Automatic defense

Stop new attack variants without watching logs

Each node learns normal traffic for every site on its own; verdicts carry reasons, mitigation is graded, and everything is revoked when the attack ends.

Automatic defense loopA five-step loop: learn a baseline on the node, detect with reasons, mine rules in shadow mode, mitigate by level, and revoke automatically. Only confirmed signatures are shared across nodes.Learn baselineon the nodeDetectwith reasonsMine rulesshadow modeMitigateby levelAuto revokewhen it ends≤ 2 KB per siteonly confirmed signatures shared

Node autonomy

Nodes keep learning and deciding even when the control plane is unreachable.

≤ 2 KB per site

Baselines are small enough for very large site counts.

Explainable verdicts

Every mitigation records why it fired; view or revoke it in the control plane.

Status and limits

Learning, observation and alerting are free; automatic mitigation is a paid module (module.autodefense.auto).

How to use it:Plugins and modules →

← All features