Every industry gets attacked a little differently.

Attackers like to strike when it hurts most, for example during a game launch, on payday or in the first hour of a sale. Below is how SentiGate works for the industries that get attacked most often.

Gaming

Players notice an extra 40 milliseconds, and they definitely notice a dropped match.

Game servers get hit by people who just lost, by rival communities and by anyone with a booter subscription and a free evening. Most of it is UDP, the same protocol your game runs on, so filters have to tell an attack from a firefight.

Network Protection keeps your game server prefixes behind the gates with filters tuned to your protocol. WAAP covers the launcher, login and store, where account takeover and credential stuffing happen.

Common attacks

UDP floodsAmplificationSYN floodsLogin brute forceCredential stuffing
E-commerce and retail

The worst time to go down is the first hour of a sale, and attackers know it.

Online stores usually deal with two kinds of trouble: floods aimed at checkout and search, which are the most expensive pages to serve, and bots that buy up limited releases, hold inventory in carts and test stolen cards with tiny payments.

WAAP handles both. L7 flood protection keeps checkout working during a spike, and bot management makes sure limited items go to real buyers. Rate limits stop card testers from using your payment form to check stolen cards.

Common attacks

HTTP floodsScalping botsInventory hoardingCard testingScraping

What fits

Fintech and payments

Downtime on payday means a long support queue, and sometimes it ends up in the news.

Financial services are attacked for money in several ways at once. Credential stuffing goes after customer accounts and API abuse targets partner integrations, while ransom DDoS starts with an email that threatens an attack unless you pay.

If you get one of those emails, don’t pay and write to us instead. With WAAP in front of your apps and APIs and Network Protection in front of your network, the threat loses most of its power.

Common attacks

Ransom DDoSCredential stuffingAPI abuseHTTP floodsTLS handshake floods
SaaS and APIs

When your API is the product, one abusive client can slow down every other customer.

Floods on the API look like heavy usage, and a scraper with a valid key looks like a normal customer until you count its requests.

WAAP checks requests against your OpenAPI spec, sets limits per key or token and keeps L7 floods away from your backend, so the dashboard stays fast for the customers who pay for it.

Common attacks

API abuseHTTP floodsScraping with valid keysBrute force

What fits

Hosting providers and ISPs

When one customer gets attacked, everyone on the same uplink feels it.

Hosting companies and ISPs carry thousands of customers on shared links. One target can fill the link for all of them, and carpet bombing spreads the attack across a whole prefix so per-IP thresholds never fire.

Network Protection covers your prefixes at layers 3 to 5, with policies per host for customers who run unusual services. In always-on mode, filtering is already running when an attack starts.

Common attacks

Carpet bombingUDP floodsAmplificationSYN floodsGRE floods

Other industries

Media, education, government, crypto projects and nonprofits get attacked too. Tell us what you run. If it can be attacked, we can probably help.

Under attack

Let’s get you behind the gate.

This is what happens next.

  1. Write to our NOC. Put “URGENT” in the subject and tell us what’s being hit: a domain, an IP or a whole prefix, and roughly when it started.
  2. An engineer replies with a plan. For a website this is a DNS change and usually a new origin IP that the attackers don’t know yet. For a network it’s a Letter of Authorization, route objects and a GRE tunnel, so we can announce your prefix from our edge.
  3. The flood hits our gates instead of you. Once traffic flows through SentiGate, we tune the filters with you while the attack is still going.
noc@sentigate.cloud
Write to the NOC

Quick tip: if you run your own DNS, check the TTL on the record you’ll be changing. The shorter it is, the faster the switch to SentiGate takes effect.