HYX

System index / complete

Feature matrix

The complete Hyx feature inventory.

Search and compare delivery, security, bot protection, Hyx AI, analytics, and site controls. Each row describes the customer outcome.

01 / index
80

total capabilities

one canonical inventory

02 / index
78

shipping today

available on the managed edge

03 / index
2

roadmap

labelled explicitly below

showing 80 / 80 capabilities

Speed & Delivery

21 capabilities

Modern browser connections

Visitors use the fastest connection their browser supports for a quick and reliable experience.

Faster reconnects for return visits

Returning visitors can reconnect in less than one network round trip.

Million-request throughput per location

A single edge location served 1.13 million requests per second in testing.

Independent request handling

Requests are handled independently so one slow operation does not stall unrelated traffic.

Popular content kept close to visitors

Popular pages and files are served without contacting your server again.

Caching that follows your settings

We follow your site's caching rules for what to store, how long to store it, and when to refresh it, so visitors receive current content quickly.

Network-wide cache purge

Update a page and purge the old version from every location worldwide immediately.

Pre-compressed responses

Pages and files are compressed ahead of time and delivered in the most compact format each browser accepts, without adding request-time work.

Automatic image optimization

Images are converted to lighter modern formats for each visitor. The dashboard reports the resulting bandwidth savings.

Encryption tuned for speed

Every connection is secured with modern encryption that's been tuned to be as fast as it is safe.

Certificates held in memory

Your security certificates live in high-speed memory and update instantly, so connections are secured without ever pausing to look them up.

Automatic certificate status updates

We keep the proof that your certificate is valid fresh and attached automatically, so browsers never stop to double-check.

Remembered server preferences

On the first connection, Hyx learns how your server prefers to communicate and reuses that information on later requests.

Safe automatic retries

If a request to your server fails, Hyx retries it only when doing so is safe.

Efficient request handling

Hyx avoids repeating work or waiting on extra services while handling a request.

Profile-guided optimization

Production traffic profiles guide optimization of common request paths.

Hardware-aware sizing

Each location adjusts its capacity to the available hardware.

Connection-preserving updates

Hyx upgrades beneath live traffic without dropping active connections.

Load shedding under traffic spikes

Traffic controls protect Hyx and your server when demand exceeds capacity.

Fault isolation

System components are isolated so a fault in one area does not take down your site or disable protection.

Standards-correct request handling

Requests and responses follow HTTP framing and forwarding rules across the full proxy path.

Security & Firewall

16 capabilities

Fast firewall rules

Firewall rules are prepared before use so each request can be checked quickly.

Rules across request and risk fields

Write rules that match the URL, country, device, headers, request size, or a visitor's recent behavior.

Seven ways to respond

Matching rules can block, challenge, rate-limit, bypass cache, tag a visitor, or suppress a known false positive.

Industry-standard protection, built in

Managed industry rules check each request for common web attacks.

Deep inspection, no slowdown

The full rule set checks each request in about two millionths of a second.

Managed rules, tuned your way

Turn protection on with a switch, and quiet any single rule that's too noisy for your particular site.

Known-malicious address blocking

Reputation data identifies known-malicious addresses before HTTP request processing.

Block or allow by country

Decide which countries can reach your site, with checks so fast they stay instant even in the middle of an attack.

Rate limiting that only slows abusers

Limit request rates per visitor to control abuse while allowing normal customer traffic.

Ban once, blocked everywhere

Ban an address a single time and it's turned away at every location worldwide, before it can even connect.

Browser verification challenges

Suspicious clients receive a browser verification challenge before access is allowed.

Verified crawler allowlist

Search engines like Google are recognized and never blocked, challenged, or mistaken for attackers.

Browser security presets

Enable recommended browser protections, including enforced HTTPS, per site without changing application code.

Login attacks caught early

We watch for waves of failed logins and catch password-guessing attacks even when they're carefully paced to look normal.

Repeat offenders stay flagged

Visitors that repeatedly attempt attacks remain flagged until they complete a human verification challenge.

Background behavioral signals

Lightweight checks record suspicious behavior for later firewall and model decisions.

Bot Detection

6 capabilities

Connection identity

At connection time, Hyx captures a signature of the client's software that you can filter or use in rules.

Pre-HTTP bot signals

Connection behavior can identify common bots before they send an HTTP request.

Trusted and known-bot signatures

Trusted browser signatures cut down on false alarms, while known-bot signatures unmask bots pretending to be real browsers.

Fingerprinting across transport protocols

Connection identity works across the browser connection methods supported by Hyx.

Additional transport signals

Fine details of how a browser communicates add another signal to how confidently we can tell humans from bots.

Browser and automation labels

Requests are tagged as browser or automated traffic for dashboard filtering.

AI Protection

19 capabilities

Edge request scoring

Hyx AI reviews each request on arrival so policies can stop attacks before they reach your site.

Versioned feature contract

Hyx AI reviews each visitor using recent behavior and request details.

First-request enforcement

High-confidence attacks can be stopped on the first request without a warm-up period.

Rolling behavior history

Hyx AI uses recent visitor behavior to identify abuse patterns.

Calibrated confidence scores

Calibrated scores keep a 90% result consistent enough to support clear policy thresholds.

Automated retraining and rollout

Hyx AI learns from real traffic and releases approved versions across the network automatically.

Hyx AI release checks

Hyx AI updates must pass false-positive and detection checks before release.

High-confidence training labels

Training uses high-confidence labels from traps and completed challenges to reduce ambiguous examples.

Prediction-error feedback

Confirmed mistakes become lessons for future Hyx AI versions.

Human review queue

Low-confidence cases are queued for human review and can become labeled training examples.

Decision explanations

Block records include the signals and policy behind the decision.

Configurable enforcement modes

Run Hyx AI in watch-only, challenge, block, or automatic mode. Automatic mode blocks high-confidence bots and challenges borderline cases.

Promotion to persistent bans

Clients repeatedly blocked by Hyx AI can be promoted to a persistent ban.

Hyx AI quality monitoring

Quality checks track Hyx AI accuracy and consistency after release.

Hyx AI rollback controls

Roll every location back to the previous trusted version with one switch, or let automatic safeguards reduce enforcement.

Proposes new protections for review

A built-in assistant suggests rules for emerging attacks. Quality checks and human approval are required before publication.

Shadow evaluation

Candidate Hyx AI versions run beside the live version without affecting protection decisions.

Single-location canary rollout

roadmap

New models can be evaluated at one location before network-wide rollout.

Network-level attack aggregation

roadmap

Network-level aggregation can detect related attacks distributed across many addresses.

Analytics & Insight

10 capabilities

Request-level records

Request logs include connection details, delivery status, Hyx AI decisions, and serving time.

Traceable block decisions

Block records show the trigger, Hyx AI version, and location that handled the request.

Point-and-click traffic queries

Explore traffic history from the dashboard with a safe point-and-click query builder.

Attack classification

Built-in detectors label suspicious behavior such as SQL injection, Log4j probes, and login attacks.

Find and fix false alarms

The dashboard highlights frequently triggered rules with low confirmed value for review and tuning.

Traffic and security dashboards

Share dashboard views of traffic, security, bots, origin health, and day-over-day trends with your team.

Origin health summary

Origin health views highlight slow responses, errors, and timeouts so teams can find affected servers quickly.

A built-in assistant for your dashboards

Ask questions in plain English and receive answers drawn from dashboards scoped to your sites.

Full control over your AI protection

Review Hyx AI status, uncertain cases, accuracy, and rollback controls from one screen.

Background operations status

Operational views expose certificate renewals, data retention jobs, and other background tasks.

Platform & Control

8 capabilities

All your sites, one dashboard

Manage domains, origins, certificates, and rules from one place, with changes distributed across the network.

SSL that renews itself

Add a domain and Hyx issues and renews its security certificate automatically.

Changes go live in seconds

Rules, certificates, blocklists, and switches propagate across the network within seconds without a redeploy.

One switch, your whole network

Global settings apply at every location, with per-site overrides where needed.

Consistent location configuration

Each network location runs the same software and sizes itself to the available hardware for consistent operation.

Know which location served each visitor

Request records include the serving location and active protection configuration.

Traffic and Hyx AI history

Traffic history and Hyx AI versions are retained for audits and rollback.

Site operations in one dashboard

Manage backups, files, malware scans, plugins, themes, performance settings, logs, and billing alongside the CDN.

Start with the fast path

Follow a request through the platform.

Start with delivery, then review security, Hyx AI, analytics, and site management for the same request.

Open performance