Introducing Bunny Shield: Powerful security within reach of anyone

edited April 22 in Industry News

You and your team built something incredible. After spending hours and perhaps thousands, or even millions, of dollars to perfect every part of the code, user experience, and detail, you finally pushed it live.

People noticed, the service took off, and it felt like magic.

Then it happened: a massive DDoS attack took everything offline. At the same time, attackers brute-forced your login page, gained access to user data, and left you with angry users, a damaged brand, and a pile of lost revenue to recover.

As dramatic as it sounds, the unfortunate truth is we hear these stories all the time. The internet is a battlefield of DDoS attacks, bad bots, and exploits looking to cause damage wherever they can, and it's only getting worse.

The worst part? Most security companies mainly care about one thing: extracting as much money as possible from big enterprise contracts while leaving everyone else to fend for themselves.

Not anymore.

https://bunny.net/blog/introducing-bunny-shield-powerful-security-within-reach-of-anyone/

I'll be moving tonight :)

Thanked by (1)someTom

Comments

  • AuroraZeroAuroraZero Hosting ProviderRetired

    Nice bunch of buzz words and promises.

    Just one question who vetted it?

    Bunny is not known in the security field.

  • edited April 22

    "We're thrilled to introduce Bunny Shield: a powerful, next-generation web security suite—built to democratize access to serious, scalable protection that supports you from the moment you go live."

    um, what?

    They will be never able to really compete with Cloudflare, because EU laws alone. They will be realistically proxying all content, and with that comes attention from authorities and with the ever decreasing freedom in EU, it may be tough for them.

    Interested how it develops, but I don't have my hopes up.

    Thanked by (1)bikegremlin
  • we built our own WAF engine and DDoS mitigation stack from scratch, deeply integrated into our reverse proxy and request processing pipeline for unmatched speed and precision.

    Indeed, WAF works if you route your traffic through their reverse proxy, not as a stand-alone software. Is very hard to compete with Cloudflare, but not impossible. Maybe they will have better WAF rules or a helper to generate those rules. For example, there are WAF providers specialized in protecting specific product like the new Sansec Shield for Magento ( https://sansec.io/guides/sansec-shield ) or better known Sucuri WAF.

    Good luck!

    Thanked by (1)bikegremlin
  • bikegremlinbikegremlin ModeratorOGContent Writer

    @wdt said:

    we built our own WAF engine and DDoS mitigation stack from scratch, deeply integrated into our reverse proxy and request processing pipeline for unmatched speed and precision.

    Indeed, WAF works if you route your traffic through their reverse proxy, not as a stand-alone software. Is very hard to compete with Cloudflare, but not impossible. Maybe they will have better WAF rules or a helper to generate those rules. For example, there are WAF providers specialized in protecting specific product like the new Sansec Shield for Magento ( https://sansec.io/guides/sansec-shield ) or better known Sucuri WAF.

    Good luck!

    It's also fair to note that Cloudflare has been not very good over the past year or so on the free package.
    Poor routing with frequent short timeouts, no less!?!

    Sure, what they charge $20 per month, per domain, is not too much for what they offer (in fact, the price is hard to beat), but they don't offer a budget option for sites like mine (with a .com website and a .net forum - so I'd need to pay $40 per month for both, as a non-profit).

    If bunny could build something decent, with more reasonable mid-price tiers, that might have some market share (though, yes, hard to beat Cloudflare).

    Thanked by (1)_MS_

    Relja of House Novović, the First of His Name, King of the Plains, the Breaker of Chains, WirMach Wolves pack member
    BikeGremlin's web-hosting reviews

  • AI use gone wrong here... Pathetic.

  • edited 6:18AM

    @treesmokah said:
    [...] ever decreasing freedom in EU

    How are the women's rights going in the US?
    Why do EU universities have started relocation programs for US scientists and getting overwhelmed with requests?
    Why do we get refugee application from US LGBTQ people?

    The EU is definitely not perfect, but we ain't that bad either especially compared to the remaining western world.

    Thanked by (2)ialexpw someTom
  • bikegremlinbikegremlin ModeratorOGContent Writer
    edited 7:08AM

    @Alyx said:

    @treesmokah said:
    [...] ever decreasing freedom in EU

    How are the women's rights going in the US?
    Why do EU universities have started relocation programs for US scientists and getting overwhelmed with requests?
    Why do we get refugee application from US LGBTQ people?

    The EU is definitely not perfect, but we ain't that bad either especially compared to the remaining western world.

    Let us not get into politics - if possible.

    Also: never compare yourself to the worst, strive for the best (students protesting against dictatorship in my country for almost 6 months, but digging cheap lithium is more important than freedom or health - so much about the EU - not that the US or Serbia for that matter are any better).

    Thanked by (2)treesmokah skorous

    Relja of House Novović, the First of His Name, King of the Plains, the Breaker of Chains, WirMach Wolves pack member
    BikeGremlin's web-hosting reviews

  • edited 7:59AM

    @Alyx said: The EU is definitely not perfect, but we ain't that bad either especially compared to the remaining western world.

    I disagree, and all the "issues" you have pointed out aren't relevant at all to what we are discussing.
    EU is no match to US laws on content online, and responsibility for said content. That is a fact.
    It is a fact freedom of speech doesn't exist in large part of Europe, in Germany court convicted someone recently of saying that "germany has no freedom of speech". So now even saying it out loud is illegal.

    Bunny wont go anywhere with restrictive AUP on content that can be on their platform, CF got popular in the first place because they allowed everything. They will have to pray corporate pays for it, which goes against what they said their pathetic blog post. Not to mention, they are at mercy of Datacamp, a British company that provides them with most of their infra, Bunny doesn't even own prefixes they use.

    You literally cannot go anywhere close Cloudflare in a long term while freedom of speech is illegal where your company is.

    Providing CDN is one thing, it has a more limited scope as to what is being served from their platform.
    But a DDoS protection proxy will relay everything on the site, and this is where the issues will begin. It is not possible to moderate everything at this scale, and Cloudflare knows it best. That's why you need legal protections, which EU doesn't provide.

    I understand Anti-American sentiment of some people, but it stops them from being objective.
    They will find out quickly how "free" and great EU is, like Bluesky, a leftist Twitter alternative using Bunny, currently being investigated by EU.

    Thanked by (1)bikegremlin
  • @treesmokah said: in Germany court convicted someone recently of saying that "germany has no freedom of speech". So now even saying it out loud is illegal.

    show proof for that BS.

  • @AaronSS said: I'll be moving tonight :)

    Please report how its going.

    I think its great to have a european alternative for Cloudflare, i always wondered how its possible to use CF at all in Europe without completely ignoring GDPR. But of course when you are the target of DDOS what alternatives did you have so far?

  • @someTom said:

    @treesmokah said: in Germany court convicted someone recently of saying that "germany has no freedom of speech". So now even saying it out loud is illegal.

    show proof for that BS.

    You got me, I remembered the story wrong.
    https://www.thefire.org/news/blogs/free-speech-dispatch/i-hate-freedom-opinion-meme-leads-sentencing-german-court it isn't much better though, convicted of a meme with Nancy Faeser (some politician) with "I hate freedom of opinion" written on it.

    I should've have double-checked before posting, and I'm sorry for that.

    Thanked by (2)bikegremlin someTom
  • bikegremlinbikegremlin ModeratorOGContent Writer

    @someTom said:

    @AaronSS said: I'll be moving tonight :)

    Please report how its going.

    I think its great to have a european alternative for Cloudflare, i always wondered how its possible to use CF at all in Europe without completely ignoring GDPR. But of course when you are the target of DDOS what alternatives did you have so far?

    GDPR is about controlling EU population (and their data), not about protecting the privacy.
    That's what it boils down to, in practice.

    Oh, and it also makes it harder for the non-rich to implement compliance (raising costs, and making money to GDPR consent providers and similar services).

    Folks in the EU are still all hauling "smart"phones and paying with cards, so any privacy is void.
    Same goes for public surveillance cameras.

    So, I don't see much difference between the same thing being done by an "EU company" vs a "US company." It's the same picture.

    Relja of House Novović, the First of His Name, King of the Plains, the Breaker of Chains, WirMach Wolves pack member
    BikeGremlin's web-hosting reviews

  • @bikegremlin said: Let us not get into politics - if possible.

    its interesting how you always want everyone to stay away from politics... except yourself of course.

    @bikegremlin said: GDPR is about controlling EU population (and their data), not about protecting the privacy. That's what it boils down to, in practice.

    also you have zero clue about GDPR and have never read the actual law.

    and now please follow your own advice and stay away from politics.

    Thanked by (1)Alyx
  • edited 12:20PM

    edit: probably not worth this argument, ignore!

  • havochavoc OGContent WriterSenpai

    That's awesome news.

    Love bunny.net - the fact that you can prepay it and money goes into account as a whole rather than CF's buy premium plan per site thing is just so much better. I don't think their tech is quite up to CF standards, but from a product design they're much more my speed.

    If that 9.5 bucks plan applies to overall account too (can't quite tell) then I'm definitely signing up.

    Thanked by (2)bikegremlin Alyx
  • bikegremlinbikegremlin ModeratorOGContent Writer

    @someTom said:

    @bikegremlin said: Let us not get into politics - if possible.

    its interesting how you always want everyone to stay away from politics... except yourself of course.

    @bikegremlin said: GDPR is about controlling EU population (and their data), not about protecting the privacy. That's what it boils down to, in practice.

    also you have zero clue about GDPR and have never read the actual law.

    and now please follow your own advice and stay away from politics.

    Fair point about politics - so I won't go further into the other nonsense you wrote.

    Relja of House Novović, the First of His Name, King of the Plains, the Breaker of Chains, WirMach Wolves pack member
    BikeGremlin's web-hosting reviews

  • @treesmokah said:

    They will be never able to really compete with Cloudflare, because EU laws alone. They will be realistically proxying all content, and with that comes attention from authorities and with the ever decreasing freedom in EU, it may be tough for them.

    cloudflare glows. after what happened with the warrant canary, you can be sure that this is now the largest MITM operation ever carried out by the usa.

  • edited 3:10PM

    @knife said:

    @treesmokah said:

    They will be never able to really compete with Cloudflare, because EU laws alone. They will be realistically proxying all content, and with that comes attention from authorities and with the ever decreasing freedom in EU, it may be tough for them.

    cloudflare glows. after what happened with the warrant canary, you can be sure that this is now the largest MITM operation ever carried out by the usa.

    Do you think Bunny wont? EU wants a piece of the pie, MITM pie.
    EU Intelligence agencies are no different, except you have multiple of them, even worse than in US where such operations are carried out by NSA. You have multiple agencies to comply with.

    Thanked by (1)bikegremlin
  • havochavoc OGContent WriterSenpai

    I'd say it's a minor win that it's not in a 5eyes country, but like trees says one probably needs to assume it is not save from state actors. Then again what is these days?

Sign In or Register to comment.