate.
The rule never matches
- Cause: The expression uses an assumed user-agent or header. Fix: Copy the exact value from the observed event and compare it with the operator’s documentation.
- Cause: A proxy, load balancer or another service changes the source address. Fix: Match the address Cloudflare actually sees, as shown in Security Events, and verify whether the published range accounts for that proxy.
- Cause: URI matching ignores a trailing slash, query string or case difference. Fix: Match the path component shown by Cloudflare and use explicit alternatives only where needed.
The capture shows a challenge page or blank output
Allowing one request identity does not guarantee that every page can render. The target may redirect to login, require JavaScript state, fail a separate bot check or return an empty response. Inspect the final URL and response behavior in the ScreenshotNeo result, then check Cloudflare events for a second request that was not covered by the rule. Keep authentication and sensitive routes outside the allowed path set.
Security Events shows ordinary visitors matching
Disable the rule temporarily, remove the broad condition, and rebuild it with all three constraints: exact hostname, exact path scope and a stronger identity such as a published IP list or validated header. A user-agent-only rule is especially vulnerable to imitation.
Rank #4
- Dual Converters, Infinite Potential：Includes 2× USB C male to USB A female adapters and 2× USB A male to USB C female adapters. Perfect for a wide range of uses—tablets with Bluetooth keyboards, expand USB ports on macbook, and more. Two different converters for all your daily needs
- Next-Level 10Gbps & 3A Charging: No more slow 480Mbps, this usb to usb c adapter has a transfer speed of up to 10Gbps, allowing you to do more transferring in less time. This usb adapter fits both USB A and USB C charger, supporting up to 3A fast charging
- Upgraded Exquisite Craftsmanship: With an aluminum alloy housing and metal connector, the usbc to usb adapter is extremely durable and sturdy. Rigorously tested to withstand more than 10,000 times of plugging and unplugging, ensuring long-lasting performance
- Broad Compatible: The usb c to usb adapter widely supports all USB C/ USB A devices like laptops, tablets, cellphones, car chargers, and phone chargers. Such as compatible with MacBook Pro/Air 2023/2022, Thunderbolt 4/3 Devices,Apple MagSafe Watch 9/8/7/SE/Ultra, iPad Pro 2022/2021, Samsung Galaxy S23/S20/S10, and iPhone 17/16/15 Pro. Plug and play
- Please Note: To reach 10Gbps speed, keep the cable under 3.3 ft. For USB A Male to USB C adapters, try flipping the USB C connector. USB C Male to USB A adapters support bidirectional 10Gbps transfer within 3.3 ft
Maintenance, reliability and security controls
Revalidate identity changes
IP ranges, headers and signing procedures can change when a provider changes infrastructure. Assign an owner to review ScreenshotNeo’s operator notices and your Cloudflare event history. Update the IP list or header rule before removing the old value, then test one capture and one non-matching request.
Keep the blast radius small
- Allow only the hostnames ScreenshotNeo must capture.
- Exclude administration, account, checkout and internal API paths unless there is a documented need.
- Prefer an IP list or validated identity over a user-agent.
- Do not disable the entire managed WAF, rate limiting or bot protection for the zone.
- Review matched events periodically and alert on unexpected paths.
Account for cache and repeated captures
Cloudflare caching can make a page appear healthy while the origin still rejects a later uncached request. Test a representative uncached path and confirm that the rule covers the request Cloudflare receives. If your site uses redirects between apex and www, include only the final hostname that ScreenshotNeo actually requests, or create separate equally narrow rules.
Or skip the browser setup
If you do not want to operate a browser-rendering stack, ScreenshotNeo provides a website screenshot API and MCP server. You still need to allow its requests through your Cloudflare policy using the identity information supplied by its operator, but the capture itself is one HTTP call.
See the ScreenshotNeo API documentation for current parameters. This cURL request captures Stripe as a WebP file:
The Tool Desk
Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Best Value
- 5-in-1 Connectivity: Equipped with a 4K HDMI port, a 5 Gbps USB-C data port, two 5 Gbps USB-A ports, and a USB C 100W PD-IN port. Note: The USB C 100W PD-IN port supports only charging and does not support data transfer devices such as headphones or speakers.
- Powerful Pass-Through Charging: Supports up to 85W pass-through charging so you can power up your laptop while you use the hub. Note: Pass-through charging requires a charger (not included). Note: To achieve full power for iPad, we recommend using a 45W wall charger.
- Transfer Files in Seconds: Move files to and from your laptop at speeds of up to 5 Gbps via the USB-C and USB-A data ports. Note: The USB C 5Gbps Data port does not support video output.
- HD Display: Connect to the HDMI port to stream or mirror content to an external monitor in resolutions of up to 4K@30Hz. Note: The USB-C ports do not support video output.
- What You Get: Anker 332 USB-C Hub (5-in-1), welcome guide, our worry-free 18-month warranty, and friendly customer service.
curl -G "https://api.screenshotneo.com/v1/shot" -d access_key=YOUR_API_KEY --data-urlencode url=https://stripe.com -o shot.webpPython:
import requests
r = requests.get("https://api.screenshotneo.com/v1/shot", params={"access_key": "YOUR_API_KEY", "url": "https://stripe.com"}, timeout=90)
open("shot.webp", "wb").write(r.content)Node.js:
const q = new URLSearchParams({ access_key: 'YOUR_API_KEY', url: 'https://stripe.com' });
const res = await fetch(`https://api.screenshotneo.com/v1/shot?${q}`);ScreenshotNeo can accept consent banners before capture and remove more than 60 known consent platforms, newsletter popups and chat widgets; each cleanup step can be turned off. It bills only clean shots: bot checks or CAPTCHAs, blank pages, timeouts, failed loads and cache hits cost nothing, and each response identifies the page verdict and billing status in X-Page-Verdict and X-Billed headers. Its MCP server exposes take_screenshot, get_page_info and capture_pdf for Claude, Cursor and other MCP clients.
Beyond basic captures, the service supports full-page screenshots with lazy images loaded, CSS-selector element capture, dark mode, 12 device presets or custom viewports, retina scale, PDF paper sizes and page ranges, HTML/CSS rendering, custom JavaScript and CSS, pre-capture clicks, selector waits, delays, network-idle waits, request and resource blocking, custom headers, cookies, user-agent, Authorization, timezone, geolocation, transparent backgrounds, resizing, selectable cache TTLs, signed public-image links, asynchronous jobs with signed webhooks, bulk capture of up to 100 URLs per call, a usage API and an OpenAPI specification. Parameter names used by other screenshot APIs also work to ease migration.
| Plan | Included shots | Price |
|---|---|---|
| Free | 1,000 per month | No card required |
| Starter | 3,000 | $5 |
| Growth | 15,000 | $15 |
| Pro | 60,000 | $39 |
| Scale | 250,000 | $99 |
| Business | 1,000,000 | $249 |
Every feature is included on every plan, and yearly billing gives two months free. Create a free ScreenshotNeo account to get 1,000 screenshots each month with no card.
Frequently Asked Questions
Can I allow ScreenshotNeo by disabling Cloudflare Bot Fight Mode for the whole site?
That removes protection for unrelated traffic and is broader than necessary. Use a hostname-and-path-scoped Allow or Skip rule tied to a verified ScreenshotNeo identity instead.
Do these 3 things before closing this tab:
1Clear out junk files and repair common Windows errors2Fix the driver behind crashes, sound loss and screen glitches3Repair Windows errors before they cause bigger problemsShould I put ScreenshotNeo’s API key in a Cloudflare expression?
No. Keep API credentials out of WAF rules. Match the operator-documented request identity, and store ScreenshotNeo credentials only in the client or secret manager that makes the capture request.
What should I do if ScreenshotNeo cannot provide a stable identity?
Do not publish a guessed allowlist. Limit captures to a staging or otherwise low-risk path, ask the operator for Web Bot Auth, a signed header or current egress ranges, and reassess the rule when authoritative details are available.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
