Nexren ShieldWeb application security guides
These guides cover WAF, DDoS mitigation, bot protection, reverse proxy, Zero Trust and KVKK. Each guide starts with a short answer, states the limits of the methods plainly, and describes how Nexren Shield handles the topic in a separate section.
Start here and buying guides
What Is Nexren Shield? A Reverse-Proxy Web Security Service
Nexren Shield is a reverse-proxy security service that sits in front of your web applications.
10 Questions to Ask When Choosing a WAF: A Buyer's Guide
When buying WAF, DDoS or bot protection, look past the marketing page to ten questions: who holds the TLS key, how capacity is evidenced, what happens with false positives, where data lives, how the origin is protected and how you leave.
Application security
What Is a WAF? How a Web Application Firewall Works
A WAF (web application firewall) inspects the HTTP requests headed for your application against a set of rules and blocks attacks such as SQL injection and XSS before they reach the app.
Bot Protection and CAPTCHA Alternatives: Methods Compared
Bot protection answers three questions: is the client a real browser, does its behavior look human, and does the request come from a reputable source.
TLS Fingerprinting (JA3, JA4): What It Proves and What It Doesn't
A TLS fingerprint is a short digest built from fields in the client's handshake message (the ClientHello).
API Security: What Rate Limiting and a WAF Do and Do Not Solve
API security covers two separate jobs: filtering bad traffic from outside and getting the application's authorization logic right.
Attack mitigation
DDoS Attack Types: L3, L4 and L7 Differences and Defense
DDoS attacks fall into three classes: volumetric attacks that try to fill the line (L3/L4), protocol attacks that exhaust connection tables (L4) and application attacks that wear down the app over HTTP (L7).
When to Enable Under Attack Mode: Decision Guide and Side Effects
Under Attack mode asks every visitor to pass a short verification before reaching your site.
Infrastructure and access
What Is a Reverse Proxy? TLS, Real Client IP and Security
A reverse proxy is an intermediary that clients connect to and that forwards requests to the server behind it.
Hide Your Origin IP and Lock the Origin: Leaks and Fixes
The origin IP is the real address of the server behind your reverse proxy.
Automatic SSL and Let's Encrypt: A Certificate Renewal Guide
Automatic SSL means obtaining a browser-trusted TLS certificate through the ACME protocol and renewing it before it expires.
Zero Trust Access: A Practical Guide for Web Applications
Zero trust means a request is not trusted because it comes from inside the network; every access is verified by identity and context.
Compliance and data
KVKK, GDPR and Security Logs: Is an IP Address Personal Data?
A protection proxy records data such as IP address, time, URL and User-Agent, and an IP address can be personal data under KVKK and GDPR.
Take a closer look at Nexren Shield
Review the plans and prices. Accounts are opened by our team; you can send an account request through the contact form.