Sign inShield
Shield blocks the IP addresses and accounts behind brute force, credential stuffing, scanners and web attacks, right inside your app. You choose what gets blocked and for how long.
blocked · 203.0.113.7 · brute force403blocked · 198.51.100.23 · /.env scanner403limited · POST /login · 10 / min429would block · 192.0.2.41 · test modetestallowlisted · office 10.0.0.0/8okWhat it does
Off until you turn it on, per project. Start in test mode and see what would have been blocked before anything is.
One response per attack type: block, alert, email or just record. Blocks last 15 minutes, an hour, a day or until you lift them, with login rate limits per route.
An allowlist for your office and partners, one-click lift for any block and a count of the requests stopped. Keep your CDN or firewall for traffic floods; Shield handles what reaches your app.
Up next
Attack detection
Brute force, credential stuffing, account takeovers and scanners become security issues, with who was targeted, where the attempts came from and what happened next.
Scale plan
Explore Attack detectionlodash 4.17.15 → 4.17.21highshop.example.com/.envfailTLS expires in 9 dayswarnWeak spots
Blipit checks the libraries your app runs against known vulnerabilities, checks the domains you monitor for exposed files, leaked keys and missing protections, and tells you what to fix first.
Scale plan
Explore Weak spotsError monitoring
Thousands of crashes become one issue per cause, mapped back to the file and line in your own code, with the release and the steps that led there.
Every plan, Free included
Explore Error monitoringStart on the Free plan. Add the SDK, the report button or the Odoo module, and your next bug arrives with the code that broke.