Always-on volumetric scrubbing up to 400 Gbps with low added latency.
Distributed denial-of-service attacks come in two flavors that need different defenses. Volumetric attacks (L3/L4) flood the upstream pipe with reflection-amplification traffic — DNS, NTP, SSDP, memcached. Application attacks (L7) target the application stack directly with bot traffic that looks superficially like real users. Both happen routinely in offshore-relevant niches: streaming services, game servers, controversial commentary sites, crypto nodes, and DDoS-for-hire victims caught in the crossfire.
We ship volumetric scrubbing as standard on every plan. Capacity scales with tier: 10 Gbps on entry VPS, 80 Gbps on mid-tier, 200 Gbps on DS Pro, and 400 Gbps on DS Beast. The scrubbing is always-on, so there's no detection-and-reroute delay during an attack — packets that match attack signatures get dropped at the edge before they reach the customer port. Game and streaming traffic gets a low-latency filter profile that adds 1–3 ms versus the 50–200 ms common on generic scrubbers.
L7 protection is application-stack work. We don't replace Cloudflare for it; we recommend Cloudflare in front of public web properties for bot management, WAF rules, and rate-limiting. The two layers compose cleanly: edge L3/L4 absorbs the volumetric noise, Cloudflare absorbs the L7 abuse, and the customer port stays clean.
Traffic enters our edge globally. Attacks are detected and tagged within 50 ms.
Up to 400 Gbps absorbed at the edge — reflection-amplification, SYN floods, UDP storms all dropped.
Common L7 patterns blocked; customer-defined rules apply via the panel or Cloudflare in front.
Included on every plan from VPS-1 up. Optional enterprise tier scales to 1+ Tbps for sustained attacks.
Six concrete things ddos protection delivers — without an upsell, an asterisk, or a tier gate.
Standard on every tier listed below — no add-on, no upsell.
Mid-tier offshore VPS — sweet spot for production.
Heavy-duty offshore VPS for traffic-heavy projects.
Mid-tier offshore dedicated — Ryzen 9 power.
EPYC-grade offshore dedicated for production.
Top-spec dual-Xeon dedicated for enterprise loads.
Active in all 8 datacenters — capacity scales with the plan tier (10 Gbps entry to 400 Gbps top dedicated).
MVP placeholders coherent with our publicly-reported statistics — replaced once telemetry-grade data is wired.
Four commitments that hold across every plan, every jurisdiction, and every payment method. They're what makes offshore offshore.
The DMCA is a US statute. None of our 8 operating jurisdictions are inside US territorial scope. Boilerplate, automated, or speculative takedown notices go to /dev/null. Substantive complaints under local law route through counsel, with a 5-business-day customer-response window.
No name, no phone, no government ID, no proof of address — at any point, regardless of order size. Sign up with a pseudonym and a password. Email is optional. You pay in crypto, straight to our wallets, so no bank or card statement carries your name either.
We don't keep server-side logs of customer activity — no access logs, no IP logs, no command-history logs. Tax / billing records follow Seychelles law (7 years, billing-only — never linked to traffic). No third-party trackers, no analytics linked to your account, no data brokerage on any tier. See our transparency report for how many subpoenas this has translated into 'nothing to produce'.
Crypto goes straight to our wallets — no Coinbase Commerce, BitPay or other processor in the loop. 10 options at checkout: Monero, Bitcoin, Litecoin, Ethereum, Solana, TRX, and USDT and USDC on ERC-20 and TRC-20. 7-day money-back guarantee, refunded in the coin you paid with.
Yes. Scrubbing is standing — there's no opt-in toggle and no detection-and-reroute window. Attack traffic is filtered at the edge from the first packet.
VPS-1 / VPS-2: 10 Gbps. VPS-4 / RDP Pro: 20 Gbps. VPS-8 / Stream-1 / Game-M: 40 Gbps. VPS-16 / Game-L / Stream-2: 80 Gbps. DS Mid: 100 Gbps. DS Pro: 200 Gbps. DS Beast: 400 Gbps.
Sustained attacks above plan capacity trigger an upgrade conversation, not a termination. We absorb the attack on a best-effort basis while you decide whether to upgrade or wait it out.
Edge scrubbing handles L3/L4 only. L7 protection (application bots, slow-loris, credential-stuffing) is a Cloudflare or BunnyCDN concern at the application edge. We integrate cleanly with both.
No — signature-based. GeoIP filtering is a customer-side option you can configure at the application or Cloudflare layer if you want to drop traffic from specific regions.
1–3 ms on the standard profile. Game-grade UDP filters are tuned for the low end of that range; standard TCP scrubbing is at the higher end.
Yes — the features documented on this page apply uniformly across every plan listed in the 'Available' section. There is no add-on tier, no asterisk, and no plan-tier gate that would unlock a different version of the same feature.
Most features are configurable via the customer panel — for example, DDoS thresholds, payment-method preferences, and notification rules. A few features (anonymous-signup posture, AUP enforcement) are policy-level and not customer-configurable, since they apply uniformly to operate the platform.
Anonymous signup. Bitcoin & Monero accepted. Provisioned across 8 jurisdictions.
No credit card required · 7-day money-back guarantee