The Cloudflare alternative where every plan gets every feature

A Cloudflare alternative for Layer-7 DDoS protection

Volumetric floods are the easy half of the problem — they are loud, and the backbone absorbs them. The attacks that actually take sites down look like visitors: slow-drip request floods, credential stuffing, fake checkouts, scrapers that rotate through residential IPs. Itnetic profiles every request by path, header shape and TLS fingerprint, and flips a host into challenge mode within a second of a spike, at the edge, without waiting for a control-plane round trip.

• Behavioral signatures match the shape of an attack, not just its volume.
• Repeat offenders are dropped in the kernel, so they cost nothing per request.
• Real visitors solve an invisible proof-of-work — never a CAPTCHA, never an image grid.
• Attack traffic is scrubbed outside your bandwidth quota, on every plan.

A Cloudflare WAF alternative you do not have to upgrade for

Managed OWASP filters — XSS, SQL injection, file inclusion, secret scanning, credential stuffing — are on from the first request, on the free plan. Custom rules sit on top with typed fields rather than a freeform expression language, matching path, header, method, country or client fingerprint, and set to allow, block or challenge. IP reputation and the verified-bot allowlist are evaluated ahead of your rules, so a known-bad network never reaches them.

A Cloudflare CDN alternative on the same network as the protection

Caching and mitigation run in one pipeline on one edge node, not as two products stitched together. A cached response is served from the point of presence nearest the visitor; an uncached one passes the challenge gate, WAF and rate limiter before it is allowed to touch your origin. Origins can be a single upstream, a pool of up to eight with passive health checks and failover, or a private S3-compatible bucket signed with SigV4 at the edge.

A Cloudflare waiting room alternative, on the free plan

A virtual queue is the one feature people most often discover they cannot afford at the moment they need it — a ticket drop, a launch, a restock. Itnetic includes a waiting room on every plan, free included. You set the number of concurrent sessions your origin can carry; everyone above it gets a queue page with their position and an estimated wait, ordered identically across every point of presence. A queue position costs a bot the same proof-of-work a challenge does, so the line cannot be flooded.

An EU-based Cloudflare alternative

Itnetic is operated from the Czech Republic, inside the EU, by a named individual you can email directly. There is a Data Processing Addendum, a published sub-processor list, a documented retention policy where every stated period is enforced by a database TTL index rather than a clean-up job, and an incident response policy. If the deciding factor for you is EU operation and a GDPR posture you can actually read end to end, that is the point of difference.

• Operator: Petr Chlíbek, IČO 21210756, Czech Republic.
• Edge points of presence in Europe, North America and Asia Pacific.
• DPA, sub-processors, retention and incident-response policies published in full.

Switching from Cloudflare

Migration is two DNS records and no nameserver move — you keep your existing DNS provider and your existing registrar, which also means you can move a single hostname across and leave the rest of the zone alone while you watch it. Add the domain, verify it, point the record, and the edge starts serving. Most customers are fully protected within five minutes, and per-request logs let you confirm the cutover happened rather than assume it.