Security for live traffic

Combine DDoS mitigation, TCP and UDP application protection, intrusion detection and prevention, and IP threat data.

Protection tuned to traffic
Layer 3 through Layer 7 controls address network and application attack patterns.
Signals that inform action
Inspection and IP intelligence turn observed traffic and threat context into usable security inputs.
Controls for exposed services
Proxy, filtering, and firewall capabilities help protect public TCP and UDP application traffic.
Plan depth by service need
Select capacity and protection depth around the protocol and service exposure you operate.

Trusted by teams behind great services

Security products

DDoS Mitigation
Filter attacks before they reach services
DDoS Mitigation authenticates and filters malicious traffic before it reaches your infrastructure, covering volumetric and protocol attacks across network layers. Plans differ in TCP, UDP and Layer 7 protection levels.
From ₩150,000 / month
Pro plan. Basic protection is included with Virtual Server and Baremetal Server.
- Packet-⁠level traffic authentication
- Stateful flow tracking
- Adaptive filtering policies
- TCP and UDP flood mitigation
- HTTP, TLS and QUIC filtering
- Protocol-⁠specific game filters
HyperConnect
Protect TCP and UDP at the proxy layer
HyperConnect is a Layer 4 reverse proxy for internet-⁠facing TCP and UDP applications. It combines DDoS mitigation, expression-⁠based firewall rules, traffic analytics, and failover to help teams control and protect application traffic.
From ₩50,000 / month
Additional traffic is ₩25,000 per TB.
- Layer 4 TCP and UDP proxy
- Volumetric DDoS mitigation
- Expression-⁠based firewall rules
- Multi-⁠condition traffic filtering
- Geo-⁠IP filtering
- Traffic analytics and reporting
IPS/IDS
Inspect traffic for intrusion signals
IPS/IDS inspects network traffic with deep packet inspection, security signatures, and AI/ML analysis. It detects and can prevent threats across network and application layers, including malicious IPs, web attacks, malware, and anomalous activity.
Quote on request
- Deep packet inspection
- 18,000+ security signatures
- Daily signature updates
- AI/ML anomaly analysis
- Malicious IP and URL blocking
- SIEM integration
Threat Intelligence
Turn IP behavior into security policy
Threat Intelligence provides an IP lookup API with verdicts, scores, categories, and context from behavior-⁠based threat data. Teams can use its normalized signals in firewall, CDN, and DDoS mitigation policies as the dataset is refreshed each day.
Custom quote
Billed per IP lookup request.
- IP verdict and risk score
- Threat category and summary
- Behavior-⁠based threat data
- REST API delivery
- Daily data refresh
- RAW behavior data in Advanced

Built for the way teams work

Game hosting protection
Use Always-On DDoS mitigation for game traffic exposed to repeated attacks.
Products for this use caseDDoS Mitigation
Resilient TCP and UDP services
Apply Layer 4 proxying, firewall rules and failover to internet-facing applications.
Products for this use caseHyperConnect
Threat-informed policy
Turn IP verdicts and scores into policies for firewall, CDN and DDoS mitigation.
Products for this use caseDDoS Mitigation IPS/IDS Threat Intelligence

Key security features

Security specifications by product
Product	DDoS Mitigation	HyperConnect	IPS/IDS	Threat Intelligence
Overview	Always-On filtering for DDoS attacks, from network to application layers.	A Layer 4 reverse proxy that protects and accelerates TCP and UDP applications.	Inspects traffic with signatures and AI/ML analysis to detect and prevent intrusion attempts.	An IP lookup API that returns threat verdicts, scores, categories and detailed context.
Starting price	From ₩150,000 / month	From ₩50,000 / month	Not listed	Custom quote
Key figure	200+ Tbpsfiltering capacity	1–15 TBmonthly traffic by plan	18,000+security signatures	70M+threat indicators
Best for	Game hosting protection Threat-informed policy	Resilient TCP and UDP services	Threat-informed policy	Threat-informed policy
Key features	200+ Tbps edge filtering with partners Packet-level authentication HTTP, TLS and QUIC filtering	TCP and UDP proxy Expression-based firewall rules Automatic failover	18,000+ security signatures Daily signature updates Deep packet inspection	Verdict, score and category REST API integration Lite and Advanced plans
Product specifics	Filtering capacity 200+ Tbps with G-Core and GSL Edge PoPs 210+ Protected IPv4 10K+ Basic TCP/UDP 10 Gbps / 10 Gbps Layer 7 Pro partial, Business full	Protocols TCP and UDP Included traffic 1 to 15 TB / month Connections 50 to 500 Acceleration Business and Enterprise Extra traffic ₩25,000 per TB	Inspection Deep packet inspection Signatures 18,000+ Updates Daily Coverage Network and application layers	Indicators 70M+ Coverage 195 countries Daily refresh 5 to 50% API output Verdict, score, category, summary Plans Lite and Advanced

Frequently asked questions

Included

Basic DDoS mitigation with Virtual Server and Baremetal Server

How does DDoS Mitigation work?

It detects and filters malicious traffic at the network entry point, using packet-level authentication.

What does HyperConnect protect?

It is a Layer 4 reverse proxy for TCP and UDP applications, with DDoS mitigation, firewall rules and failover.

What is the difference between IPS and IDS?

IDS detects and alerts on intrusions, while IPS can block them after detection. PacketStream provides both functions.

What does the Threat Intelligence API return?

Lite returns an IP verdict, score, category and summary. Advanced adds RAW data and detailed behavior information.

What traffic does IPS/IDS inspect?

It covers network and application-layer threats, including DDoS, port scans, web attacks, malware, and REST API attacks.

How current is Threat Intelligence data?

The dataset is refreshed daily, with 5 to 50 percent of it updated each day.

Can HyperConnect filter by location?

Yes. Its expression-based firewall rules include Geo-IP filtering alongside multi-condition traffic controls.

Explore other categories

Compute
Virtual, bare metal and GPU servers in one place
Learn more about Compute
Content delivery
CDN and video streaming, from upload to playback
Learn more about Content delivery
Storage
Block, S3-compatible object storage and backup
Learn more about Storage
Network
Direct carrier links, load balancing and firewalls
Learn more about Network
Infrastructure
Colocation and private links to clouds and partners
Learn more about Infrastructure

Ready to get started?

Tell us about your workload and we will help you choose the right products and plans.

Contact Sales Start Building

Security for live traffic

Overview

Protection tuned to traffic

Signals that inform action

Controls for exposed services

Plan depth by service need

Game hosting protection

Resilient TCP and UDP services

Threat-informed policy

Compute

Content delivery

Storage

Network

Infrastructure

Ready to get started?