Atrilya
All documentation

Documentation

Offers & tiers

Four AtriShield protection tiers, each including the previous one.

AtriShield comes in four tiers: Starter, Professional, Business and Enterprise. Each tier includes the previous one. A licence covers one protected server. The number of servers is set at subscription.

Starter

Who it is for. Brochure sites and low traffic.

  • Edge filtering by HAProxy, real IP behind a declared CDN, trusted IPs, emergency disarm.
  • Blocking of scanners, login brute force and admin probes; detection of access to sensitive files and aggressive crawling.
  • Detects the looting of your content. Blocking by challenge is included from Business up.

Professional

Who it is for. SMBs and growing e-commerce.

  • Detection of mass account creation, spoofed Chrome browsers and cache-busting.
  • Detects the looting of your content. Blocking by challenge is included from Business up.
  • Detects campaigns spread across a network. Blocking by challenge is included from Business up.
  • Bot analysis, most attacked entry points, guided recommendations, per-IP investigation.

Business

Who it is for. E-commerce and high-traffic applications.

  • Application firewall. SQL injection, XSS, code execution, directory traversal, Log4Shell, Magento rules and virtual patching. Virtual patching does not replace the vendor fix.
  • JavaScript verification page. Visible page with proof of work, served to IPs under a challenge decision. To be enabled per agent.
  • Password spraying. Detection of an IP trying many usernames on common login forms. To be enabled per agent.
  • API enumeration, signed session tracking.
  • Collective pool between customers, with your team’s explicit consent.

Enterprise

Who it is for. Large accounts and critical environments.

  • Decoy network (honeypots).
  • Second stage of the non-browser User-Agent request counter, over a long window.
  • More frequent bot-range refresh, reverse DNS verification.
  • Service commitment per contract.

On request

  • Law 25 report: PDF from the console, compliance API from Business up.
  • Geographic lock on the console: platform setting, on request.
  • Agency mode and white label: on contract.

Coming soon

  • Waiting room (Business and Enterprise).
  • Protection against distributed credential stuffing.

Some capabilities are authorized at a tier but require explicit activation.

Start my protection

Ready to protect your application? Getting started means installing the AtriShield agent on your infrastructure.