Authoritative edge security

Contain attacks before they execute against your server.

Aenoruma combines nameserver authority, request screening, challenge orchestration and origin forwarding in one controlled edge. Your backend stays reachable. Unsafe traffic does not get a free path to the origin.

Decision path
Allow, challenge, block, or bypass.
Origin posture
Your server stays behind Aenoruma.
Included plan
1 TB transfer per user each month.
How Aenoruma holds the line

The edge decides first.

DNS brings the visitor to Aenoruma. The edge inspects the host, request shape, browser realism, behavior signals and challenge state. Only then does the request continue to the origin.

1
Traffic lands on your nameserver and edge.

The origin is no longer the first public stop.

2
Suspicious requests are challenged or blocked.

Protection happens before your application executes logic.

3
Healthy traffic is forwarded to the real server.

The site stays online while hostile traffic is absorbed upstream.

Attack containment

Requests do not get a free path to the origin.

Repeated scrapers, malformed automation and suspicious sessions are intercepted at the edge. Aenoruma keeps the origin reachable for legitimate traffic without letting every connection burn server resources first.

Behavior-aware filtering

Recent traffic patterns change the decision, not just static headers.

Challenge gating

Challenge only when risk justifies it. Block when the request is clearly hostile.

Origin passthrough fallback

If a free-plan user exceeds the monthly transfer limit, traffic keeps flowing without protection instead of taking the site down.

Included

1 TB

Every user gets 1 terabyte of protected transfer each month at no charge.

After limit

No outage

Your sites keep working. Aenoruma stops processing protection and switches to direct passthrough until the monthly window resets.

Scaling

Contact sales

Need more transfer, more sites or a larger edge footprint? Contact sales and we will size the deployment with you.