Speed up and protect your website with ShieldCache

ShieldCache is not a third-party solution, but a security and caching infrastructure developed and operated by SpeedIT. For you, this means maximum transparency, rapid customisation and a direct line to the developers. Our architecture is based on tried-and-tested open-source technologies - xCaddy as a security proxy with specialised modules and Varnish as a high-performance HTTP cache - combined with our many years of experience in the hosting sector. • No reliance on external providers or cloud services • Rapid response times to customisation requests • Transparent pricing with no hidden costs • Hosting, development and support all from a single source

Not every page on your website has the same security requirements. That is why ShieldCache offers path-based rate limiting, which you can configure in detail. Protect login pages such as /wp-admin or /login from brute-force attacks with strict limits, whilst ensuring your public pages remain fully accessible to legitimate visitors. Typical configurations: • Login pages: 10 requests per minute • API endpoints: 100 requests per minute (authenticated) • Contact forms: 5 requests per minute • Checkout: Dynamic limits based on session behaviour

Varnish is the de facto standard for HTTP caching on high-traffic websites worldwide. When configured correctly, Varnish reduces the load on your origin server by up to 95 per cent and delivers content in milliseconds. Unlike simple browser caches, Varnish enables highly intelligent caching: dynamic pages can be partially cached (Edge Side Includes), and in the event of origin server failures, cached content continues to be served (Grace Mode). • Time to First Byte (TTFB) under 50 ms for cached content • Reduction in origin server load by up to 95 per cent • Stable performance even during traffic spikes • Immediate invalidation upon content updates

Our WAF is based on the OWASP Core Rule Set (CRS) - the globally recognised standard for web application security. It protects against the most critical threats, including SQL injection, cross-site scripting (XSS), remote file inclusion and many other attack vectors. Protection against: • SQL injection & NoSQL injection • Cross-site scripting (XSS) & CSRF • Remote file inclusion (RFI) & local file inclusion (LFI) • Directory traversal & HTTP protocol violations • Zero-day exploits via virtual patching

Not all automated access is harmful - Google, Bing and other search engines should, of course, be able to index your website. But scrapers, credential-stuffing bots and spam bots put a strain on your infrastructure and jeopardise your security. ShieldCache intelligently distinguishes between legitimate crawlers and malicious bots. • Verification of known crawlers (Google, Bing, etc.) • Detection of headless browsers and automation tools • Protection against credential stuffing and account takeover • Defence against content scraping and price spying

As a German company, SpeedIT is subject to strict German and European data protection regulations. All ShieldCache instances are operated exclusively in German data centres. Unlike US providers, your data is not subject to the CLOUD Act or other foreign access rights when stored with us. • Hosting and data processing exclusively in Germany • No disclosure to third parties or foreign authorities • Encrypted communication (TLS 1.3) • Anonymisation of IP addresses on request • Data Processing Agreement (DPA) included