We get asked about the economics of DDoS-for-hire in 2026 more than almost anything else, so here is the long answer.Compliance is a side effectRegulators increasingly ask for evidence of resilience, not…
This post is about what we learned from our first hundred customers. It started, as most of our posts do, with an incident that did not go the way we expected.Lessons for…
This post is about writing your first custom WAF rule. It started, as most of our posts do, with an incident that did not go the way we expected.Latency budgetOur budget for…
what we learned from load-testing our own edge to failure sounds like a narrow topic. It turns out to touch almost every part of how an edge network behaves under attack.The economics…
Here is a question we could not answer well a year ago: what really happens with what DORA means for your DDoS resilience? We can answer it now.Latency budgetOur budget for the…
Here is a question we could not answer well a year ago: what really happens with eU-only processing is now available on every plan? We can answer it now.Challenges beat blocksBlocking lists…
We get asked about positive security for APIs from your OpenAPI spec more than almost anything else, so here is the long answer.Measuring successWe track three numbers for every incident: time to…
Over the last few months we have spent a lot of time on attack seasonality: sports finals, sales and tax deadlines. This is what we learned.Latency budgetOur budget for the whole filtering…
Here is a question we could not answer well a year ago: what really happens with hacktivist floods around elections: a field guide? We can answer it now.The economics behind itA booter…
log streaming to your SIEM, now in near real time sounds like a narrow topic. It turns out to touch almost every part of how an edge network behaves under attack.Measuring successWe…