Delivery
Security
Block abusive traffic and review security-relevant activity on your connected domains.
Block traffic
Maintain an IP blocklist and a fixed rate limit scoped to your tenant.
- Redis-backed IP blocklist
- Per-IP rate cap (default 120 requests per 60s)
- Applies before requests reach your origin
WAF rules
Requests are screened against common attack signatures before they're proxied.
- SQL injection detection
- Cross-site scripting detection
- Path traversal and command injection checks
Review events
Every block, WAF match, or rate-limit rejection is recorded so you can investigate later.
- Security event history
- Reviewed from the dashboard
- Logging failures never block a request