# Ensure Development mode is disabled for production zones

- Source: https://support.icompaas.com/support/solutions/articles/a_1790787221772748-ensure-development-mode-is-disabled-for-production-zones
- Section: [Solutions](https://support.icompaas.com/support/solutions) › [Cloudflare](https://support.icompaas.com/support/solutions/c_1790786902273285) › [Checks](https://support.icompaas.com/support/solutions/folders/f_1790786912003423)
- Last updated: 2026-09-30
- Publisher: iCompaas, Inc. (https://www.icompaas.com)

**Description**

Ensure Development Mode is turned off for production zones. Development Mode temporarily bypasses Cloudflare's cache so that changes on the origin are visible immediately, and it should only be used briefly while making changes.

**Rationale**

While Development Mode is on, cached content is bypassed and all requests go to the origin. This increases load on the origin and can make it easier to overwhelm during traffic spikes or attacks. Keeping it off in production makes sure caching and performance protections stay active.

**Impact**

-   Caching stays active and protects the origin
    
-   Reduces origin load and cost
    
-   Changes on the origin may take time to appear until the cache is purged
    

**Default Value**

By default, Development Mode is off. When turned on, it turns off automatically after 3 hours.

**Pre-Requisites**

-   Cloudflare account with Administrator or Cache permissions for the zone
    

**Test Plan**

1.  Sign in to the Cloudflare dashboard at [https://dash.cloudflare.com](https://dash.cloudflare.com/).
    
2.  Select your account and the domain (zone) you want to review.
    
3.  Go to Caching > Configuration.
    
4.  Verify that Development Mode is turned off.
    
5.  If it is on, follow the implementation steps.
    

**Implementation Steps**

1.  Sign in to the Cloudflare dashboard at [https://dash.cloudflare.com](https://dash.cloudflare.com/).
    
2.  Select your account and the domain (zone) you want to review.
    
3.  Go to Caching > Configuration.
    
4.  Turn off Development Mode.
    
5.  If you need recent changes to appear, use Purge Cache instead.
    

**Backout Plan**

1.  Sign in to the Cloudflare dashboard at [https://dash.cloudflare.com](https://dash.cloudflare.com/).
    
2.  Select your account and the domain (zone) you want to review.
    
3.  Go to Caching > Configuration.
    
4.  Turn on Development Mode. It turns off automatically after 3 hours.
    

**Reference**

-   [https://developers.cloudflare.com/cache/reference/development-mode/](https://developers.cloudflare.com/cache/reference/development-mode/)

## Related compliance guidance

- [SOC 2 compliance: a practical implementation guide for cloud-native SaaS teams](https://support.icompaas.com/compliance/soc-2-trust-services-criteria): Configuration checks like this one are the technical half of a SOC 2 / ISO 27001 programme — the guide shows where they fit, what else an auditor expects, and how to evidence them.
- [ISO/IEC 27001:2022 compliance: a practical implementation guide](https://support.icompaas.com/compliance/iso-27001-2022): ISO 27001 Annex A.8 (technological controls) is where cloud hardening evidence lands; the guide shows how to run the ISMS around it.