Introducing Bunny Shield: Powerful security within reach of anyone

You and your team built something incredible. After spending hours and perhaps thousands, or even millions, of dollars to perfect every part of the code, user experience, and detail, you finally pushed it live.

People noticed, the service took off, and it felt like magic.

Then it happened: a massive DDoS attack took everything offline. At the same time, attackers brute-forced your login page, gained access to user data, and left you with angry users, a damaged brand, and a pile of lost revenue to recover.

As dramatic as it sounds, the unfortunate truth is we hear these stories all the time. The internet is a battlefield of DDoS attacks, bad bots, and exploits looking to cause damage wherever they can, and it's only getting worse.

The worst part? Most security companies mainly care about one thing: extracting as much money as possible from big enterprise contracts while leaving everyone else to fend for themselves.

Not anymore.

Meet Bunny Shield: Powerful protection. For anyone.

At bunny.net, we believe every website owner, developer, or business deserves the right to exist online without the fear of outages, service interruptions, or revenue loss. Your projects should never be left unprotected just because you don’t have an enterprise budget.

That's why we’re setting out on a new mission to help bring powerful security within reach of anyone, not just large enterprise companies, and, together, help build a safer internet.

We're thrilled to introduce Bunny Shield: a powerful, next-generation web security suite—built to democratize access to serious, scalable protection that supports you from the moment you go live.

To help you sleep worry-free and focus on building your product, not putting out fires, it combines all the tools you need, every step of the way:

• AI-assisted learning mode → Automatically suggests security rules based on your traffic patterns and helps detect anomalies while reducing false positives
• Next-gen WAF → Stops OWASP Top 10 to protect from application and API exploits and supports full granular rule customization and custom rules
• Global rate limiting → Allows you to define and enforce global request limits per user or IP in specific time periods to prevent abuse and brute-force attacks
• Advanced DDoS protection → Our latest stateful advanced DDoS mitigation that intelligently detects and blocks attacks on every level
• IP blocking → Block malicious IP lists, TOR, VPNs, datacenters, or whole IP ranges to stop bad bots and actors
• Zero-day protection → Smart threat detection system that allows us to push rules out in real time

Free Basic plan: Because protection shouldn't wait for a budget

Building the best, most powerful mitigation platform in the world wouldn't mean anything if it stayed locked behind an excruciating paywall. Unfortunately, that’s exactly what the security industry has done for years, turning peace of mind into a premium luxury and selling safety only to those willing to “talk to sales.”

We believe you deserve better.

Whether you're a website owner, developer, or small team just starting out with an exciting new product, Bunny Shield brings you the powerful essential security you need to stay safe online.

It automatically blocks even the most advanced DDoS attacks, helps you prevent abuse with global rate limiting, and even mitigates the most common OWASP Top 10 vulnerabilities with a managed bunny.net WAF ruleset. In short, Bunny Shield keeps your services safe, so you can focus on what really matters: building your products.

And the best part? It costs a grand total of: $0/month.

But as your service grows, so do the threats.

Advanced plan: Ready for when things get real

That's why we built the Advanced Plan: a serious step up for serious builders—without the serious price hike.

For just $9.50/month, the Advanced Plan takes security from "pretty good" to "rock-solid awesome.” Whatever the internet throws at you, consider it handled.

Designed for production-grade services, you need protection that can keep up. Here's what's included:

• A full-sized, next-generation WAF with broader rule coverage
• AI-assisted learning mode to automatically adapt and optimize your rule sets
• Support for custom RegEx rules, so you can build around your exact needs
• Built-in bot mitigation and IP reputation filtering
• White-label challenge pages
• Automatic blocking of VPNs, Tor, and datacenter traffic
• Zero-day protection to shield against emerging threats before they hit
• (Coming Soon) Bot and API protection

Enterprise plan: Security, engineered for when it matters most

While we believe security should never be a luxury, for us, democratizing doesn’t mean compromising. Today, bunny.net already powers some of the busiest websites and services on the internet, and we know exactly what's at stake where your service going down isn't just inconvenient; it’s catastrophic.

When we say Bunny Shield is for "everyone," we mean it. Everyone. No exceptions.

That’s why we built the Bunny Shield Enterprise Plan: our most advanced protection tier, engineered for mission-critical systems where failure is simply not even an option.

It delivers the highest level of protection, ultra-granular control, and, most importantly the peace of mind to safeguard your most critical infrastructure with:

• Unlimited custom WAF and rate limit rules
• Advanced Shield AI for enhanced DDoS protection
• 100% Enterprise SLAs
• Dedicated 24/7/365 support
• A dedicated onboarding security engineer
• No fair usage policy

While we did lock the enterprise plan behind a sales form, we didn't do that to add friction. We did it to help you craft a perfect security solution fit for your exact scale, needs, and scope, and give your team exactly what they need to stay protected.

With the three plans, whether you’re running a passion project or protecting critical data for millions of users, we designed Bunny Shield to scale with you.

Powerful features. Backed by unstoppable infrastructure.

Bunny Shield doesn't just rely on powerful features to help you keep safe. When the real attacks hit, the difference between staying online and going dark comes down to one thing: raw power.

That's why we built Bunny Shield directly into the fabric of one of the largest networks in the world: the bunny.net edge. Unlike traditional infrastructure, we turned every one of our servers into a smart, global scrubbing node, analyzing and filtering malicious traffic in real time.

Backed by 200+ Tbps of capacity and 119+ global locations, our network not only provides industry-leading performance but also seamlessly absorbs even the biggest attacks before they ever reach your application.

Our promise: Serious protection, seriously simple

When under attack, the last thing you want is to get lost in your own security configuration. Yet, under stress, that’s often exactly what ends up happening. While some companies benefit from this by offering a lengthy, paid onboarding experience, we took a different approach with Bunny Shield.

Simplicity and exceptional user experiences are core to everything we build at bunny.net, and Bunny Shield is no exception.

Onboarding takes just a few clicks, and we help you get running with a set of pre-optimized profiles:

• General – A great starting point for most websites and apps
• WordPress – Optimized for typical WordPress threats and plugin vulnerabilities
• Drupal – Tailored for common Drupal-specific attack patterns
• cPanel – Ideal for shared hosting environments and multi-site deployments
• Plesk – Built for secure, scalable hosting using the Plesk control panel
• APIs (coming soon) – Designed to protect REST and GraphQL endpoints with schema-aware rules

And this is just the beginning. As we onboard more users and projects to Bunny Shield, we are looking to continually expand the list with new presets tailored to different platforms, frameworks, and use cases.

Once you’ve picked a profile, Bunny Shield enters a 7-day learning mode—designed to guide you at every step of the way. During this time, you’ll get full visibility into your traffic with raw request logging, detailed insights, and smart, actionable suggestions to help you fine-tune your setup.

Instead of reading through long pages of documentation and spending hours on onboarding calls, the system helps you set everything up and helps you stay protected without drowning in complexity.

Of course, if you're under attack, we've got you covered as well. Just one click instantly engages all your protections and shuts down the emergency.

The preview launch phase is also a perfect time for any feedback to help us further make Bunny Shield the best security tool for you, so make sure to reach out to our support team with any suggestions you might have.

It's always on, but never in the way.

Some companies are happy to sacrifice user experience and performance to keep you safe. For us, this was not an option.

At bunny.net, we’re on a mission to help make the internet hop faster, and keeping you safe shouldn't mean slowing you down. We built Bunny Shield to be fast. Exceptionally fast.

Instead of picking slow, off-the-shelf tools, we built our own WAF engine and DDoS mitigation stack from scratch, deeply integrated into our reverse proxy and request processing pipeline for unmatched speed and precision. At the end of the day, your legitimate users care about their experience being flawless, not the large attacks you're just dealing with.

Finally, because we're here to help you build better internet experiences—not make your users stare at a blank screen—we made sure Bunny Shield never, ever shows a CAPTCHA during DDoS mitigation—unless absolutely necessary. Our end goal is to remove them altogether.

In short, we designed Bunny Shield as your silent guardian—always on, keeping your infrastructure secure while staying out of the way, so your customers can enjoy a seamless experience, without knowing it was ever there.

Hopping ahead: A safer internet for everyone

With the launch of Bunny Shield, we’re not just introducing a new product; we’re setting out to fundamentally change how web security works.

We believe that by making robust protection accessible and easy to use, we can help create a more secure internet where businesses of all sizes can thrive without fear of attacks. Our vision is to democratize web security, ensuring that every website, regardless of its size or budget, has the right to operate safely online.

Launching Bunny Shield is our first hop forward. Then, we have an ambitious roadmap ahead.

Even during our preview launch, we're already hard at work on shipping new features to get ready for the general availability. Here’s a sneak peek at what’s coming soon:

• Bot detection to identify and block automated threats that can compromise your site’s integrity and performance.
• API guardian to provide tailored protection against threats toward your API.
• Upload scanning to analyze user-uploaded content and prevent malware or other harmful files from reaching your servers.

Hop into the future of secure web experiences

Ready to protect your hard work and give your users the safe, seamless experience they deserve? Bunny Shield is now available as a preview to everyone!

You can get started with just a few simple steps:

• Log in or sign up on bunny.net and open one of your Pull Zones.
• Navigate to the new Bunny Shield tab.
• Enable powerful protection in just a few clicks.
• Enjoy seamless protection from DDoS attacks, malicious bots, and other cyber threats while focusing on building your product.

At bunny.net, we’re committed to making the internet faster, safer, and more reliable, and we’re excited to bring the next generation of security within reach of anyone.

No sales calls, no complex configuration. Just security that works. Out of the box.