Overview video: AtriShield filters hostile traffic before it reaches your site and adapts its decision to each IP.
Certainty
We verify search engines by their IP ranges and refuse impostors. Observation mode and trusted IPs let you spot and correct a false positive.
Control
Decisions apply at the edge of your servers, with no round trip through an external cloud. The configuration is signed and every decision is explainable.
Compliance
A sealed incident ledger to help you meet Law 25. Console hosted in Beauharnois, Quebec. Retention period: per contract.
How it works
1
A light sensor at the edge
Placed in front of your sites, with no code change and no host migration. Up and running in minutes.
2
Every visit inspected on-site
The sensor evaluates each request on your server. Security metadata is reported to the console.
3
Allow, slow down or block
Good traffic passes, suspicious traffic is slowed or challenged, malicious traffic is cut, according to your plan.
What AtriShield does for you
Real bots pass, fakes are blocked+
Google, Bing and Apple are authenticated. Impostors are turned away and your SEO is protected.
In plain terms
A fake “Googlebot” scraping your catalog is exposed and blocked, while the real Googlebot keeps indexing your site.
Malicious traffic cut at the door+
Content scraping, password theft, automated attacks: detected at the edge and blocked according to your plan.
In plain terms
A wave of login attempts on your customer area is spotted at the edge of your server, then cut according to your plan.
Your applications protected from attacks+
On Business and Enterprise, virtual patches deployed for vulnerabilities covered by our CVE watch, without updating your application.
In plain terms
When a new flaw drops, the countermeasure is deployed at the edge through the signed configuration, so you don’t wait for your site to be patched.
One dashboard for your whole fleet+
Real-time threat radar, status of every site, one-click actions, even across hundreds of addresses.
In plain terms
You manage 30 sites from a single screen: you see where threats come from and act in one click.
Detection runs on your infrastructure+
No redirection to a third-party cloud. Security metadata, including IPs and URLs, is reported to the console.
In plain terms
The details are on the Compliance page.
Geographic lock on the admin console+
Restrict admin access to allowed countries. Platform setting, on request.
In plain terms
You limit access to your admin console to the countries you work from; attempts from other regions are blocked.
Start with observation mode+
Before acting, AtriShield shows what it would block. You decide when to switch to protection.
In plain terms
You see what would have been blocked, check the impact on your real customers, then switch to protection.
Watch AtriShield sort traffic
Same traffic, two modes: Observation (we note what we would do) or Protection (we act).
Verified GooglebotReal search engine
Observed · allow
Fake “Googlebot”Impersonates Google
Observed · block
Content scraperMass-copies your catalog
Observed · slow down
Normal visitorA customer on your site
Observed · allow
Password theftBurst of logins
Observed · block
Why AtriShield is different
The usual cloud solutions
−Your traffic flows through their servers
−Your data slips out of your hands
−If their service goes down, or cuts you off, your protection goes with it
−Latency is added to every visit
AtriShield
✓Protection lives at the edge of your servers
✓Detection happens locally, with no cloud round trip
✓Only the security metadata your console needs is reported to it
✓Your AtriShield operator can act through the console tunnel
AtriShield × Cloudflare
Cloudflare protects the perimeter. AtriShield protects the origin.
Cloudflare filters volumetric traffic at the edge. But anything that looks like normal traffic still reaches your server. That is where AtriShield decides.
Client
Cloudflare
AtriShield
✓ Application
The origin decides right next to the app.
Cloudflare’s blind spots, covered by AtriShield✓
Discoverable origin IP
✓The origin decides at the edge anyway: bypassing is pointless.
Compromised accounts
✓Caught by behavior (bursts, anomalies), not just the credential.
Rate limiting
✓Applied server-side, on the visitor’s real behavior.
Application vulnerabilities
✓Application shield: the countermeasure is applied at the edge, no code change.
Hosting security
✓Sensor at the edge and sealed incident ledger.
Public IP ranges
✓Filtered by reputation and behavior, not a simple list.
Coexistence
Cloudflare + AtriShield: two complementary layers
Cloudflare absorbs the volumetric load at the edge; AtriShield decides closest to the application. No conflict: each on its turf, for continuous coverage.
Edge · CloudflareOrigine · AtriShield
Without Cloudflare
And even without Cloudflare, AtriShield protects
Decisions are made at the edge of your servers, locally and sovereignly, with no dependency on a third party. Cloudflare becomes a bonus, not a crutch.
Client→AtriShield→App
Compliance & securityinfrastructure
Console deployed on certified infrastructures
The AtriShield console deploys on infrastructures that meet the strictest security standards. The agent installs on your server. It reports security metadata to the console, detailed on the Compliance page. The console preserves the compliance level of its hosting environment.
ISO 27001
ISO 27001
The data centers hosting the AtriShield console are ISO 27001 certified, ensuring the highest standards of information security management.
Certified datacenter
SOC 2
SOC 2 Type II
Our infrastructure providers hold SOC 2 Type II certification, attesting to rigorous security and confidentiality controls.
Certified provider
The certifications mentioned refer to the infrastructure providers and data centers hosting the AtriShield console, not AtriShield as a software product.
Who is it for?
Online stores
Protect your prices and catalog from scraping, keep the real Googlebot for your SEO, and spot abuse during your peaks (sales, holidays).
In 30 seconds
Three commands, and you stay in control.
Installed from a signed repository, decisions visible in your dashboard, and no data handed to a third party: configuration and logs stay on your infrastructure.
Video: installing AtriShield in three commands, the dashboard, and data sovereignty.
Planswhat each tier includes
AtriShield plans in detail
AtriShield installs on your server and filters traffic at the entry point, according to your plan. Your full traffic stays with you; the agent reports security metadata to the console, detailed in the documentation. A free observation tier, then four tiers from the simplest to the most complete.
Reseller program
Do you run servers for your clients?
Agencies, managed-service providers and hosts: install and run AtriShield across many clients, with a volume-based discount. Simulate your margin and join the program.
✓Included : Blocks scanners, brute force and admin probes; detects aggressive crawling.
✓Included : Detects the looting of your content. Blocking by challenge is included from Business up.
✓Included : Up and running in minutes.
✓Included : Local detection, with no third-party service.
Pro
Anti-scraping and anti-abuse
Teams protecting their content and their access.
Founder price
139 $CAD / server / month
Locked for long-term contracts
✓Included : Detects the looting of your content. Blocking by challenge is included from Business up.
✓Included : Blocks vulnerability scans and login brute force; detects mass account creation.
✓Included : Detects campaigns spread across a network. Blocking by challenge is included from Business up.
Business
Recommended
Complete filtering at the server edge
Demanding applications, SaaS and e-commerce platforms (Magento / Adobe Commerce).
Founder price
289 $CAD / server / month
Locked for long-term contracts
✓Included : OWASP application firewall: SQL injection, XSS, code execution, directory traversal, Log4Shell, blocked at the edge, before your application.
✓Included : Behavioral analysis; JavaScript verification page (blocking by challenge).
✓Included : API protection (enumeration, BOLA).
✓Included : Account protection against password spraying on common login forms, to be enabled per agent.
⋯SoonProtection against distributed credential stuffing (takeovers spread across many IPs).
Enterprise
Compliance and sovereignty
Organizations whose customer data is a regulated asset (Law 25).
Founder price
On quote
Locked for long-term contracts
✓Included : Honeypots and multi-stage detection: detects patient, targeted attackers.
✓Included : White-label on contract, support per contract.
⋯SoonLaw 25 exfiltration registry: detects mass harvesting of personal data and automatically generates the incident registry entry (sealed).
Founder pricing, guaranteed for the duration of your commitment. Amounts excluding tax, in Canadian dollars, per protected server; confirmed before billing.
FreeDiscoveryObservation
0 $
Detection runs on your server. Nothing is sent to a central CrowdSec service. Only the security metadata your console needs is reported to it, detailed in the documentation. AtriShield protects your applications (site, store, SaaS, API). Built to help you meet Law 25.
Control first. Every step deepens your command, never one more dependency.
Now// Available03 flux
NOW-01
Deterministic protection at the edge
Bots, scrapers and attacks sorted at the edge, on your side, according to your plan.
NOW-02
Real-time multi-site console
Your whole fleet on one screen: threat radar, per-site status, one-click action.
NOW-03
Ledger & compliance
Sealed incident ledger, Law 25 report.
Virtual patch
What happens on the day the flaw drops?
A critical flaw is published and the first attacks arrive within hours. AtriShield applies a signed rule, verified by the agent on your server, that blocks exploitation at the edge without changing your application. You apply the vendor fix on your own schedule.
Video: on the day a critical flaw is published, AtriShield deploys a signed virtual patch that blocks attacks at the edge until the vendor fix.
Security watchAtrilya Solutions research
Which critical vulnerabilities threaten your apps right now?
AtriShield sits at the entrance of your server, not inside your application. What it protects therefore does not depend on the technology running behind it: a Magento store, a WordPress site, a Node.js API, a PHP application, a Linux server. The rule profile adapts to the type of application; the position does not change. We track the critical flaws in those ecosystems and document, every time, the virtual patch that stops them before they reach your code.
Ecosystems coveredPHP & Node.jsMagento / Adobe CommerceWordPressServer & Linux
One question per block, the fact before the explanation. AtriShield is an application-layer protection installed at the edge of your server (HAProxy, CrowdSec, AppSec inspection), driven by a console. The answers below describe what ships today; roadmap items are flagged as such.