FluffyStack toolsJurisdictional exposure
Attributes
- Rulesets
- OWASP Top 10 + custom
Sub-services (3)
Protection Rules
Pre-built OWASP Top 10 + custom expression-based rules
Bot Management
Traffic scoring to distinguish humans, good bots, and bad bots
API Security
Schema-based API abuse detection and parameter validation
Compliance & Certifications
This service is attested for the following frameworks. Always verify with the provider before relying on a specific compliance posture.
Where this runs
Sovereign regions (11)
- China (Hangzhou) · HangzhouAlibaba Cloud China
- China (Beijing) · BeijingAlibaba Cloud China
- China (Shanghai) · ShanghaiAlibaba Cloud China
- China (Shenzhen) · ShenzhenAlibaba Cloud China
- China (Chengdu) · ChengduAlibaba Cloud China
- China (Zhangjiakou) · ZhangjiakouAlibaba Cloud China
- China (Hohhot) · HohhotAlibaba Cloud China
- China (Qingdao) · QingdaoAlibaba Cloud China
- China (Heyuan) · HeyuanAlibaba Cloud China
- China (Ulanqab) · UlanqabAlibaba Cloud China
- China (Wuhan) · WuhanAlibaba Cloud China
Commercial regions (15)
Europe (2)
- Frankfurt
- London
North America (2)
- Silicon Valley
- Virginia
Asia (9)
- Hong Kong
- Mumbai
- Jakarta
- Tokyo
- Kuala Lumpur
- Manila
- Singapore
- Seoul
- Bangkok
Oceania (1)
- Sydney
Middle East (1)
- Dubai
Tags
Equivalent services on other platforms
Web application firewall that protects against common exploits with managed rule groups, custom rules, rate-based rules, Bot Control, and CAPTCHA challenges
Layer 7 load balancer with integrated web application firewall, SSL termination, URL-based routing, cookie-based session affinity, and autoscaling based on traffic
Machine-learning bot classification at the edge — scores every request 1-99 and exposes that to WAF rules. Distinguishes search-engine crawlers, scrapers, credential-stuffing tools, and headless browsers without breaking legitimate automation.
API-specific security layer — schema validation, mTLS client authentication, rate-limiting per JWT subject, sensitive-data detection in responses, and API discovery / inventory that auto-surfaces unknown endpoints.
L7 web application firewall protecting against OWASP Top 10 risks with Cloudflare-managed rule sets, custom expression-based rules, exposed-credentials detection, rate-limiting integration, and machine-learning attack-score signals tuned across the global traffic graph
Volumetric and application-layer DDoS protection for services hosted on Cloud Temple, with sub-second detection and automated mitigation across the SecNumCloud-qualified perimeter
Web application and API protection with OWASP rule sets, bot management, API schema enforcement, and rate limiting — delivered at the CDN edge with a single configuration surface
Edge DDoS protection and web application firewall with managed rule sets for OWASP Top 10, adaptive bot protection, and reCAPTCHA Enterprise integration
Managed web application firewall with OWASP Top 10 rule sets, bot management, anti-crawler, CC (challenge-collapsar) attack mitigation, custom rule engine, and regional deployment with integrated DDoS protection
Layer-7 protection against OWASP Top 10 attacks (SQLi, XSS, RCE), bot traffic, and DDoS at the application layer. Edge-deployed for global protection or regional for backend-fronted apps.
L7 web application firewall protecting against OWASP Top 10 risks — SQL injection, XSS, command injection — with managed rule sets, custom rules, IP allow/block lists, and bot-detection heuristics tuned for OTC-hosted apps