All AegisX features
Everything works as soon as your site is connected. Nothing to install on your server.
Protection
Attacks are stopped before they reach your server.
DDoS protection
Your site stays online during an attack. Limits per visitor, per page and for the whole site.
Attack mode
During an attack, new visitors pass a short browser check. It turns on and off by itself.
WAF
Blocks SQL injection, XSS, scanners and password guessing. You can add your own rules.
Bot protection
Stops scrapers, spam and fake sign-ups. Search engines get through.
API protection
Limits per API key, JWT checks and requests checked against your OpenAPI spec.
Shared protection
An address that attacked one protected site is checked on all the others right away.
Country blocking
Close your site or a section to countries you have no customers in.
Access rules
Allow and block addresses, close sections such as /admin.
Hidden origin server
A check that your server address does not show in public records, and a ready script that lets only AegisX reach your server.
A certificate for your server
Your server can accept HTTPS connections only with your site’s certificate issued by AegisX.
Uptime
Your site opens even when something goes wrong.
Caching
Files are served from our servers. If your server is down, visitors see saved pages.
Multiple servers
Add a backup server or spread the load. A server that goes down is taken out for a while.
Sites do not affect each other
An attack on one site does not slow down the others.
SSL certificates
Issued and renewed automatically. You can upload your own.
Custom error pages
In the style of your site instead of the default ones.
WebSocket
Chats and notifications work without extra setup.
Routes
Send parts of the site to different servers: the API to one, files to another. Protection covers all of them.
Payment providers
Notifications from payment providers pass without the browser check. Just add the path they post to.
Reports
See what is happening with your site.
Live traffic
Requests, blocks, cache, countries and traffic sources.
Request log
Every request with its address, country, page and the reason for the decision.
Attack report
Peak, duration and sources. Opens with a link, no login needed.
Monthly report
A PDF summary of the month for each site.
Alerts
A Telegram message when an attack starts and when it ends.
Site speed
Server response time, slow pages and errors.
Management
Easy for one site or a hundred.
One dashboard
All sites, rules and billing in one place.
Team
Invite colleagues with roles: some can only view, others can change settings.
Secure sign-in
Two-factor sign-in on every plan, sign in with Google or GitHub.
Change history
Who changed what and when.
Support in the dashboard
Requests and replies in one place.
On your phone
The dashboard works on Android and iPhone.
Your first site is free
Sign up, add your domain and change one DNS record.