Always online. Even under attack.

Media, newsrooms, public bodies, institutions: we handle attacks so your site stays available during peaks.

Book my free assessment

The starting point for a protection plan tailored to your current hosting.

Under attack right now?

Call our engineers. We step in even without a managed services contract.

A website is overwhelmed by an attack: it stops responding. A protection layer deploys around it, pushes the attack traffic aside and lets visitors through. The attack goes on; the site stays online.

During an attack

Detect, filter, hold, inform.

Four stages, handled by the engineers who know your site.

  1. 01

    Detection

    Monitoring flags abnormal traffic: volume, origin, or requests that don’t look like your visitors.

  2. 02

    Filtering

    Attack traffic is absorbed and pushed aside. We adjust the filtering to whatever comes in.

  3. 03

    Staying online

    Readers and users keep accessing the site. We check that the filtering doesn’t cut off legitimate traffic.

  4. 04

    Communication

    We tell you what’s happening, what’s being filtered and what remains reachable. You don’t hear it from your readers.

Who it’s for

Media and institutions, when the site is the target.

Newsrooms, news sites, public bodies, institutions: the online presence is the service. It must stay reachable when an attack tries to take it down.

  1. 01

    Media and newsrooms

    News sites, newsrooms and digital-native publishers. Traffic peaks and attacks often arrive together: the front page has to stay readable.

    • News
    • Live
    • Audience
  2. 02

    Public bodies

    Information, online services, alerts. The online service is expected to be there, including when it is being targeted.

    • Information
    • Online services
    • Service
  3. 03

    Institutions

    Institutions, organizations and foundations whose website is a point of reference. Keeping it open means keeping that presence.

    • Reference
    • Presence
    • Continuity

What the protection covers

Three families of attacks. One requirement: stay online.

We handle these attacks for the media and institutions that face them. Filtering absorbs the malicious traffic; legitimate visitors keep getting in.

  1. Absorb.

    Volumetric attacks saturate the link and the equipment with a flood of traffic.

    • Floods that fill the bandwidth
    • Traffic absorbed and filtered upstream of the servers
    • Legitimate visitors keep getting through
  2. Filter.

    Application-layer attacks, at layer 7, mimic real visitors to exhaust the site.

    • High volumes of requests aimed at the application
    • Filtering of anything that isn’t normal use
    • Readers and users keep access
  3. Hold.

    Resource exhaustion ties up connections, workers or memory until the service stops.

    • Connections and queues held open
    • Resources protected against saturation
    • The service stays sized for legitimate traffic

Two safeguards

Filtering keeps the site up. It doesn’t do the rest.

FIXWEB also limits hacking and data theft. That isn’t the job of DDoS filtering: it’s handled by hardening, patching and monitoring. The site itself stays available through heavy periods of attack.

  1. DDoS attacks

    Absorption and filtering

    Attack traffic is absorbed and pushed aside. The site stays open for readers and users, including during peaks.

    • Volumetric attacks
    • Application-layer attacks
    • Resource exhaustion
  2. Hacking and data

    Hardening and monitoring

    Patches, access control, logs and file integrity limit intrusion. DDoS protection doesn’t close a vulnerability and doesn’t see an intrusion.

    • Updates and hardening
    • Monitoring of access and files
    • Backups to recover if needed

Infrastructure

Know where your traffic goes.

The FIXWEB private cloud is spread across DC2, DC3, Telehouse Paris Voltaire, Interxion and Equinix, Tier 3+ datacenters at the heart of Paris’s internet infrastructure. On this hosting, filtering is part of the infrastructure and happens upstream of the servers: you know where your traffic goes, and who operates it.

Our datacenters

  1. 01

    DC2

    Vitry-sur-Seine · 29 rue Édith Cavell

    Opcore, formerly Scaleway Datacenter

  2. 02

    DC3

    Vitry-sur-Seine · 61 rue Julian Grimau

    Opcore, formerly Scaleway Datacenter

  3. 03

    Telehouse Paris Voltaire

    Paris 11th · 137 boulevard Voltaire

    Telehouse

  4. 04

    Interxion Paris

    Seine-Saint-Denis

    Digital Realty

  5. 05

    Equinix Paris

    Seine-Saint-Denis

    Equinix

Photos and certifications of our datacenters

Frequently asked questions

DDoS protection.

What types of attacks do you handle?

Volumetric attacks, which saturate the link; application-layer (layer 7) attacks, which mimic real visitors; and resource exhaustion, which ties up connections, workers or memory.

What happens during an attack?

We detect the abnormal traffic, filter it, check that the site stays reachable for legitimate visitors, and keep you informed of what is being filtered and what remains online.

Does DDoS protection prevent hacking and data theft?

No, not on its own. Filtering absorbs and pushes aside attack traffic to keep the site available. Hacking and data theft are limited by hardening, patching, monitoring of access and files, and verified backups.

Where is the traffic filtered?

On FIXWEB hosting, in Tier 3+ datacenters in Paris: Scaleway (DC2 and DC3), Telehouse Paris Voltaire, Interxion and Equinix.

Premium web hosting

Do you protect infrastructure that isn’t hosted by FIXWEB?

Yes, when we operate it. AWS, OVHcloud, Google Cloud, Azure, Scaleway, dedicated servers or VPS: filtering relies on the existing hosting provider and on what we configure there. If that environment is no longer enough, we can host you on the FIXWEB private cloud in Paris.

Managed servers

How quickly do you respond?

Every managed services contract includes a guaranteed response time and a 3-hour guaranteed restoration time. With CRITICAL, critical support is provided 24/7. This guarantee covers our response; it does not measure how long an attack lasts.

An attack is under way: where do I start?

With emergency support, even without a contract. This page describes long-term protection; an ongoing attack is handled immediately.

Two situations

Prepare the protection, or deal with the attack.

Protect your infrastructure

Prepare the protection

A first 30-minute conversation to understand your environment and what’s at stake. The starting point for a protection plan tailored to your current hosting.

Book my free assessment