01
Necessary Always on
Required for the site to work (login, preferences, security). Always on.
SECURITY · FIREWALL
DEFINE THE PERIMETER.KEEP THE DIFFS AUDITABLE.
Define The Perimeter. Keep The Diffs Auditable.
Stateful cloud firewall controls with reusable policy groups, default-deny posture, and audit visibility for every change pushed into the network edge.
Stateful FILTERING
Groups REUSABLE POLICY
Audit DIFF HISTORY
API AUTOMATION
Firewall Tiers
Choose your policy operating model.
Monthly managed tiers. Included baseline protection scales into fleet-wide controls.
Firewall
Cloud Firewall
€0 /mo
€0.000 / hour
- Stateful Type
- L3/L4 Layer
- ∞ Rules
- Included Price
popular
Firewall
Managed Firewall
€9.99 /mo
€0.014 / hour
- Managed Rules
- 24/7 Monitoring
- Per server Scope
Flow
Model the rules, then keep the history.
A direct path from default-deny policy design to resource binding and change auditability.
01
Define
Create The Policy Set
Model security groups, default-deny behavior, and environment labels before traffic is ever allowed into a resource.
# fw.policy.new
group: prod-web
default: deny
ingress: 443 from edge-lb
egress: db + metrics only
02
Attach
Bind Groups To Resources
Attach policies to VPS, dedicated nodes, and entry points without duplicating the same rule logic everywhere.
fwctl attach prod-web --resource vps-fra1-014
evaluating tags + inherited policy...
synchronizing rule set...
OK stateful filter active
OK audit event recorded
03
Audit
Track Every Change
Rule updates, approvals, and diffs stay visible so network security stops depending on tribal memory and side-channel approvals.
Policy Model
Defaults Default-deny oriented security posture
Groups Reusable policy and resource grouping
Rules Stateful ingress and egress control
Scope Per-node or cross-environment application
Operations
Automation API-driven rule orchestration
Tagging Environment and app grouping support
Rollout Policy propagation with visibility
Approval Operational review friendly changes
Inspection
Layers Stateful L3 / L4 traffic control
Direction Inbound and outbound rule sets
Matching CIDR, ports, protocols, resource groups
Isolation Cleaner segmentation between workloads
Audit
History Rule and policy change events
Diffs Per-change visibility over old and new state
Exports Compliance and SIEM-friendly output
Assurance Network policy with operational memory
CLOUD
DEFINE THE RULES.DON'T LOSE THE HISTORY.
Stateful firewall controls with reusable policy groups and audit visibility.
PROTECT A RESOURCE →