Akarguard is a Layer 7 edge that sits in front of your server. HTTP floods, bots and abusive clients are dropped before they reach it, and your origin IP stays hidden. One DNS change, no hardware.
Not charged during the trial · Cancel anytime · EU GDPR compliant
Domains / shop.example.com
Under attack · protection raised automaticallyRequests · 24h
18.4M+212%
Blocked at the edge
16.9M91.8%
Browser challenges
412Kauto
Origin response
41 mssteady
| Severity | Attack | Target | Sources | Action | Time |
|---|---|---|---|---|---|
| Critical | HTTP flood, distributed | /checkout | 7,320 | Kernel ban | 14:02 |
| High | Attack tool (TLS fingerprint) | / | 1,204 | Dropped at handshake | 13:47 |
| High | SQL injection attempts | /search | 12 | WAF block | 12:19 |
| Medium | Headless browsers | /login | 380 | Challenge | 11:58 |
Example dashboard. Figures are illustrative.
Protecting production infrastructure for
The platform
DDoS mitigation
ActivePeak blocked
9.8k/s
Banned sources
7,320
Origin errors
0
The edge watches every domain's request rate, all the time. When a flood starts, protection for that domain is raised automatically, and sources that keep hammering are banned in the Linux kernel, where dropping them costs almost nothing.
How it works
Four checks at the edge, in order. Each kind of attack is stopped at the first one that recognises it.
Detection, mitigation and recovery run by themselves, around the clock, for every domain.
Checks run cheapest first, and the browser check only appears while a domain is under attack.
Live traffic, blocked requests and bans in one dashboard, and our attack data published openly.
Proof
1,231
Attacks mitigated
on our edge since Sep 2026
512.0k/s
Peak attack absorbed
highest filtered request rate
1.5B
Malicious requests dropped
before reaching an origin
Counted live on the Akarguard edge and refreshed hourly.
Pricing
Clear fair-use limits, no hidden fees. Every plan includes automatic certificates and continuous attack monitoring.
For a single site or game server that needs real protection without an enterprise contract.
€20/mo
14 days free, cancel any time
For growing SaaS and e-commerce that can't go down when an attack lands.
€50/mo
14 days free, cancel any time
For agencies and multi-site operators — and hosts who want to resell.
€150/mo
14 days free · reseller pricing: talk to our team
Create an account, add the domain and prove ownership with a TXT record.
Set the A record we show you. A certificate is issued automatically.
Traffic now passes the edge first. Attacks stop there; your visitors don't notice.
FAQ
Something else on your mind? Write to support@akarguard.net and a person will answer.
Websites and APIs served over HTTP and HTTPS. Akarguard is a Layer 7 reverse proxy: HTTP floods, attack tools, bots and web exploits are filtered at the edge, and your origin IP stays hidden so it can't be attacked directly. It is not a volumetric L3/L4 scrubbing service.
No. You add the domain in the dashboard, prove ownership with a TXT record and point the A record at the edge address shown to you. A certificate is issued automatically. Your hosting, stack and deployment stay exactly as they are.
The edge raises protection for that domain by itself, drops attack traffic and forwards clean requests, so the site stays online. Sources that keep flooding are banned in the kernel. You get an email when the attack starts and a PDF report when it ends.
Normally not. The browser check appears only while a domain is under attack, or if you switch it on yourself, and real browsers clear it in a moment. Verified search-engine crawlers are always let through, and the challenge can be kept off for API hostnames.
Yes, on the Pro and Business plans. It detects SQL injection, cross-site scripting, path traversal, command injection and remote file inclusion. Start in learning mode to see what it would block, add exceptions per path, then switch to blocking.
No. Attack traffic is filtered at the edge and never counts toward your plan's traffic allowance. The fair-use allowance covers your legitimate traffic only.
Every plan includes a 14-day free trial. You enter card details to start it, nothing is charged during those 14 days, and cancelling before the trial ends means you are never billed.
Also from Akarguard
Argon2id, ML-KEM-768 and AES-256-GCM. Web app, Windows desktop and a Chrome extension.
Research
Technical Deep Dive · 8 min read
In one attack against our edge, 12,664 TLS handshakes produced 10,789 different JA3 fingerprints and only 11 JA4s. That gap explains why one fingerprint survived randomization and the other did not.
Sep 25, 2026
Best Practices · 7 min read
Every bot allow-list has the same weakness: the User-Agent is a string the client chooses. If "Googlebot" is enough to skip your protection, it is enough for an attacker too. Here is how to verify it properly.
Sep 25, 2026
Attack Analysis · 7 min read
We were blocking the flood correctly and still going down. The cause was the block page itself: a 17 KB branded error page, served millions of times, sent more traffic out than the attack sent in.
Sep 25, 2026
Point your DNS at Akarguard and attack traffic is filtered at our edge — before it ever reaches your origin.
