Akarguard filters DDoS traffic at the edge before it reaches your server, and keeps the flood off your origin. Always-on, no hardware, and live with a single DNS change.
No credit card requiredCancel anytimeSetup in minutes — DNS only
Filtering
floods dropped at the firewall
Setup
no hardware, no migration
Certificates
issued and renewed for you
Security certifications:
Trusted by teams running production infrastructure
Protection Features
Akarguard's multi-layered engine handles the full spectrum of DDoS attacks — so you never have to think about it.
Akarguard is a Layer 7 reverse proxy: it inspects every HTTP/HTTPS request and filters application-layer floods, bots and abuse — while hiding your origin IP so direct network floods can't find your server.
Traffic analysis detects an attack and raises protection automatically, then restores your normal mode once it's over — no one has to be awake to flip a switch.
Traffic is routed through our protective edge via a simple DNS change. Clean requests reach your server; attack traffic never does.
Full visibility into traffic patterns, blocked requests, and active mitigation events — all in a single, intuitive dashboard.
Decrypt, inspect, and re-encrypt traffic inline — stopping encrypted attack payloads without sacrificing user privacy.
Deploy in always-on mode for constant protection, or on-demand for instant activation the moment an attack is detected.
How It Works
Traffic enters through our edge, bots are challenged, floods are dropped in-kernel, and only verified requests reach your server — with everything visible in your dashboard.
Add your domain in the dashboard, drop in the A record we give you, and every request now enters through the Akarguard edge instead of hitting your server directly. Your origin IP stays hidden.
The edge sits in front as a reverse proxy. Under load it serves a lightweight browser check (or a CAPTCHA) that real browsers clear in a few seconds — automated floods and headless bots never get past it.
Sources that keep flooding are dropped in the Linux kernel itself — ipset plus iptables, not a slow log parser. Repeat offenders are cut at the firewall in milliseconds, so the box stays fast even under a real attack.
Verified requests are forwarded straight to your origin. The dashboard shows live traffic and mitigation events as they happen, and emails you a PDF report once an attack is over.
By the numbers
Not estimates. Every figure is counted on our own edge and updates hourly — see the open data.
86
Attacks mitigated
on our edge since Sep 2026
112.3k/s
Peak attack absorbed
highest filtered request rate
2,124,573
Malicious requests dropped
before reaching an origin
50s
Median attack length
detection to resolution
A post-quantum, zero-knowledge password manager. Your vault is encrypted on your device before it leaves — the server never sees a single byte of plaintext.
Zero-Knowledge Architecture
Your master password, encryption key, and vault contents never reach the server as plaintext. Only an encrypted blob is ever transmitted.
All key material is wiped from memory immediately after use.
Platform Support
React Native mobile app coming soon • iOS & Android
Cryptographic Layers
Key derivation with 64 MiB of memory — the industry standard against brute-force.
NIST FIPS 203 post-quantum encryption — ready for quantum computers.
Authenticated symmetric encryption — military-grade data protection.
Open-source cryptography — nothing hidden.
Built on @noble/post-quantum and hash-wasm — audited, independent libraries. No home-grown crypto.
Post-Quantum
NIST FIPS 203
Symmetric Cipher
Authenticated
KDF
64 MiB memory
Plaintext
Never reaches server
Pricing
Clear fair-use limits, metered overage only past them. No hidden fees. Protection that scales with your business.
For a single site or game server that needs real protection without an enterprise contract.
14 days, no credit card
For growing SaaS and e-commerce that can't go down when an attack lands.
14 days, no credit card
For agencies and multi-site operators — and hosts who want to resell.
Reseller pricing available
All plans include a 14-day free trial, automatic TLS certificates, and continuous attack monitoring. Questions? Talk to our team.
Security Blog
A DoS attack comes from one source; a DDoS from thousands at once. Here's what actually separates them, why DDoS is far harder to stop, and how each is defended.
Akarguard Team
Security Engineering
From the 1.35 Tbps GitHub attack to record-breaking HTTP/2 floods, here are the largest DDoS attacks ever recorded, how they worked, and the lessons for defenders.
Akarguard Team
Security Engineering
A WAF filters malicious HTTP requests like SQL injection and XSS before they reach your app. Here's how it works, what it can't do, and how it pairs with DDoS protection.
Akarguard Team
Security Engineering
A reverse proxy sits in front of your server, handling every request before your origin sees it. Here's how it works and why it's the foundation of modern DDoS protection.
Akarguard Team
Security Engineering
Downtime, lost sales, emergency engineering, churn and reputation — a DDoS attack costs far more than the bandwidth. Here's how to estimate your real exposure.
Akarguard Team
Security Engineering
Get the weekly threat digest
Attack reports, mitigation guides, and security news — every Friday.
Point your DNS at Akarguard and attack traffic is filtered at our edge — before it ever reaches your origin.
