Edge security · DNS · Uptime — for businesses
Stop bots and attacks before they reach your server.
Bot protection, a firewall you control, managed DNS and uptime monitoring — one platform, no vendor lock-in, and a team that actually answers your emails.
Everything, built in
No add-on tiers. No surprise limits.
One platform covering security, performance and visibility — every feature on every plan.
Bot detection & fingerprinting
45+ signals including TLS/JA3 fingerprinting and behavioural analysis to tell real visitors from scrapers and scanners.
JA3/JA4 and HTTP/2 SETTINGS fingerprints catch tools that claim to be Chrome but negotiate TLS like Python. This runs before a single byte reaches your origin.
Learn more →Firewall & WAF rules
Expression-based rules with a visual builder — allow, block, challenge, or log any request pattern.
Match on IP, country, AS number, network type, bot score, hostname, path, query, method, headers, user agent and TLS. Combine with and / or / not, regex and wildcards.
Learn more →DNS management
Full authoritative DNS with an audit log, wildcard support, and one-click record imports from your old provider.
Page rules & redirects
Wildcard URL rules for redirects, rewrites, header injection, and per-path cache control.
Rate limiting
Per-IP, per-session, or per-API-key thresholds with custom block responses and automatic mitigation windows.
SSL, HTTPS & HSTS
Automatic certificates, enforced HTTPS, and configurable HSTS — including preload support.
HTTP/3 & compression
QUIC transport, Brotli compression, and image optimisation for faster page loads worldwide.
Uptime monitoring
Origin health checks every 60 seconds with incident tracking and a public status page for your customers.
Log export
Ship security events to S3, Splunk, or Datadog with configurable retention up to 90 days.
Origin lockdown
Hide your real server IP and get a guided OPSEC checklist so it can never be discovered or attacked directly.
The panel
Real screens. No mockups.
The same dashboard your team uses from day one.
Write a rule the way you'd say it
Pick a field, an operator and a value — or type the expression. It's validated as you type and deployed to the edge in seconds.
Onboarding
Live in an afternoon.
No code changes, no agents to install. Your origin keeps running exactly as it does today.
- 01
Add your domain
Import your existing DNS records in one click. Nothing changes at your registrar yet.
- 02
Point at our nameservers
Switch ns1/ns2 at your registrar. We verify the delegation and flip the domain live the moment it propagates.
- 03
Turn on protection
Bot protection, firewall rules and rate limits per domain. Certificates issue themselves.
- 04
Lock the origin
Follow the lockdown guide so your server only ever talks to the edge — your IP disappears from the internet.
Commitments
Built to be trusted.
Your data stays yours
We don't sell, share or mine visitor data. Security events are kept for the retention you choose, then deleted.
No lock-in, by design
Standard DNS, standard certificates, an open API. Move a domain in or out by changing nameservers — nothing else to unwind.
Humans on the other end
Quotes, onboarding and support are handled by the engineers who run the platform. No ticket queue, no tiers.
Transparent by default
Every block, challenge and rule hit is logged with the reason. If we got it wrong, you can see it and fix it in one click.
Get a quote
Tell us what you're protecting.
Domains, traffic, and what keeps you up at night. We reply personally, usually within a day.
abuse & security: abuse@greenproxy.cfd