Hexa WAF
Managed and custom application-layer filtering in front of your origin.
Protect websites and APIs through a shared reverse-proxy pipeline, authoritative DNS controls, scoped API access, rate limiting, IP policy, and live security visibility.
Managed and custom application-layer filtering in front of your origin.
Authoritative DNS controls designed to route eligible records through Hexa Shield.
Scoped API credentials and the same protection pipeline for API traffic.
Sliding-window request limits for domains, routes, IPs, and endpoints.
Allow, block, or temporarily block IPv4/IPv6 CIDR ranges.
Live traffic counters and searchable security events for protected domains.
Traffic is inspected before it reaches your origin.
Caddy handles edge certificate lifecycle for eligible domains.
Investigate why a request was logged or blocked.
Heuristic bot signals are surfaced without pretending they are a perfect trust boundary.
Hexa Shield pricing is monthly only. Visitor accounts remain free until a paid monthly plan is activated.