Protect every domain.
Block every threat.
Enterprise-grade DDoS protection, Web Application Firewall, and bot management — powered by Cloudflare's global network with intelligent Layer 7 protection on top.
Architecture
Two layers of protection, working together
Every domain runs behind Cloudflare's free tier for L3/L4 DDoS absorption and global CDN. CloShield adds the intelligent L7 layer that Cloudflare's free plan doesn't provide.
Getting started
Protected in three simple steps
Get your website behind CloShield's protection layer in minutes, not days.
Add your domain
Enter your domain name and backend origin IP. CloShield creates the necessary DNS records and Cloudflare proxy configuration automatically via the Cloudflare API.
Point DNS through Cloudflare
Update your domain's nameservers to Cloudflare (free plan). CloShield verifies the DNS propagation and activates the proxy once detected.
Protection goes live
Traffic starts flowing through Cloudflare → CloShield → your origin. DDoS protection, rate limiting, bot detection, and WAF rules activate instantly with zero configuration.
Four-stage adaptive challenge system
CloShield doesn't just block traffic — it thinks. When traffic pressure increases, the system automatically escalates through four challenge stages: transparent cookie verification, JavaScript proof-of-work, image CAPTCHA, and hard block. When pressure drops, it de-escalates just as smoothly. Legitimate visitors never see a challenge page.
gofilter: write rules that match your threat model
CloShield's rule engine uses gofilter — a human-readable expression syntax that lets you match on any request attribute. Combine IP ranges, country codes, ASNs, URL paths, HTTP methods, headers, user agents, query parameters, and even TLS fingerprints into precise rules. Set actions per rule: allow, block, challenge, or increase suspicion score.
Per-request visibility with live traffic feed
Every request that flows through CloShield is logged with full context: source IP, geolocation, ASN, user agent, matched rule ID, and action taken. The live traffic feed updates in real-time with auto-refresh. Filter by status, country, IP, or rule match. Export traffic logs for forensic analysis and compliance.
Why CloShield
What changes when you switch
Without CloShield
With CloShield
Use cases
Built for every industry that depends on uptime
From hosting providers to e-commerce — CloShield adapts to your specific protection needs.
Hosting Providers
Offer DDoS protection as a value-add to your hosting plans. WHMCS webhook integration automates billing and domain provisioning. Manage hundreds of customer domains from a single admin panel.
E-commerce Sites
Protect checkout flows from credential stuffing and bot attacks. Rate limiting prevents inventory scraping. The adaptive challenge system keeps real shoppers browsing while blocking automated threats.
SaaS Applications
Shield your API endpoints and customer dashboards. Custom gofilter rules let you build security logic that matches your application's specific threat model. Multi-backend routing enables zero-downtime deployments.
Media & Publishing
Handle viral traffic spikes without going offline. CloShield's rate limiting keeps scrapers and bots at bay while real readers pass through transparently. Per-request logging helps with content analytics.
Pricing
Simple, transparent pricing
No bandwidth charges. No hidden fees. Choose based on the number of domains you need to protect.
Ready to secure your infrastructure?
Start your free trial — add your first domain and have enterprise-grade protection live in under 5 minutes. No credit card required.