Discover Why Imperva Was Named a Leader in The Forrester Wave™ DDoS Mitigation Solutions


How It Works

A change to your DNS records ensures that all HTTP/S traffic to your domain(s) is routed through the Incapsula network. Acting as a secure proxy, Incapsula masks your origin server IP and persistently filters incoming traffic—blocking DDoS traffic while legitimate requests flow through unhindered.

The DDoS filtering process relies on a set of security rules that observe client behavior, reputation and HTTP footprint. These rules are supported by progressively-stringed security challenges. The effect is to thwart DDoS attackers while making the process invisible to legitimate clients.

website protection how it works

High-Capacity Network

Incapsula global network holds over (Terabits per second) of on-demand scrubbing capacity and can process 30 billion attack packets per second. Incapsula network has successfully defended clients against some of the largest attacks on record.

All-Inclusive DDoS Protection

An Always-on Solution

Incapsula automatically blocks all assaults in seconds, and does not require that you notify us you’re under attack, freeing your time for more strategic IT and business management tasks.


Transparent DDoS Protection

Legitimate visitors will not encounter latency CAPTCHAs or annoying wait screens when your website comes under attack.

All-Inclusive DDoS Protection

IP Masking

Incapsula prevents direct-to-IP DDoS attacks by hiding the IP of your origin server. For maximum effectiveness we suggest changing your origin IP address after onboarding


Continuous Traffic Visibility

Incapsula dashboard provides you with real-time information about incoming traffic and the ability to update security policies on-the-fly.

All-Inclusive DDoS Protection

Comprehensive Protection

Website Protection works in synch with our Infrastructure Protection and Name Server Protection services. Together these shield Incapsula customers against any all DDoS threats.