One unified platform. For critical web apps and APIs.
A unified Layer-7 security platform, managed by Link11 as an option, combining Web Application Firewall (WAF), Web DDoS Protection, Bot Management and API Security for critical web apps and APIs.
One platform, deployed where you need it.
Runs as a reverse proxy in front of your origin.
- Link11 network or your cloud
- Managed service as an option
- One interface for every component
ISO 27001
SOC 2 Type II
BSI C5
A unified, fully managed Layer 7 security platform. No more hunting through four tools.
The four modules bring their results together in one interface, under one policy model and one operating team.
It’s never just a website or app. It’s what runs behind it.
See where attackers start, and what protects you there.
Customers get through. Scrapers and credential stuffing do not.
Scripts try stolen passwords and codes until an account opens, or read out your API record by record.
Shops, portals and APIs stay available. Even when attacks or bots hit.
Seasonal peaks can be planned, attacks cannot. Scrapers copy prices, purchase bots block inventory before a customer gets to it.
Stay available. And prove it.
Link11 helps you meet regulatory requirements such as NIS2 and DORA. In Link11 WAAP, each block traces back to the request.
Reachable when it matters. Even under attack.
On election night, everyone clicks at once, and attacks arrive at the same moment.
Citizen services stay reachable. Even while attacks run.
At a public office, a citizen waits for their passport data. Link11 WAAP stops attacks on the citizen portal, so the data still arrives.
Attack traffic ends in the Link11 network. Sites and central services stay connected.
When central services stop, the flow of goods stops too. A VPN gateway is a bottleneck that attacks can deliberately overload.
Inspected first, let through second. Stage by stage, in front of your server.
No block without a reason. Your team sees why, for every request.
The interface shows blocked and allowed requests, current and historical data and the reason for each decision. Your team starts its analysis with the actual request, not an assumption.
- Request content and metadata
- Current and historical view
- Decision reason in context
Run it yourself, or have it run. Who does what is settled up front.
Managed service is an option you can book. If you choose it, what your team does and what Link11 takes on is clearly divided.
Your team
- Change policies
- Watch their effect on real traffic
- Enforce
In the same interface where you see every request.
Link11, as a managed service
- Maintain rule sets
- Virtually patch new vulnerabilities
- Handle anomalies in the SOC
- Onboarding including SIEM and CI/CD integration
Operated from our own security operations center.
Six steps to go-live. Then one click on Publish.
The exact configuration depends on your architecture. These six steps show the typical path.
- Create backendDefine a reachable origin.
- Connect certificateConfigure TLS for the protected domain.
- Select policyAssign a security policy to the protected asset.
- Build server groupConnect backends and traffic distribution.
- Change DNSPoint the A record to the platform.
- Test and publishPut the configuration into operation in a controlled way.
Questions before you decide. Answered directly.
What is a WAAP platform?
WAAP stands for Web Application and API Protection. The category brings together security capabilities for web applications and APIs that are often operated as separate tools. What is WAAP?
How is the platform integrated?
Traffic is routed to the platform through DNS. Link11 then operates as a reverse proxy in front of the configured origins.
Which requests are visible?
The platform presents blocked and allowed requests with content, metadata and the reason for the decision.
How does Web DDoS Protection differ from Network DDoS Protection?
Web DDoS Protection is part of WAAP and protects web applications and APIs at layer 7, against attacks such as HTTP floods, Slowloris or zero-day exploits. Network DDoS Protection protects entire networks, prefixes and autonomous systems at layers 3 and 4, connected via BGP. If you need both, you combine both.
Let’s talk
Your business stays online. We’ll show you how.