Yandex Smart Web Security

A service for protecting web applications.

Anti-DDoS protection at the application level

Protection from DDoS attacks at the OSI model L7 application level. Allows you to protect yourself from attacks aimed at exhausting system resources and disrupting application operations.

Anti-bot protection

Analysis, detection, and blocking of illegitimate automated queries. For example, protection against bots that create a parasitic load on web resources, spam, or content parsing.

Simple connection

Connect to Yandex Application Load Balancer in just a few clicks. Create a preset profile with full protection, or a custom profile to meet your specific needs.

Built-in monitoring and logging

Use the service not just to block illegitimate requests, but also to log and analyze incoming traffic. You can use built-in Yandex Cloud tools to monitor traffic and log events. Visual traffic data and send it to third-party analytics systems like SIEM.

Flexible traffic filtration

Choose how to react to various traffic categories. Filter traffic by IP address or geographic features, set conditions for any HTTP request parameter. Send traffic for full analysis or allow certain automated requests for resources running through the API.

Web Application FirewallPreview

This firewall protects web apps against exploiting vulnerabilities, including those in OWASP TOP‑10. This firewall is also protected against DDoS attacks.

Get started

Create a security profile and connect is to an L7-balancer.

Create

Proprietary Smart Protection technology

The system uses ML models trained on years of DDoS protection data from Yandex web resources.

The service analyzes traffic with ML algorithms and behavioral analysis to:

Block attacks, abnormal and illegitimate requests.
Send suspicious requests to Yandex SmartCaptcha.

Use Smart Web Security in your projects

Protext web applications by analyzing incoming traffic, detecting and blocking abnormal requests. With integration with Yandex SmartCaptcha, the service can, when necessary, verify that your visitors are humans and not robots.

Use Smart Web Security to protect your web resources and API. The service analyzes incoming traffic, blocking illegitimate requests and accepting automated requests that you expect.

Use filtration rules to control which queries to your web resource to block, and which to accept. Permit, for example, requests from specific regions, subnets, or groups of devices.