A firewall you can actually read
Write rules the way you'd describe them: block a country on /wp-admin, challenge scripted user agents, allow your office network. Use the visual builder or type the expression directly — both produce the same rule.
What you get
Expression language
Match on IP, country, AS number, network type, bot score, hostname, path, query, method, headers, user agent and TLS. Combine with and / or / not, regex and wildcards.
Four actions
Block (403), challenge (browser check), allow (skip bot protection and network rules) or log (record and let through). Rules run in order; the first match wins.
Live validation
Every expression is parsed as you type and errors point at the exact column. Hit counts show which rules actually fire.
Account-wide or per domain
Put shared rules — blocking a scanner ASN, allowing your office — at the account level once. Per-domain rules layer on top.
How it works
In the panel
Open the Firewall tab, click Create rule, and either pick a starting example or build conditions field by field. Deploy takes effect at the edge within about 15 seconds. Matched requests appear in Security events with the rule number.
Questions
- Is there a managed ruleset for SQL injection and XSS?
- The classic WAF tab covers path, header, method, body and user-agent patterns today; managed OWASP-style rulesets are on the roadmap.
- How many rules can I have?
- There is no practical limit; rules are compiled once and evaluated in memory at the edge.
More from Greenproxy
45+ signals including TLS/JA3 fingerprinting and behavioural analysis to tell real visitors from scrapers and scanners.
Full authoritative DNS with an audit log, wildcard support, and one-click record imports from your old provider.
Wildcard URL rules for redirects, rewrites, header injection, and per-path cache control.