Sign inBook a briefing
Shield

Every domain protected, every change approved.

Shield sits in front of every platform on Nexus. It looks after domains, certificates and firewall rules, blocks automated attacks and floods of traffic, and holds visitors in a waiting room on busy days. Shield’s AI agents propose changes. People approve them. Every change ships in stages and is sealed.

DNS, certificates and firewallAttacks and floods kept outAgents propose, people approve
nexus · Shield at a glanceSample data
Every domain protected, and what the agents want to change
Shield at a glance. Checking that every domain is protected, and seeing what the agents want to change.Sample data
Firewall rules

Rules tested on yesterday’s traffic before they guard today’s.

Write a rule for one route and see what it would have done yesterday. Rules ship in stages, and any stage can be stopped if something looks wrong.

Rule editor

  • Rules in plain terms
  • Tried on yesterday’s traffic
  • Ordered with care
nexus · Shield · rule editorSample data
Writing a rule and seeing what it would have done yesterday
Rule editor. Writing a rule for the bookings search and seeing what it would have done yesterday.Sample data
AI agents

Agents propose. People decide.

Shield’s AI agents watch traffic and propose changes each morning: a rule to tighten, a crawler to allow, a certificate to fix. Nothing changes until a person approves it, and every change is sealed.

  • Proposals with the evidence behind them
  • Approved or refused by a person
  • Every change sealed
nexus · Shield · agent proposalsSample data
What the Shield agents propose this morning
Agent proposals. Ruling on what the AI agents proposed this morning.Sample data
Busy days and floods

Steady on launch day. Standing firm in a flood.

When traffic floods in, Shield scrubs it before it reaches your platforms. On busy days, a waiting room keeps the portal steady and tells people how long they will wait.

DDoS and scrubbing

  • Traffic scrubbed before it reaches you
  • Live view of the attack
  • Back to normal on its own
nexus · Shield · DDoS and scrubbingSample data
Handling a flood against the portal
DDoS and scrubbing. Handling a flood against the customer portal.Sample data
Security events

What was stopped, and why.

Every blocked request is listed with the rule that stopped it. Good requests blocked by mistake are let through with a narrow exception. Events go to your own security log, and your platforms accept traffic only from Shield, so nobody can go round it.

  • Each block shown with its rule
  • False alarms freed narrowly
  • Origin locked to Shield
nexus · Shield · security eventsSample data
What Shield stopped overnight
Security events. Seeing what was stopped overnight, and whose address is shown.Sample data
Questions

About Shield.

Do we need another provider in front?

No, though Shield can work alongside one. Many firms run Shield on its own, or with a second provider as a fallback.

Does Shield work for every platform?

Yes. Every platform and domain pack on Nexus can sit behind Shield, each with its own domains and rules.

Book a briefing

Put one domain behind Shield.

Bring your busiest domain. We will show what Shield would have stopped last week.