01
Fast firewall rules
Firewall rules are prepared before use so each request can be checked quickly.
Product plane / Security & WAF
Security & WAF
operationalFirewall, reputation, and identity checks at the edge.
Hyx combines reputation, firewall rules, managed protections, visitor behavior, and connection identity in one decision. Each action is recorded clearly for incident review.
- ~9µs
- 3,000 firewall rules
- Measured request review time.
- ~2µs
- managed protections
- Measured common-attack review time.
- ~10ns
- IP reputation
- Known malicious ranges rejected on sight.
- early
- bot signal
- Connection behavior is checked before site content is sent.
01 / proof
02 / proof
03 / proof
04 / proof
Core capabilities
Combined policy, reputation, and identity decisions.
Security decisions combine your rules with reputation and visitor behavior. Teams can block, verify, slow, label, or observe traffic from one service and one request record.
SEC-01 / compiled policy
3,000 rules / production
Policy input
High-risk injection
rule / 942100
- Method
- GET · POST
- Route
- /products · /search
- Identity
- anonymous client
- Network
- tor-exits
- Actor risk
- ≥ 60
Action
BLOCK / 403
flag actor
Compiled execution plan
01 / Index
Resolve exact and range-backed conditions
02 / Fuse
Collapse adjacent comparisons into one pass
03 / Evaluate
Read normalized request and actor state
04 / Enforce
Block 403 · attach rule 942100
Evaluation
~9µs
3,000-rule production profile
Before compile
34µs
unfused policy path
Handling
one pass
request checked once
02
Rules across request and risk fields
Write rules that match the URL, country, device, headers, request size, or a visitor's recent behavior.
03
Seven ways to respond
Matching rules can block, challenge, rate-limit, bypass cache, tag a visitor, or suppress a known false positive.
04
Industry-standard protection, built in
Managed industry rules check each request for common web attacks.
05
Deep inspection, no slowdown
The full rule set checks each request in about two millionths of a second.
06
Managed rules, tuned your way
Turn protection on with a switch, and quiet any single rule that's too noisy for your particular site.
How it works
Set policy once and apply it globally.
Hyx checks policy before release, then distributes it to each location. Requests are reviewed locally so decisions stay fast and explainable.
SEC-02 / early client identity
before site content
Bot confidence
000
Human structure
Supported browser
Connection identity
recognized connection pattern
- Browser pattern
- present
- Connection
- modern
- Encryption
- current
- Identity
- consistent
01
02
03
04
Moment
on connection
Method
combined evidence
- 01
Identify
Review reputation, location, connection details, and recent visitor behavior.
- 02
Inspect
Apply your firewall rules and selected managed protections.
- 03
Confirm
Compare several indicators before acting on suspicious traffic.
- 04
Respond
Block, verify, slow, allow, label, or observe, with the reason saved to the request record.
Operational detail
Capabilities included with Hyx.
A concise list of what this part of Hyx provides. Roadmap items are labelled explicitly.
Included
22Fast firewall rules
Rules across request and risk fields
Seven ways to respond
Industry-standard protection, built in
Deep inspection, no slowdown
Managed rules, tuned your way
Known-malicious address blocking
Block or allow by country
Rate limiting that only slows abusers
Ban once, blocked everywhere
Browser verification challenges
Verified crawler allowlist
Browser security presets
Login attacks caught early
Repeat offenders stay flagged
Background behavioral signals
Connection identity
Pre-HTTP bot signals
Trusted and known-bot signatures
Fingerprinting across transport protocols
Additional transport signals
Browser and automation labels
Next system / AI engine
Add request risk scoring to these controls.
See how Hyx AI reviews 38 signals, learns safely, checks updates, and rolls back immediately.