Everything you need to know about SentriGate — how it works, what it protects, and how to get started.
SentriGate is a security system for your websites that protects them from harmful attacks, malicious traffic, hackers, and anything that could cause your site to break, go offline, or lose data. It operates at the HTTP layer between the internet and your origin server — so threats are stopped before they ever reach your application.
No. SentriGate works at the HTTP layer, not inside your application. There are zero code changes required. It is compatible with any backend — PHP, WordPress, Laravel, Symfony, Node.js, Python, Java, Ruby, .NET, and any custom HTTP service.
SentriGate protects against DDoS attacks (SYN floods, HTTP floods, volumetric attacks), malicious bots (scrapers, credential stuffers, form spammers), known web exploits (SQL injection, XSS, path traversal via the WAF), and behavioral anomalies detected by AI risk scoring.
No meaningful latency is added for clean traffic. Request scoring happens in under 1 millisecond. In most cases, SentriGate improves perceived performance by serving cached responses from the Edge — eliminating round trips to your backend entirely.
SentriGate processes request metadata (IP addresses, headers, timing) for security analysis. It does not store the content of your users’ requests. Full details are in our Privacy Policy.
Yes. SentriGate offers a free tier for single-site, shared hosting deployments with form protection and bot detection. Paid plans add full VPS/dedicated Agent support, WAF, DDoS protection, and advanced analytics. All paid plans also include a 14-day free trial — no credit card required.
Our team is happy to answer anything not covered here. Reach out directly and we’ll get back to you within one business day.
