Managed WAF
A dedicated reverse proxy with WAF rules, rate limiting, and bot filtering. Deployed in front of your origin in 5 minutes.
Three steps.
Point DNS
Change your A or CNAME record to VoidFort. Takes 2 minutes. No code changes.
Shield activates
We provision your Shield node in the nearest datacenter region. Traffic flows through it. Your server is now unreachable directly.
Stay dark
Attackers hit VoidFort. Your server serves legitimate requests through the Shield.
Six protection layers.
IP Reputation
Incoming IPs checked against threat intelligence feeds updated every 15 minutes. Known bad actors blocked on connection.
Rate Limiting
One per-IP threshold per site: 10 to 300 requests per 10 seconds. Over the limit, the connection is dropped without a reply, or the site returns an empty 403. Repeat offenders can be escalated to a CrowdSec ban.
WAF Rules
SQLi, XSS, path traversal, RCE, SSRF, and 200+ additional rule categories. Rules updated without deployment.
Bot Filtering
Today: CrowdSec community lists and bans for repeat offenders. Planned: behavioral signals, header anomalies, and TLS fingerprint analysis.
DDoS Protection
The node filters HTTP floods. Volumetric L3/L4 attacks are stopped by the datacenter network: a separate protected IP option, attached to the node separately.
Origin Shield
Your server's IP never appears in DNS. VoidFort IPs are the only public-facing endpoints.
The goal they can't find.
Defense in the dark. No credit card. No footprint.