Mitigation actions: Confirm block and challenge decisions against live traffic.
DDoS Mitigation
DDoS Protection & Mitigation
Control HTTP floods against websites and APIs with bot checks, rate limits and caching. Review which requests each rule allowed or blocked.
Keep Service Availability Under Layer 7 Pressure
Absorb Surge Pressure at the Edge
Defend against high-volume request surges at Peakhour Edge or through an existing edge path augmented with Peakhour controls.
Mitigate Layer 7 Flood Behaviour
Suppress HTTP flood patterns, Slowloris traffic, and route-level abuse before origin resources are consumed.
Review Requests During an Attack
Keep clean user traffic moving while logging mitigation outcomes for response, tuning, and post-incident review.
Find Which Requests Are Using Your Capacity
Service disruption events usually combine high-volume bursts, Layer 7 floods, and automated request noise. Teams need one mitigation path that separates abusive traffic from legitimate traffic before origin capacity is exhausted.
Distributed Floods Bypass Simple IP Thresholds
Modern attack traffic rotates networks, clients, and headers, so static per-IP limits alone often miss coordinated surge behaviour.
Origin Capacity Is Consumed Before Manual Response
If mitigation depends on human reaction during an incident, legitimate user sessions can degrade before controls are tightened.
Find the Requests Behind Each Block
Request logs show which rule blocked, challenged or allowed traffic during an attack.
One Mitigation Path from Detection to Clean Delivery
Peakhour combines anomaly detection, rate controls, bot signals, and WAAP policy in one decision flow so attack traffic is filtered while healthy requests continue to application routes.
-
Detect Abnormal Request Behaviour Early
Continuously analyse request patterns to identify flood behaviour before it escalates into customer-visible downtime.
-
Apply Layered Controls per Request Context
Set limits using network, country, header and request details. Check how the chosen key groups real users.
-
Deliver Clean Traffic with Operational Continuity
Block or challenge abusive request classes while preserving availability for trusted users and business-critical paths.
-
Keep Request Logs Ready for Review
Retain mitigation outcomes and trend telemetry so security and platform teams can tune controls after each incident window.
Request Logs
1
2
See Which Requests Each Rule Handled
Use the dashboard to review request rates, rule actions, errors and successful visits during an attack.
Post-incident review: Use the same request logs for response, rule changes and reporting.
Layer 7 floodsTrack GET and POST surge patterns
Clean trafficValidate protected delivery
Choose the Next DDoS Control
Stop Layer 7 DDoS Attacks
Move from attack pressure to edge actions that can be tuned and reviewed during an incident.
Advanced Rate Limiting
Set route, fingerprint, geography, header, and behaviour limits instead of relying on IP-only thresholds.
Bot Management
Score the automation behind Layer 7 floods and apply challenges or blocks with request logs.
WAAP and WAF Controls
Keep WAF, API, bot, rate, and DDoS decisions in one reviewable application-security path.
Related evidence
DDoS Mitigation Proven in Production
Customer examples that connect Peakhour controls to production outcomes.
Kitchen Warehouse
COVID-19 Traffic Surge Success
How Australia's #1 online kitchenware retailer thrived during COVID-19's unprecedented traffic surge and achieved 150% revenue growth with Peakhour's performance solutions.
70% Improvement in Load Times
150% Increase in Revenue Year on Year
85% Of All Traffic Served from Cache
Read case study
Stone & Chalk
Fintech Hub Enterprise Security
How Australia's leading fintech hub secured hundreds of startups with enterprise-grade application security, zero-day vulnerability protection, and comprehensive threat management.
Enterprise Grade Security
Improved Web Performance
Zero-Day Threat Protection
Read case study
Guarantee Your Application Availability
Learn More About DDoS Protection
Enterprise DDoS Protection: Lessons from Microsoft 365 Attack for Application Security
Analysis of the Microsoft 365 DDoS attack by Storm-1359 reveals critical lessons for enterprise application security platforms.
Read More
HTTP/2 Rapid Reset Attack Deepdive
The technicalities of the HTTP/2 Rapid Reset vulnerability and steps to fortify against DDoS threats.
Read More
Layer 7 DDoS Protection: Application Security Through Strategic Caching
Comprehensive guide to Layer 7 DDoS protection using strategic caching within application security platforms.
Read MoreMeasure the routes your customers use
Choose login, search, checkout and API routes for a trial. Compare request rates, origin work, errors and successful visits before enabling each rule. Test a rollback and review valid requests that were challenged or blocked.
Arrange upstream network protection for attacks that fill your internet connection. The UDP flood guide explains that network work. This comparison keeps HTTP request controls and network capacity clear during planning.