Managed WAF for reverse proxies

Layer 7 protection without enterprise overhead.

QueueShield sits in front of your origin and reacts in real time with adaptive modes, smart browser challenges, captcha escalation, clean error pages, and actionable webhook alerts.

€5/ month per site

Built for real traffic and real attacks.

QueueShield combines WAF rules, rate limiting, single-use browser challenges, captcha escalation, and automatic mode sensing.

01

Adaptive modes

Automatically moves between normal, threat, and captcha based on request pressure, blocks, challenges, and automation signals.

02

Smart challenges

Signed cookies, single-use nonces, browser validation, and cookie-version invalidation when the active mode changes.

03

Captcha escalation

Google reCAPTCHA or Cloudflare Turnstile can be selected randomly and verified server-side before access is restored.

Clear operations, not guesswork.

Realtime monitoring and webhook notifications explain when QueueShield changes mode and why it happened.

RT

Realtime sensor

A local daemon evaluates metrics every second and uses hysteresis to escalate quickly without flapping.

WH

Webhook alerts

Mode changes include score, reason, RPS, blocked requests, challenge success, and unique IPs.

UX

Premium user flow

Verification and error pages keep the experience coherent while suspicious traffic is filtered.

Questions before you deploy?

QueueShield is designed for small teams that need practical protection without operating a full enterprise security platform.

What does QueueShield protect?

QueueShield protects reverse proxies, origins, APIs, dashboards, and community websites with adaptive Layer 7 WAF controls.

How much does QueueShield cost?

QueueShield Managed costs €5 per month per site. QueueShield Hands-on costs €25 per month per site.

Does it support captcha escalation?

Yes. QueueShield can use Google reCAPTCHA or Cloudflare Turnstile and escalate to captcha mode when suspicious traffic passes browser challenges.

Do I need to change my backend?

No. QueueShield sits in front of your origin as a reverse-proxy protection layer and keeps your backend isolated behind the edge.

Simple pricing

QueueShield Managed

€5/ month per site
  • Layer 7 WAF for reverse proxies
  • Automatic normal, threat, and captcha modes
  • Realtime monitoring dashboard
  • Webhook mode-change alerts
  • Custom verification and error pages
Premium

QueueShield Hands-on

€25/ month per site
  • Everything in QueueShield Managed
  • Security handled directly by me
  • Manual tuning for your traffic profile
  • Attack review and mode calibration
  • Priority help through Discord