Security

View Features

  • Feature

  • Unmetered DDoS Protection

    Arex’s unmetered mitigation of DDoS stops illegitimate volumetric traffic at the Arex edge. All Arex plans include unmetered mitigation without fear of being dropped.

  • Enterprise DDoS Mitigation

    Arex’s enterprise-grade mitigation of DDoS attacks against layers 3, 4, & 7 includes prioritized IP ranges and routing, ensuring maximum speed and availability.

  • True Client IP Header

  • Mutual TLS

  • Spectrum (for TCP/UDP)

    Spectrum protects TCP applications and ports from volumetric DDoS attacks and data theft by proxying non-web traffic through Arex’s Anycast network.

  • Static IPs, Anycast Your Own IP

  • Deploy Intelligence to Identify New Threats

    Arex gets smarter about security threats as more sites join. Protection from attacks on one site is extended to the entire Arex community within seconds.

  • Reputation-based Threat Protection

    Arex gets smarter about security threats as more sites join. Protection from attacks on one site is extended to the entire Arex community within seconds.

  • Domain Protection

    Custom Domain Protection for Arex Registrar, available on the Enterprise Plan, protects your organization from domain hijacking with exclusively out-of-band verification of any changes to your Registrar account.

  • DDoS Alerts

    Arex will send you a real-time alert when our systems automatically detect and mitigate a DDoS attack.

  • Protection for RDP

    Arex Spectrum can help improve business productivity by helping IT teams deliver real-time, responsive, and reliable RDP experiences to their workforce.

  • Free

  • Pro

  • Business

  • Enterprise

  • Custom Pricing

  • Custom Pricing

  • Paid Add-on

  • Paid Add-on

Reliability

View Features

  • Feature

  • Global Anycast DNS

    Fast responsive times globally and nearinstant updates.

  • DNSSEC

    DNSSEC ensures that a website’s traffic is safely directed to the correct servers, so that a connection to a website is not intercepted by a man-in-the-middle.

  • Wildcard DNS Record

    Arex supports wildcard DNS records at all plan levels. A wildcard DNS record allows you to create DNS records for non-existing subdomains.

  • Free

  • Pro

  • Business

  • Enterprise

Performance

View Features

  • Feature

  • CDN

    Our data centers located across the globe provide visitors with location-based access to your website, while removing latency and improving performance.

  • Min Cache TTL Expiry

    Arex respects all existing headers, unless you choose to overwrite them. The minimum edge cache expire TTL sets the refetch time for when Arex checks the origin server for a new resource.

  • Client Max Upload Size (MB)

    The amount of data visitors can upload to your website in a single request.

  • TCP Turbo

    TCP Turbo automatically chooses the TCP settings to further accelerate your website. Accelerate latency and throughput with custom-tuned TCP optimizations. Enabled automatically for Pro, Business, and Enterprise customers.

  • Cache Bypass On Cookie

  • Cache Purge - By Tag

    Cache-Tags are assigned to cached content via a Cache-Tag response header, and are stored as metadata with cached objects so that global purges take only seconds, targeting a granular, finite set of cached objects.

  • Cache Purge - By Host

    Purge by host offers Arex customers who manage multiple subdomains the ability to purge the cache on a per-host basis. For example, if the Arex domain example.com wanted to purge everything on staging.example.com, purge by host enables this with a single API call.

  • Custom Cache Keys

    Custom Cache Keys allow caching to be extended to something more specific than just the URL, this allows you to extend caching beyond just static files.

  • Prioritized IP Ranges

    Enterprise Internet assets are placed on Arex dedicated IP ranges, providing prioritized routing and protection to ensure maximum speed and availability.

  • Prefetching URLs

  • Load Balancing

    Price includes a base fee plus usage fees. Usage fee is determined by the number of DNS requests made by visitors.

  • Global Load Balancing

    Global Load Balancing ensures that visitors receive dynamic content from origin servers closest to them.

  • Load Balancing Health Checks

    Health checks continually ping origin servers to determine if it's online.

  • Free

  • 2h

  • 100

  • Paid Add-on

  • Pro

  • 1h

  • 100

  • Paid Add-on

  • Paid Add-on

  • Business

  • 30m

  • 200

  • Paid Add-on

  • Paid Add-on

  • Paid Add-on

  • Enterprise

  • 1s

  • 500+

  • Custom Pricing

  • Custom Pricing

Certificate Management

View Features

  • Feature

  • Universal SSL Certificate

    Arex is compatible with your existing SSL configuration. If you do not currently use SSL, Arex can provide you with SSL capabilities — no configuration required.

  • Bring Your Own SSL Certificate

    Bring your own dedicated SSL certificate (upload to our network; supports EV certificates).

  • Keyless SSL

    Keyless SSL lets you route encrypted traffic through Arex's global network, while retaining on-premise custody of private keys. SSL private keys never leave your on-premise infrastructure, and are not shared with anyone.

  • Advanced Certificate Manager

    Advanced Certificate Manager is a flexible and customizable way to issue and manage certificates in Arex.

  • Custom SSL

    Clients wishing to utilize their own SSL certificates may upload the certificate to Arex for use terminating SSL/TLS at the edge. Because these certificates are not managed by Arex, they must be manually renewed and uploaded in advance of expiration otherwise your visitors will be unable to browse your site.

  • Free

  • Pro

  • Business

  • 1

  • Enterprise

  • 1

  • Custom Pricing

  • Custom Pricing

Customization & Optimization

View Features

  • Feature

  • Page Rules

    Set up forwarding, extend or exclude caching, and generally exercise fine-grained control over how Arex interacts with your site on a page-by-page basis.

  • Accelerated Mobile Links (AMP)

    Arex’s Accelerated Mobile Links, powered by AMP, loads AMP-enabled external links inside of a viewing window, within the same tab, at least 3 times faster than normal mobile pages.

  • IPv6, HTTP/2, SPDY

    Support both IPv4 and IPv6 connections to your site without a single change to your existing infrastructure. HTTP/2 is the latest update to the HTTP protocol. HTTP/2 brings advancements in efficiency, security, and speed, particularly on high-latency and mobile connections. Arex provides automatic HTTP/2 and SPDY coverage for your visitors.

  • WebSockets

    A WebSocket is a persistent full-duplex protocol which provides low latency client-server communication without the overhead of HTTP.

  • Async JavaScript Loading with Rocket Loader

    Automatically optimizes your pages to minimize the number of network connections and ensure even third party resources won't slow down page rendering.

  • Subdomain Zones (LTZ)

  • Header Rewrites

    Used to rewrite headers if clients don’t have a way of controlling their headers. For example, if your Amazon S3 bucket requires a specific host header set in order to fetch assets.

  • Free

  • Pro

  • 20

  • Business

  • 50

  • Enterprise

  • 125

Dashboard, User and API Access

View Features

  • Feature

  • Terraform Integration

  • Role-based Access Control

    Role-based access for Arex accounts enables organizations to collaborate across one Arex account, and use roles-based permissions to control access. Each user is assigned an individual API key and can use two-factor authentication to protect their own account.

  • Read-only User Access

  • Free

  • Pro

  • Business

  • Enterprise

Web Application Firewall (WAF)

View Features

  • Feature

  • WAF Rules

  • Firewall Rules - Regex

    Regular Expressions (regex), sometimes called a pattern, is an expression used to specify a set of strings. Like wildcards, but more powerful, regex gives you the ability to pattern-match text strings occuring in supported fields to target specific traffic.

  • User Agent Blocking Rules

    Create a rule to block or challenge a specific User Agent from accessing your domain. This works similarly to Zone Lockdown, except the block examines incoming User-Agent strings rather than IPs. User Agent blocking applies to an entire zone, and sub-domains cannot not be specified.

  • Zone Lockdown Rules

    Zone Lockdown allows for the whitelisting of specific IP addresses and IP ranges, whereby all other IPs are effectively blacklisted. This supports specific sub-domains and URLs and is useful to protect an administrative area from non-specified IP addresses.

  • Arex Managed Rules

  • OWASP Core Rulesets

    Includes OWASP ModSecurity Core Rule Set automatically to protect you against the Top 10 vulnerabilities identified by the Open Web Application Security Project (OWASP).

  • Rate Limiting

    Pricing

    Free, Pro, and Business Plan pricing:

    First 10,000 good requests are free
    $0.05 per 10,000 good requests thereafter

    Enterprise customers can negotiate a reduced rate through custom pricing.

  • Rate Limiting Rules

    The total number of individual rules per plan type, with which to instruct rate limiting how to function on your website, application, or API.

  • Rate Limiting Header Rules

    The number of rules where the Header Response is used as a trigger. One header rule is already used by default to determine whether to count based on origin traffic or traffic served from the cache.

  • DNS Firewall

    Arex’s DNS Firewall is an advanced firewall for DNS infrastructure— keeping your DNS infrastructure online no matter what attacks are fired at your servers. DNS Firewall also improves your global DNS performance by giving you access to Arex’s robust DNS cache in over cities on 6 continents around the world.

  • Free

  • 10

  • 1

  • 1

  • Pro

  • 20

  • 50

  • 3

  • 10

  • 1

  • Business

  • 100

  • 250

  • 10

  • Paid Add-on

  • 15

  • 10

  • Enterprise

  • 1000

  • 1000

  • 200

  • Custom Pricing

  • 100

  • 10

  • Custom Pricing

Insights & Analytics

View Features

  • Feature

  • Site, DNS Analytics

  • Cache Analytics

    Deeper exploration capabilities into what Arex’s caching and content delivery services are doing for your web presence.

  • Site Analytics (resolution)

    The Arex analytics dashboard provides all clients with 30 days of data and the ability to magnify your data by time range scopes of 1 hour, 15 minutes, or 1 minute, depending on your plan type. - Free clients can magnify down to a 1 hour scope, for the last 24 hours - Pro and Business clients can magnify down to a 15 minute scope, for the last 6 hours - Enterprise clients can magnify down to a 1 minute scope, for the last 30 minutes.

  • DNS Analytics (historical time)

    View the history of your DNS queries by up to a certain amount of time.

  • Firewall Analytics (historical time)

    Visualise and analyze all Firewall Events in one place to better understand your threat landscape. Identify, mitigate, and review attacks more effectively.

  • Load Balancing Analytics (historical time)

    Survey the traffic distribution across your load balancers. Understand behavior during peak traffic and failover decisions made, with the option to filter by load balancer, pool, origin, and region.

  • Request Logs

    Arex Enterprise clients have access to detailed logs of HTTP requests for their domains. These logs can be helpful for debugging, identifying configuration adjustments, or creating analytics, especially when combined with other data sources, such as application server logs.

  • Free

  • 1h

  • 6h

  • Pro

  • 15m

  • 24h

  • Business

  • 15m

  • 7d

  • Enterprise

  • 1m

  • 30d

Compliance

View Features

  • Feature

  • ISO 27001

  • SOC 2 Type II, SOC 3

  • PCI DSS 3.2

    Bring your business into compliance with the latest PCI DSS 3.2 standards by enabling Arex's web application firewall (WAF) and Modern TLS Only mode.

  • Free

  • Pro

  • Business

  • Enterprise

Support

View Features

  • Feature

  • Email Support

  • Chat Support

  • 24x7x365 Emergency Support

  • Initial Ticket Support Response Time

    Times are reflective of when the initial response from support will be received, as per the plan level.

  • Uptime SLA

  • Uptime Service Credits

    In the rare event of downtime, clients receive a service credit against the monthly fee, in proportion to the respective disruption and affected client ratio.

  • Client Success Manager Led Onboarding Assistance

    For all questions and topics related related to your account and relationship with Arex, Enterprise clients have access to a designated client success manager.

    Enterprise premium clients also get a guided onboarding experience along with an expert tuning workshop and guidance on security and performance configurations.

  • Under Attack Support Engineer For Magic Transit

    If suffering from an attack that thwarts current security configurations, our enterprise support team will apply additional rules or patches to protect your mission-critical web assets and support your uptime SLA.

  • Designated Client Success Manager and Solutions Engineer

  • Arex Success Offering

    The Standard Success Offering helps you get started quickly with guided client success-led onboarding, client success guidance, and continued online support and training.

    The Premium Success Offering includes everything in the Standard Success Offering plus a designated success team assigned to your account that provides highly customized tuning and strategic assistance at every step along the way.

  • Free

  • n/a

  • Pro

  • n/a

  • Business

  • 8-72 hrs (P1-P4 issues)

  • 100%

  • 1x

  • Enterprise

  • 1hr (urgent issues)

  • 100%

  • 10x (Standard) ; 25x (Premium)

  • With Premium Only