Security that activates in 60 seconds.
OwlGuard sits in front of your application and filters malicious traffic before it reaches your servers — DDoS attacks, bots, scrapers, credential stuffing. Less than 10kb. Zero cold starts. Runs in under 3ms.
View integration codeThe protection your enterprise competitor pays $40,000/year for. At $99/month.
Google Cloud Armor requires a GCP account, backend service configuration, manually written security policy rules, and a DevOps engineer who specialises in GCP. Average setup: days.
OwlGuard is npm install @deployowl/guard and a config file. Average setup: 60 seconds.
No cloud account. No specialist. No ongoing maintenance.
Sub-10ms threat evaluation
Every inbound request is evaluated at the edge before it touches your origin. Path pattern matching, rate limiting, and payload inspection — all local, no blocking network calls.
Bot mitigation without false positives
OwlGuard serves silent JavaScript Proof-of-Work challenges to suspected bots — invisible to real users, impossible for automated scripts to pass. Scrapers, credential stuffers, and high-velocity crawlers are filtered without disrupting genuine traffic.
Geo and network fencing
Block, rate-limit, or challenge traffic from specific countries, high-risk data centers, or known malicious networks — in one config line.
Real-time threat dashboard
Every blocked request, every challenge served, every rate limit hit — visible in your DeployOwl dashboard in real time. No separate SIEM required on the free plan.
One install. One config. Protected.
npm install @deployowl/guardimport { OwlGuard } from '@deployowl/guard';
const guard = new OwlGuard({
rateLimit: { windowMs: 60000, max: 100 },
geo: { block: ['CN', 'RU'] },
bot: { challenge: true }
});
return guard.handle(yourHandler);Your existing handler. Wrapped. Protected. Nothing else changes.
Two plans. No complexity.
Free
Perfect for open-source projects, evaluation, and indie developers.
- Static rule configuration
- Local rate limiting and geo-fencing
- JavaScript PoW challenge screens
- Console-based logging
Pro
For production platforms that need live control without redeploying.
- Real-time remote WAF config sync
- Advanced bot and threat scoring
- Custom PoW challenge difficulty & branding
- Centralised dashboard & multi-zone telemetry
- Priority support
Deploy WAF protection in under 2 minutes.
Install @deployowl/guard, drop in your config, and your app is protected against automated threats instantly.