HiTechCloud vWAF

HiTechCloud WAF

Web application and API protection that defends against modern security threats and keeps systems running reliably.

Reverse ProxyAI/ML Bot DetectionDDoS L3-L7API ProtectionCDN & LBaaS

Cloud Web Application Firewall

Protects applications behind a reverse proxy, hiding the server IP and improving performance.

Operating as a reverse proxy, HiTechCloud WAF sits between users and the server to filter, analyze and block threats, while hiding the server IP and optimizing performance.

A solution that defends against web application attacks, access-control violations, attacks disguised behind a CDN, API attacks, advanced HTTP attacks, brute force, and many other threats. The service is fully managed, monitored 24/7, and uses AI/ML to accurately distinguish real users from bots, reducing false positives.

50+ AppSec PoPs worldwide reduce latency and improve the user experience.

15 Tbps Global DDoS mitigation capability.

21 The scrubbing center filters and mitigates attacks.

24/7 Monitoring, support and incident response by a dedicated engineering team.

Solution benefits

Keeps web applications secure, fast and continuously available.

Protects the end-user experience

A CDN network with points of presence in Vietnam and other countries reduces latency to the origin, speeds up delivery and keeps the experience consistent when traffic spikes.

End-to-end protection

Protects web applications and APIs, manages bots and mitigates DDoS attacks from Layer 3 to Layer 7, covering the OWASP Top 10 risks and advanced attacks.

Modern security technology

Uses AI/ML to analyze behavior, detect complex and zero-day attack patterns, and adapt automatically to new attack tactics.

ERT

Minimize costs and resources

Security policies are tuned automatically, global attack intelligence is updated continuously, and an Emergency Response Team is available 24/7.

Flexible deployment

Compatible with cloud, on-premises and hybrid deployment models; customers only need to point a CNAME to route traffic through the WAF.

Intuitive management interface

A straightforward administration portal for configuring policies, monitoring, and blocking or unblocking traffic in real time without deep specialist knowledge.

How it works

Filter, analyze and block threats before requests reach the origin system.

The user sends a request

All web and API traffic is routed through HiTechCloud WAF using a CNAME record.

Reverse proxy filtering and analysis

CWAF sits between users and the server, hides the origin IP, and analyzes behavior, signatures, bots, API traffic, and DDoS.

Block threats before they reach origin

Web attacks, brute force, advanced HTTP attacks, attacks hidden behind a CDN, and zero-days are mitigated before they reach the origin system.

Optimize performance and operations

CDN, LBaaS, a self-service portal and 24/7 support keep the service stable and available.

Key solution features

WAF, DDoS, bot, API, CDN and LBaaS capabilities on a single application protection platform.

Web Application Firewall (WAF)

Blocks OWASP Top 10 threats, advanced attacks, and zero-day exploits using machine learning and automated policy tuning.

Protection against DDoS attacks

Analyze application behavior, identify DDoS attack traffic, and draw on global mitigation capacity of up to 15 Tbps.

Web DDoS attack protection

Apply intelligent rate limiting, identifying traffic by IP, session and website, to block Layer 7 attacks without affecting legitimate users.

Bot Manager

Distinguish real users from good and bad bots using AI/ML algorithms that learn continuously to reduce false positives and block malicious bots.

API protection

Protects both known and unknown APIs, detects abuse, blocks unauthorized access, and updates protection policies automatically.

Client-side Protection

Reduces the risk of data leaking through third-party JavaScript and protects end users interacting with supply chain services.

ERT Active Attackers Feed

Provides a list of threat actors previously involved in DDoS attacks, exploitation, scanning, and intrusion so they can be blocked preemptively.

Integrated CDN & LBaaS

Optimize performance with a global CDN and Active/Active or failover load balancing, with server health checks that keep connections stable.

AI / Machine Learning

Learns application behavior and adapts to new attack techniques.

HiTechCloud WAF applies AI and machine learning to analyze traffic behavior, identify complex and anomalous attack patterns, detect zero-day threats, automatically tune security policies and reduce false positives.

Blocks Layer 3, 4 and 7 DDoS attacks using machine learning.
Protects web applications and APIs against the OWASP Top 10 and zero-day exploits.
Automatically tunes security policy to reduce false positives.
Uses AI/ML to distinguish end-user traffic from good and bad bots.
Continuously updated with the latest intelligence on attacks worldwide.

Scope of application

Flexible across business sizes and types of online application.

E-commerce website

Protects storefronts, checkout, customer accounts and high traffic volumes during peak campaigns.

Online service portal

Protect portals, login systems, APIs and user data against brute force, bots and vulnerability exploitation.

Backend API and mobile app

Discover unmanaged APIs, control access, apply rate limits and mitigate API abuse.

Multi-branch enterprises

Deploy flexibly at any scale, extending protection coverage and policy per application or system group.

Service plans

Choose a HiTechCloud WAF plan by protection requirement, scalability and support level.

Starter plan

STANDARD

Suited to websites and APIs that need a WAF layer, API protection, rate limiting, basic bot protection and basic DDoS protection.

360 USD / 1 month

Web Application Firewall
API Protection
Rate Limit
Basic Bot Protection
DDoS Protection 1 Gbps
30-day data retention

Recommended

ADVANCE

Extended protection for businesses that need Advanced Support, Advanced WAF, EAAF, and Load Balancer Basic.

720 USD / 1 month

Includes Standard
DDoS Protection 10 Gbps
Advanced Support
Advanced WAF
ERT Active Attackers Feed
60-day data retention

Comprehensive

COMPLETE

The full plan for critical systems that need Client-side Protection, API Discovery, Advanced Bot Manager, and LBaaS Advanced.

1,400 USD / 1 month

Includes Advance
Client-side Protection
API Discovery
Advanced Bot Manager
LBaaS Advanced
90-day data retention

Prices are shown in USD per month; longer billing cycles are multiplied automatically by the term selected. Add-ons and the final configuration are quoted to your requirements.

Feature table

Compare the Standard, Advance and Complete plans.

Features	Standard	Advance	Complete
Web Application Firewall (WAF)	✓	✓	✓
API Protection	✓	✓	✓
Advanced Rules	✓	✓	✓
Rate Limit	✓	✓	✓
Access Control & IP Geo Rules	✓	✓	✓
Reporting & Analytics	✓	✓	✓
Basic Bot Protection	✓	✓	✓
DDoS Protection	1 Gbps	10 Gbps	10 Gbps
Threat Intelligence Queries / month	50	50	50
Standard Support	✓	✓	✓
Advanced Support	—	✓	✓
Advanced WAF - Path Access Protection & AI-based Correlation Engine	—	✓	✓
ERT Active Attacker Feeds - EAAF	—	✓	✓
Client Side Protection - Detection	—	—	✓
Client Side Protection - Mitigation	—	—	✓
API Discovery	—	—	✓
Advanced Bot Manager	—	—	✓
Data Retention	30 days	60 days	90 days
Load Balancer as a Service	Failover	Basic	Advanced
Advanced Web DDoS Protection	Add-on	Add-on	Add-on
Unlimited DDoS	Add-on	Add-on	Add-on
CDN	Add-on	Add-on	Add-on
Premium Support	Add-on	Add-on	Add-on

Load Balancer as a Service

Complements application protection with load balancing, scaling and high availability.

LBaaS improves SLA, increases scalability, protects origin servers and balances user load in an Active/Active or failover model. The system health-checks servers, distributes load and maintains a consistent experience through IP or cookie persistence.

Features	Standard	Advance	Complete
Failover (Active-Standby)	✓	✓	✓
Number of Active Real Servers (Origins)	1	8	8
Active-Active Load Balancing - RoundRobin	—	✓	✓
IP-Based Persistency	—	✓	✓
URL-based Load Balancing	—	—	✓
Active-Active Load Balancing - Least Connection	—	—	✓
Cookie-Based Persistency	—	—	✓

FAQ

Frequently asked questions about HiTechCloud WAF.

The service supports fast deployment and self-service operation, with 24/7 engineering guidance to get the most protection out of it.

Does HiTechCloud WAF use AI and machine learning?

Yes. The solution uses AI/ML to analyze traffic behavior, identify complex attack patterns, detect zero-day activity, tell real users from bots and reduce false positives.

Does anything need to be installed on our own hardware or software?

No. HiTechCloud WAF is a cloud-based service. You only need to point a CNAME record to route traffic through the WAF, and the service is live.

Is the service suitable for both small and large businesses?

Yes. HiTechCloud WAF comes in several packages and scales with traffic volume, the number of applications and APIs, and the level of protection you need.

How does HiTechCloud WAF optimize cost?

The solution removes the capital cost of traditional WAF hardware, updates policies automatically, integrates with CDN, includes 24/7 support and reduces the load on in-house IT.

How long does service deployment take?

The service can be deployed within one day of the customer signing the contract and supplying the required configuration details.

Can customers manage the security policy themselves?

Yes. The service follows a self-service model with a clear interface, letting customers configure, manage, block or unblock traffic in real time themselves.

HiTechCloud Security