NewOne plan from €9.90, extra domains €1, every feature included
Live attack statistics →Resources
How we protect our platform and what to do if you find a vulnerability.
All traffic is served over TLS 1.2+ (terminated at our edge). The database is stored on an encrypted LUKS/AES-256 volume, and nightly backups are encrypted too. Account passwords are never stored in plaintext — only as bcrypt hashes.
Two-step sign-in (password plus a one-time code emailed to the account) and email confirmation at signup. Strict tenant isolation: each account only sees its own domains, rules and logs. Every administrative change is written to an append-only audit trail with the acting account and request IP.
The dashboard origin is firewalled to the edge only, sign-in and auth endpoints are rate-limited, and the edge applies reverse-path (BCP 38) filtering to reject spoofed-source packets.
Defined incident response procedures with clear SLAs. Affected customers are notified within 72 hours of a confirmed breach, in line with GDPR Art. 33.
We take security seriously and welcome reports from security researchers and the community. If you believe you have found a security vulnerability in any Akarguard system, please report it to us responsibly.
What to report: Authentication bypasses, data leakage, injection vulnerabilities, misconfigured security headers, privilege escalation, or any other vulnerability that could affect the confidentiality, integrity, or availability of Akarguard systems or customer data.
How to report: Email security@akarguard.net with a clear description of the vulnerability, steps to reproduce, and any supporting evidence (screenshots, proof-of-concept code). Encrypt sensitive reports using our PGP key (available on request).
What to expect: We will acknowledge your report within 2 business days and aim to triage and respond with an initial assessment within 7 days. We will keep you updated as we work towards a fix.
We do not operate a paid bug bounty programme at this time, but we will acknowledge researchers who report valid, responsibly-disclosed vulnerabilities.
Security contact
€9.90 a month, €1 for each extra domain, every feature included, 7 days free. One DNS change to start.