Technical SEO Specialist Needed Cloudflare/Bot Traffic Review + Ongoing Crawl Health (Magento Site)

We run a free CAD block download library (Magento-based, on a Hetzner server behind Cloudflare) that suffered a serious organic traffic decline over the past few months. Search Console clicks/impressions dropped from roughly 2.5–3k clicks/day to under 500/day within a matter of weeks. We've since traced and partially resolved several contributing issues ourselves: Crawl budget bug: a third-party toolkit (Amasty SEO) had generated ~11.5 million noindex'd URLs since 2022. This has been fixed at the source and is gradually clearing from Search Console (currently down to ~6.5m "Excluded by noindex tag," trending downward). Server instability: PHP-FPM memory leaks and a bloated 137m-row tracking table were straining the server; both have been resolved. Cloudflare blocking Googlebot: we found and confirmed via Cloudflare's Security Analytics that Super Bot Fight Mode's "Definitely automated traffic: Block" setting was blocking roughly 50%+ of all requests from Google's ASN (15169), because Cloudflare's live bot-verification check (cf.client.bot) was failing intermittently under load. We've deployed a fix: a custom rule matching Google's official crawler IP ranges as a backup to bot-verification, set to skip Super Bot Fight Mode, running first in the rule order. This was deployed within the last 24–48 hours and its effect on recovery is still being monitored. We've also identified bot traffic (not Google, not real users) creating misleading spikes in GA4 — e.g. a day where 91% of "new users" were Direct-channel sessions with ~2 second average engagement time, clearly automated rather than human. What we need help with Independently verify the Cloudflare fix is holding , confirm Googlebot's request success rate via Security Analytics, and check for any other rules, WAF components, or rate limits that could still be catching legitimate crawlers (we found this issue by manually filtering Source ASN = Google in Cloudflare, but a thorough audit of the full ruleset would be valuable). Audit and clean up two remaining structural issues: Google is displaying ?p= (pagination) and ?price= (filter) parameter URLs in search results with clicks that previously went to the clean parent category pages — worth checking canonical tag implementation on paginated/filtered pages. robots.txt has ~60+ individually hand-blocked category pages (e.g. /de/psd-files/..., /en/marketplace/seller/collection/shop/...) with no clear pattern or explanation , need someone to determine whether these should be blocked or are collateral damage from a prior cleanup. Distinguish real recovery from bot noise going forward — help us build a reliable way to monitor whether Organic Search traffic specifically (not Direct/bot-inflated totals) is recovering. General technical SEO health check given the site's history (crawl budget issues, aggressive Cloudflare bot mitigation, an upcoming Magento version migration) — flag anything else that could be limiting recovery. What we're looking for Strong hands-on experience with Cloudflare (WAF, Bot Fight Mode, Security Analytics) , this is now as important as traditional SEO knowledge for this project Comfortable working directly in Google Search Console, GA4, and Cloudflare's dashboard Able to distinguish genuine SEO/indexing issues from bot noise and server-side problems Magento experience is a plus but not essential , we have separate developer support for the Magento migration itself Clear, plain-English reporting , we are not SEO specialists ourselves and need explanations we can act on Scope Initial engagement: verification of recent fixes + audit of remaining issues + written report with prioritized recommendations. Ongoing work possible depending on findings. Please include in your proposal: your experience diagnosing Cloudflare bot-mitigation rules blocking legitimate search crawlers, and any similar recovery work on sites hit by aggressive bot traffic.