We get asked about positive security for APIs from your OpenAPI spec more than almost anything else, so here is the long answer.Measuring successWe track three numbers for every incident: time to…
Slowloris against a developer platform platform in Iberia, peaking at 898.0 million requests per second. Mitigated in 0.219 seconds.
SYN flood against a municipal services platform in the Middle East, peaking at 29.6 Gbps. Mitigated in 0.803 seconds.
GRE flood against a electronics retail platform in the Middle East, peaking at 229.5 Gbps. Mitigated in 0.408 seconds.
memcached amplification against a education platform platform in Central Europe, peaking at 370.1 Gbps. Mitigated in 0.195 seconds.
Rolled out to all points of presence on 26 April 2022. No action is required. API: new endpoint /v1/incidents/{id}/export. Faster […]
UDP reflection (NTP) against a gaming community platform in the Middle East, peaking at 75.2 Gbps. Mitigated in 0.831 seconds.
credential stuffing against a electronics retail platform in Western Europe, peaking at 304.6 million requests per second. Mitigated in 0.441 seconds.
credential stuffing against a video streaming platform in the Benelux, peaking at 694.2 million requests per second. Mitigated in 0.558 seconds.
how we test WAF rules against seven days of real traffic sounds like a narrow topic. It turns out to touch almost every part of how an edge network behaves under attack.What…
memcached amplification against a municipal services platform in the Nordics, peaking at 254.7 Gbps. Mitigated in 0.237 seconds.
HTTP POST flood against a ticketing platform in the UK, peaking at 213.5 million requests per second. Mitigated in 0.710 seconds.