Managed WAF protection
Protect web applications with managed Web Application Firewall policies and default rules. Control which policies apply to each protected domain.
ExploreProtect with confidence
A security layer you can make your own.
Start with managed protection. Refine how each application handles traffic as your requirements grow.
Your rules. Your exceptions.
Match requests to custom conditions, apply IP firewall rules and refine policies with targeted overrides. Custom and firewall rules start on Advanced.
ExploreA clear view of traffic
Review request volumes, blocked traffic and security events. Filter investigations by domain, request or client IP and save useful filter templates.
ExplorePolicy control
Fine-tune protection.
Keep the context.
Build rules around how your application works, with clear controls for requests, client IPs and policy exceptions.
- Managed policies
- Select the protection policies that fit each application and review their settings.
- Custom & firewall rules
- Define request conditions and IP access controls on Advanced and Business.
- Policy overrides
- Create precise exceptions for traffic that needs different treatment.
- Response pages
- Design the pages visitors see when requests are blocked or challenged.
One delivery path
Your CDN is already the foundation.
Cloud Shield attaches to an existing Cloud CDN distribution. Keep the hostnames, origins, DNS routing and TLS certificates you have already configured.
Explore the CDN connectionTHE REQUEST PATHApplication protection
Visitors & API clients
Cloud CDNYour existing distribution
Cloud ShieldInspect · evaluate · act
AllowChallengeBlock
Your application origin
Visibility that leads to action
Understand the request.
Then make the decision.
Move from a traffic overview to the details behind an event. Investigate a client IP, reuse a saved filter and tune the policy that governs your application.
Security Insights and Threat Intelligence are available with the Business Threat Intelligence add-on.
Explore threat investigationYOUR INVESTIGATION WORKFLOW
- Traffic analytics
See request volume and protection activity.
- Security events
Find the request and inspect its context.
- IP investigation
Review client activity and reputation.
- Policy & rule controls
Adjust protection with a targeted change.
Extend your protection
Protection for bots, APIs and emerging threats.
Optional capabilities, with eligibility made clear before you choose a plan.
Bot Management
Identify malicious automation and apply bot-specific controls to your application traffic.
Explore Bot ManagementAPI Security
Discover API endpoints, review scans and endpoint groups, and use API-specific protection controls.
Explore API SecurityThreat Intelligence
Explore Security Insights and additional intelligence to understand suspicious activity.
More control for your team. Advanced Rules are an add-on on Advanced and Business. SIEM Integration, RBAC and Audit Logs are available as Business add-ons.
Discuss add-onsBuilt for daily operations
Operational control, every day.
Protected applications
Select CDN distributions, organize protected domains and use tags to keep resources easy to find.
Investigations & reference
Use IP Spotlight, IP reputation, saved filters and network organization reference data to investigate traffic.
Usage & pre-billing
Track protected requests, domain allowances and projected usage charges before the billing period ends.
Console & API
Manage protection in the same project as your CDN and DNS, or automate supported controls through the Aptranet API.
Straightforward plans
Start with the protection you need.
Basic
€19/month
Small sites & apps
- 1 domain
- 500K/mo protected requests
- Managed policies & default rules
Advanced
€59/month
Growing businesses
- 5 domains
- 1M/mo protected requests
- Managed policies & default rules
Business
€199/month
Agencies & production apps
- 10 domains
- 5M/mo protected requests
- Managed policies & default rules
Cloud CDN is required and billed separately. Add-ons and overages are additional. All prices exclude VAT.
Frequently asked questions
Yes. Select an existing Cloud CDN distribution in your project and attach Cloud Shield to it. Cloud Shield uses the distribution’s existing hostnames, origins, DNS routing and TLS certificates. Cloud CDN is required and billed separately from your Cloud Shield plan.
Aptranet Cloud Shield attaches to your existing Aptranet Cloud CDN distributions and inspects web and API traffic using managed security policies. It uses the domains, origins, DNS routing and TLS certificates already configured in Cloud CDN. Manage protected domains, custom and firewall rules, policy overrides, security analytics, custom response pages and IP reputation from the Management Console.
Bot Management and Advanced Rules are optional on Advanced and Business. Threat Intelligence, API Security, SIEM Integration, RBAC and Audit Logs are optional on Business. Contact Aptranet for add-on pricing and activation.
Basic includes 500K protected requests per month, Advanced includes 1M, and Business includes 5M. Request overages cost €8, €5 and €2 per million respectively. Business includes 10 domains; additional domains cost €10 per domain per month. Basic and Advanced require an upgrade for more domains.