Skip to content

How it works

Protected in three steps

ArxLayer is enterprise-grade protection without the enterprise rollout. Connect your domain, tune safely in detect mode, and switch on blocking when you are ready.

  1. 1

    1. Connect your domain

    Point your traffic to ArxLayer Edge. A balanced managed policy starts protecting you immediately — no rules to write on day one.

  2. 2

    2. Watch in detect mode

    ArxLayer shows exactly what it would block on your real traffic. Clear up any false positives with one click before anything is enforced.

  3. 3

    3. Switch on blocking

    Turn on enforcement with confidence. Every change is versioned, and you can roll back instantly if anything looks off.

Under the hood

Serious protection, without the headache

You get the same foundation large platforms rely on — without having to operate the infrastructure yourself.

OWASP CRS + Coraza

Protection runs on the open OWASP Core Rule Set and the Coraza engine — a transparent, proven detection baseline.

Inspected at the edge

Requests are checked at the edge and blocked before they ever reach your origin.

API-first control

Everything is an API resource with versioned policy, so you can manage protection as code.

No keys to manage

ArxLayer stores no private keys — a cleaner, safer boundary for your team.

Safe by default

Turning on protection should not break your app

The hardest part of turning on protection is false positives. ArxLayer is built so you can reach blocking mode without breaking legitimate traffic.

Detect → simulate → block

Move to blocking in safe stages, with evidence behind every step.

One-click fixes

Resolve a false positive with a scoped exclusion — no rule-writing required.

Instant rollback

Revert to a previous policy version the moment something looks wrong.

Emergency bypass

Temporarily relax enforcement in seconds if you ever need to, fully audited.

Fast to set up, safe to operate

See the architecture if you want the technical detail, or start protecting your site right now.

Try it on your own site

Try it in detect mode and see exactly what ArxLayer would block — no risk to live traffic.