We stand at the gate so you don’t have to.

SentiGate is a DDoS protection company headquartered in Panama City. We run a filtering network on five continents, and our engineers spend their days stopping attacks on it.

Panama CityHeadquarters
7+ TbpsFiltering capacity
11 gatesOn five continents
24/7Network operations
08°58′N 79°31′W

We work next to the world’s most famous gates.

A short drive from our office, the Panama Canal has been lifting ships between two oceans since 1914.

Every ship that arrives is checked, raised and sent on through a set of locks. Only the ships that are cleared get through, and they stay on schedule. A DDoS filter does more or less the same job, only with packets and a few billion times faster.

Panama is also a convenient place to cover both Americas from. Our gates in Panama City, Miami and São Paulo keep Latin American traffic close to home, while the rest of the network covers North America, Europe, Asia and Oceania.

Miraflores-ish lockSimplified a lot
PACIFIC SIDE LAKE SIDE CHECKED · RAISED · RELEASED
What we believe

Four rules we follow.

They are easy to write down and harder to follow every day.

01

Answer the phone.

Attacks don’t keep business hours, so neither do we. When you reach out, you get an engineer with access to your configuration.

02

Explain every block.

If we drop your traffic, you should be able to see the exact rule and the reason behind it.

03

Stop it near the source.

Attack traffic should be stopped near where it starts, far away from your servers.

04

Keep it boring.

Good DDoS protection is something you can forget about most of the time, and we want your Mondays to be uneventful.

The logo

Two halves of a gate, locked together.

The gap between them is shaped like an S, and it’s the only way through. Everything that wants in has to follow that path, and we decide what reaches the other side.

Hover over the logo in the corner of any page and the gate opens a crack. That’s about as far as it ever opens for traffic we don’t trust.

  • The fixed leafHeavy, square and very hard to push over.
  • The signal leafSignal yellow, the color of a lamp left on at night.
  • The S-shaped gapThe only way through: clean traffic passes, and floods don’t fit.
Careers

We hire people who read packet captures for fun.

Mostly network engineers, SREs and people who get curious when a graph looks wrong.

Write to us and tell us about something you built, or something you broke and then fixed. A good story matters more to us than a perfect resume.

careers@sentigate.cloud
~/jobsExample
$ cat what-we-look-for.txt + you know what a SYN cookie is, or want to + BGP doesn't scare you (much) + you've fixed production while it was on fire + you explain things without jargon - blaming DNS before checking DNS $

Come say hello.

If you want to know how the gates would handle your traffic, we’re happy to walk you through it.

Under attack

Let’s get you behind the gate.

This is what happens next.

  1. Write to our NOC. Put “URGENT” in the subject and tell us what’s being hit: a domain, an IP or a whole prefix, and roughly when it started.
  2. An engineer replies with a plan. For a website this is a DNS change and usually a new origin IP that the attackers don’t know yet. For a network it’s a Letter of Authorization, route objects and a GRE tunnel, so we can announce your prefix from our edge.
  3. The flood hits our gates instead of you. Once traffic flows through SentiGate, we tune the filters with you while the attack is still going.
noc@sentigate.cloud
Write to the NOC

Quick tip: if you run your own DNS, check the TTL on the record you’ll be changing. The shorter it is, the faster the switch to SentiGate takes effect.