Open pricing. Full protection on every plan.
Built for server operators who have outgrown free protection but are nowhere near enterprise. Every account starts with 30 days of Pro – no sales call, no metered mitigation bandwidth.
- Prices published openly
- No bandwidth metering
- Filter nodes in Germany
- Setup is one CNAME
- Invoiced from Germany
In every plan – the free one included
The protection stack is not what we ration. You pay for capacity and for the VPN filter, not for features we switched off.
Mitigation
- XDP/eBPF filtering in the kernel
- Uncapped mitigation bandwidth
- Minecraft-aware anti-bot & rate limiter
- Four sensitivity presets, relaxed to aggressive
- Rejoin delay with burst tuning
Routing & compatibility
- Java Edition and Bedrock over UDP
- Velocity, Paper, BungeeCord, Geyser, Floodgate
- PROXY protocol v2 for real player IPs
- Node pinning per route
- Maintenance mode with a bypass allowlist
- Per-route IP blocklist
Visibility & forensics
- Per-route traffic analytics
- Node health per location: latency, load, state
- Blocked connections with country, ASN and risk score
- Export as CSV or JSON
- IP diagnostics: ping, TCP port check, geo lookup
- A built-in live demo that plays a mitigation through
Free
Your first server
Forever – no card needed
- 30 days of Pro included
- 1 protected domain
- The full protection stack
- Community support
Starter
From your second server on
- 3 domains instead of 1
- Ticket support, not a community queue
- Webhooks into your own systems
- Monthly – no contract term
Pro
Once it is a network
- Unlimited domains
- VPN / proxy filter incl. forensics
- Priority tickets
- Monthly – no contract term
Enterprise
Your own capacity
Tailored to your network
- Dedicated filter nodes
- Team management with roles
- Custom mitigation rules
- Contractual SLA
All prices are final prices. No VAT is charged under § 19 UStG (small business).
What you actually look at
See how a mitigation runs – before it matters
The dashboard has a live demo that plays an attack through: packet rate, dropped versus forwarded traffic, and where the sources are coming from. Synthetic, on purpose – so you can watch the shape of a mitigation without waiting to be attacked.
And you can take the evidence with you
Every blocked connection with its time, origin country, target route, what triggered it and a risk score – searchable by IP, country or route, and exportable as CSV or JSON. Country and detection are shown to you; neither is used as a blocking rule.
And get to the bottom of any address
Ping it, port-check it from measurement points in several countries, look up where it sits – straight from the dashboard, without switching tools or pasting the address into a third-party site.
Where the plans differ
Three things change between plans: how many domains you may protect, whether the VPN / proxy filter is available, and whether you can send events to your own systems. Everything above is identical on all four – Free included.
| Feature | Free | Starter | Pro | Enterprise |
|---|---|---|---|---|
| Capacity | ||||
| Protected domains | 1 | 3 | Unlimited | Unlimited |
| VPN / proxy protection | ||||
| Block VPN & proxy connections | Not included | Not included | Included | Included |
| Forensics on blocked connections (map, country/ASN, risk score) | Not included | Not included | Included | Included |
| Export blocked connections as CSV / JSON | Not included | Not included | Included | Included |
| Automation | ||||
| Webhooks to your own systems (Discord, ticketing, monitoring) | Not included | Included | Included | Included |
| Support & commitments | ||||
| Support channel | Community | Ticket + community | Priority ticket + community | Named contact |
| Support in German & English | Included | Included | Included | Included |
| Contractual SLA | Not included | Not included | Not included | Included |
| Enterprise only | ||||
| Dedicated filter nodes | Not included | Not included | Not included | Included |
| Team management with roles & invites | Not included | Not included | Not included | Included |
| Custom mitigation rules | Not included | Not included | Not included | Included |
Capacity: One route per domain.
VPN / proxy protection: The forensics view opens on every plan – it fills up once the filter is on.
Automation: Signed with HMAC-SHA256, retried on failure, with a delivery log. The attack events cover what was rejected at your route.
And when something does go wrong
Support runs through its own ticket system, not a help channel. You pick a category and the affected platform, and your request gets a private channel of its own. A first answer – from a model trained on our own documentation – arrives immediately and is labelled as AI-generated. One click on “Talk to support” hands the whole thread to a person.
- Structured form: category, affected platform, domain
- A private channel per ticket, with a protected transcript
- Immediate first answer, openly marked as AI-generated
- Handover to a human in one click, nothing retyped
Enterprise
For when one shared edge is no longer the right shape: dedicated filter nodes paired over WireGuard, an organisation with owner / admin / member roles, email invites, and a switcher for operators running more than one network.
The boring parts, settled
Billing from Germany
A German invoice, § 19 UStG – no VAT charged. Card and PayPal on a secure checkout page.
Cancel in one click
Cancel in the dashboard or through the no-login form – your plan runs to the end of the paid period, then continues on Free.
Your data
GDPR-compliant processing, a DPA on request, and imprint and terms under German law.
No lock-in
Protection is a CNAME. Point it back and you are out – no contract term, no notice period.
Questions
What does an attack cost me?
Nothing. Mitigation bandwidth is never metered or billed on any plan, including Free – absorbing a flood does not produce an invoice.
Why is so much included in Free?
Because rationing the protection engine would make it a worse product. What scales with our cost is how many domains you protect and whether you run the VPN filter, so that is what the plans are built on.
Do I need Pro for a single server?
No. One server on Free is a complete setup. Starter is for when you add a second and third domain; Pro is for unlimited domains and the VPN filter.
Can I cancel any time?
Yes. Your plan stays active until the end of the paid period and then switches to Free – your domains stay protected within the Free limits.
Can I switch from Starter to Pro?
Yes – buy Pro and your Starter subscription is cancelled automatically, so you are never billed twice.
Do I need an account first?
No. Check out with your email; we create your account and email you a link to activate it.
Which payment methods are supported?
The methods offered on the secure checkout page, e.g. card and PayPal.
Start on Free, decide later
Every account begins with 30 days of Pro. No card, no call.
Start for free