A web application firewall that runs on your own server, and listens before it acts.
Early accessFree for the first 25 servers
One pasted command installs it and changes one line of nginx. One command, rollback, puts it back. It needs nginx with php-fpm; Apache, cPanel and LiteSpeed aren't supported yet.
A request that goes straight to your server, around the CDN, still passes through it. The installer lists any other way into the same PHP pool, which it does not cover.
It reads the whole request, with matching that cannot be made to stall. If it ever stops, your site keeps answering, and the gap is on record.
A new install refuses nothing. It records what it would have refused, and the dashboard sorts that from what is worth a look.
When a site has nothing left to look at, set it to block. A false alarm you dismiss stays dismissed through rule updates.
Signed releases, on our own server first. An urgent one reaches every install with updates on in about fifteen minutes. Updates are on by default, and you can turn them off.
What it records never leaves your server. We receive its licence and the counts we bill by, and we never connect to it.
for a server's first domain, and $10 for each further domain on it.
never less than $200 a server.
Early access is free for the first 25 servers until paid plans open. After that, early-access servers keep 40% off the list for as long as they stay. A server whose licence lapses keeps its last rules and gets no new ones.
Tell us about your servers. We set up each early-access account by hand.