Detection, Mitigation & Response

Detect and mitigate DDoS attacks in under 1 second, respond automatically, and keep your users informed.

All features →
1-Second Detection
Know the instant traffic spikes. PPS checked every second.
Attack Classification
Identifies 7 attack families with protocol-level confidence scores.
Node Firewall Rules
Per-server iptables, null-routes, CDN rules & scripts.
Cloud Scrubbing
Auto-divert to Cloudflare, OVH, or Hetzner on attack detection.
BGP Mitigation
Auto-deploy FlowSpec, RTBH blackhole & rate-limiting via BGP.
Multi-Channel Alerts
Discord, Slack, PagerDuty, OpsGenie, SMS, email, webhooks.
PCAP Capture
Full packet capture with AI-powered forensic analysis.
Layer 7 Detection
HTTP flood, credential stuffing, API abuse & bot detection.
Automated Runbooks
Chain mitigation steps into automated incident response playbooks.
Analytics Baselines Threat Intel & IOC Multi-Node Status Pages Correlation Audit Log Attack Profiles Flow Collection Mirror / SPAN Mode
Docs
Documentation Quick Start API Reference Agent Setup Integrations 18
Learn
Free Tools 37 Free Certifications State of DDoS 2026 REPORT DDoS Protection Landscape Buyer's Guide PDF Hackathon Sponsorships DDoS Protection Facts
Company
About Us Become a Consultant 30% Partners White Label Managed Protection Contact Us System Status
Open Source
ftagent-lite MIT NetHawk MIT
Legal
Security Trust Center Terms & Privacy
Who Uses Flowtriq

From indie hosts to ISPs, see how teams like yours use Flowtriq to detect and stop DDoS attacks.

All use cases →
Hosting Providers
Protect every node across your fleet. White-label for your customers.
ISPs & Transit
Per-node detection across your backbone. FlowSpec and RTBH in seconds.
MSPs / MSSPs
White-label DDoS monitoring under your brand. New revenue, zero build.
Game Server Hosting
Keep players online during attacks. Per-server protection at $9.99/node.
iGaming & Sportsbooks
Uptime during peak events. Automated mitigation, zero manual intervention.
VoIP & Cloud Calling
Protect SIP trunks and media servers. No call drops during attacks.
Proxy Providers
Per-node port detection and blocking. Keep exit nodes clean.
Game Studios
Launch-day protection for multiplayer backends. Deploy before launch.
Telecom Carriers
Protect core network infrastructure. FlowSpec and RTBH automation.
Esports Small Operators Routers Edge Nodes VPN Providers Media & Streaming SaaS E-Commerce Financial Services GPU & AI Cloud Healthcare Education Government Compliance
Docs/Authentication

Authentication

Flowtriq uses two authentication methods depending on the client type.

Deploy Token (Automated Node Provisioning)

Generate a deploy token in Settings → Workspace to programmatically register nodes. Pass it as a Bearer token:

Authorization: Bearer your-64-char-hex-deploy-token

The deploy token is used with the mass deployment API (POST /api/deploy) to register nodes and retrieve their API keys. See the mass deployment guide for full details.

API Key (Agent Authentication)

Each node gets a unique API key when created (either through the dashboard or via the deploy API). The FTAgent uses this key to authenticate with the Flowtriq backend:

Authorization: Bearer node-api-key-here X-Node-UUID: node-uuid-here

The agent sends both headers on every request to https://flowtriq.com/api/v1/agent/* endpoints (metrics, heartbeats, incidents, PCAP uploads). API keys are stored in /etc/ftagent/config.json (chmod 600).

Agent API keys are per-node secrets. Never expose them in client-side code, version control, or logs.

Dashboard Authentication

Dashboard users authenticate via email and password at flowtriq.com/login. Session-based authentication is used for all dashboard and dashboard API endpoints (/api/dash/*). There is no token-based REST API for dashboard operations at this time.

Need programmatic access to nodes, incidents, or metrics? Contact us about API access for your integration.