Volumetric floods
UDP floods, DNS amplification and SYN floods are absorbed at the edge, so they never reach the bandwidth you are paying for.
L3–L7 · Edge — a Torjua product
Take the flood.
Pass the traffic.
Every packet reaches our edge before it reaches you. Attack traffic is dropped where it lands; real sessions carry on with under three milliseconds added. There is no threshold to breach, because mitigation is never off.
Scrubbing capacity
10+ Tbps
Added latency
Under 3 ms
Layers covered
L3 – L7
Time to mitigate
Zero — always on
Protection layers
A flood is not one attack, so this is not one defence.
Volumetric, protocol and application attacks fail in different ways and have to be stopped in different places. All three are covered by default, on every plan.
Protocol attacks
Malformed packets, fragmentation abuse and state-exhaustion attempts are dropped before they occupy a connection table.
Application-layer filtering
HTTP floods, slowloris and bot-driven resource exhaustion are handled with rate limits and challenges that leave real users alone.
Attack analytics
Live vectors, source geography and mitigation effectiveness, exportable as evidence for an insurer or a regulator.
Anycast routing
Traffic reaches the nearest scrubbing centre, so attack volume is absorbed close to where it originates rather than dragged across Europe.
Rules you control
Geo-blocking, rate limits and allowlists that you write. Changes reach every edge node in under ten seconds.
Setup
One DNS change, and then nothing to do.
- 01
Point your DNS at us
A CNAME or an A record, depending on your setup, with any DNS provider. Nothing is installed and nothing on your origin changes.
- 02
Traffic runs through the edge
Everything passes our scrubbing infrastructure first. Clean sessions are proxied on to your origin with under three milliseconds added.
- 03
Attacks are absorbed without you
Mitigation is already on, so there is no threshold to breach and no button to press. You get an alert and the analytics; your users get nothing unusual.
Pricing
Priced on guaranteed capacity, not on panic.
You are not billed more during an attack. That is the moment a protection vendor should be least interesting to your finance team.
Essential
Always-on L3 and L4 protection for a site or an API.
€ 49 / month
- 1 Gbps guaranteed
- L3 / L4 protection
- Email alerts
Professional
RecommendedFull L3–L7 cover with your own rules and the analytics to prove it worked.
€ 199 / month
- 10 Gbps guaranteed
- L3 – L7 protection
- Custom rules engine
- Live attack dashboard
Enterprise
Dedicated scrubbing capacity with a response time in the contract.
Custom
- Unlimited capacity
- Dedicated scrubbing
- 24/7 SOC support
- 99.99% SLA
Set this up before you need it.
Connecting takes one DNS change and about five minutes. Doing it mid-attack takes the same five minutes, plus however long the outage has already run.