diff --git a/README.md b/README.md
index c0ae1c9..81dde65 100644
--- a/README.md
+++ b/README.md
@@ -251,7 +251,7 @@ Create in your Cloudflare dashboard:
 
 **Security → WAF → Rate limiting rules:**
 
-1. **Rate Limit** — 10 req/10s per IP → Block 10s
+1. **Rate Limit** — 15 req/10s per IP → Block 10s
 
 ### 8. Deploy
 
diff --git a/assets/rate-limit.js b/assets/rate-limit.js
index f318a17..a87d54b 100644
--- a/assets/rate-limit.js
+++ b/assets/rate-limit.js
@@ -1,6 +1,6 @@
 // New searches (cache misses) allowed per IP per day, reset at 00:00 UTC. Cache hits never count.
 // Safe to edit by hand. Imported by the worker and by the homepage (as a static file, so no Functions quota).
-// The burst limit (~10 req/10s) is a Cloudflare WAF rule, not set here.
+// The burst limit (~15 req/10s) is a Cloudflare WAF rule, not set here.
 export const DAILY_LIMIT = 10;
 export const FREE_DAILY_LIMIT = 100;
 export const AI_DAILY_LIMIT = 100;
diff --git a/index.html b/index.html
index 487a67f..0ea81d7 100644
--- a/index.html
+++ b/index.html
@@ -123,7 +123,7 @@ Use images to complement your responses, powered by Brave.</code></pre>
                     <tr><th>Scope</th><th>Limit</th><th>Action</th></tr>
                 </thead>
                 <tbody>
-                    <tr><td>Burst</td><td>~10 req/10s per IP</td><td>HTTP 429 (~10s)</td></tr>
+                    <tr><td>Burst</td><td>~15 req/10s per IP</td><td>HTTP 429 (~10s)</td></tr>
                     <tr><td>New Searches</td><td><span data-limit="DAILY_LIMIT">35</span> per day per IP</td><td>Limit image served</td></tr>
                     <tr><td>New Free Searches</td><td><span data-limit="FREE_DAILY_LIMIT">100</span> per day per IP</td><td>Limit image served</td></tr>
                     <tr><td>New AI Images</td><td><span data-limit="AI_DAILY_LIMIT">100</span> per day per IP</td><td>Limit image served</td></tr>