Your
Dashboard

Add your domains and copy the embed snippet to drop into each site. Your starting point.

Block or allow visitors by country, state, or city. Unlimited country rules on all plans.

Whitelist and blocklist by IP, per site or across all sites. Overrides geo, ASN, bot detection and all other rules.

Block AWS, GCP, DigitalOcean and other data centers. One rule stops scrapers, crawlers and AI bots.

Gate any page behind a password. Add member accounts, manage sessions. Includes brute force guard.

Invisible human verification. No CAPTCHA — pure behavioral signals. Mouse, keyboard, timing.

Server-side WAF-lite for PHP sites. Blocks scanners, SQL injection, XSS and bad bots before they reach your app. For WordPress, Laravel and other PHP apps.

Every request in real time — IP, location, ASN, allowed or blocked, and the exact rule that matched.

Geo heatmap, block reasons, device breakdown, top IPs. Export as PDF on demand.

Pageviews, visitors, referrers, device breakdown. Powered by Umami, presented here.

Blocked requests, country breakdown, hit counters. Up to 1 year on Business.

Email, API keys, billing plan and usage.

Compare Free, Pro and Business. Unlock unlimited rules, custom redirects and more.