We get asked about the economics of DDoS-for-hire in 2026 more than almost anything else, so here is the long answer.Compliance is a side effectRegulators increasingly ask for evidence of resilience, not…
search endpoint flood against a crypto exchange platform in North America, peaking at 208.0 million requests per second. Mitigated in 0.236 seconds.
HTTP GET flood against a municipal services platform in Iberia, peaking at 635.9 million requests per second. Mitigated in 0.823 seconds.
This post is about how to hide your origin IP properly. It started, as most of our posts do, with an incident that did not go the way we expected.Testing in production,…
HTTP/2 rapid reset against a sports betting platform in Central Europe, peaking at 413.0 million requests per second. Mitigated in 0.757 seconds.
login endpoint flood against a sports betting platform in Central Europe, peaking at 671.5 million requests per second. Mitigated in 0.423 seconds.
Here is a question we could not answer well a year ago: what really happens with gDPR and request logs: what we store and why? We can answer it now.Observability firstEvery mitigation…
Over the last few months we have spent a lot of time on building a per-route baseline without storing every request. This is what we learned.Observability firstEvery mitigation decision is logged with…
WebSocket connection flood against a online payments platform in the Middle East, peaking at 814.7 million requests per second. Mitigated in 0.335 seconds.
credential stuffing volumes after the latest combo-list leak sounds like a narrow topic. It turns out to touch almost every part of how an edge network behaves under attack.Observability firstEvery mitigation decision…
GRE flood against a education platform platform in the Benelux, peaking at 98.6 Gbps. Mitigated in 0.490 seconds.
UDP reflection (DNS) against a news publisher platform in the Middle East, peaking at 204.8 Gbps. Mitigated in 0.780 seconds.