Skip to content
Docs
CtrlK
Go to Dashboard

Website Security Guide

Origin Shield & Cloaking

Origin Shield guarantees that bad actors cannot bypass WebOptiva's security defenses by discovering your hosting server's direct IP address.

How it works

  • Protect your web server from direct-to-host bypass attacks by verifying requests with WebOptiva Origin Request Signing
  • How to update secret signing keys safely without causing downtime using WebOptiva's dual-secret rotation

Good to know

  • Important: Do NOT enable Origin Request Signing without first coordinating with your developer or hosting team, as your origin server must know the shared secret to verify incoming visits.
  • Use the Test Direct Bypass button in the Origin Cloak Diagnostic Probe card to confirm your origin rejects raw requests before relying on signing.