Five checks, one verdict
Network, fingerprint, behaviour, AI intent and policy are scored together for every request. Clear attacks are blocked, likely ones challenged, and everyone else passes straight through.
Product · Web application firewall
SENTRA AI Threat Shield
An AI web application firewall that sits in front of a website and inspects every request before it reaches the server. Injection, credential stuffing, scrapers, AI agent swarms and floods are stopped at the edge, with no change to the application.
Five checks on every requestMonitor, then EnforceAI agents verifiedRuns on your own servers
What it does
Every request, judged before it lands.
AI agents and swarms
Genuine AI agents are verified by signature and network; impostors are caught. Swarms that spread one job across many addresses are treated as one operator and contained.
Watch before you block
Start in Monitor mode and see exactly what would be stopped on your own traffic. Trust anything legitimate in Shadow review, then switch to Enforce.
Response hardening
Missing security headers, cookie flags and HSTS are added to every response, and version banners are stripped, as traffic passes through.
Page Shield and API Shield
Page Shield watches the scripts your pages load and alerts on a new, injected one. API Shield validates content types, sizes, tokens and JSON fields per route.
Tamper-evident audit ledger
Blocks, challenges, bans, AI verdicts and every admin action are hash-chained and sealed, so any later change to the record is detected.
How it works
Traffic in. AI inspection. Clean traffic out.
The same pipeline protects a single website or an entire internet line. Switch between them, and between watching and blocking.
Protect
Mode
01
Visitors reach the site
The website's DNS points to the SENTRA AI Threat Shield node, so every request for the site arrives there first.
02
AI inspects every request
Each request passes five checks: network, fingerprint, behaviour, AI intent and policy. In Enforce mode, attacks are blocked or challenged.
03
Clean requests reach the destination
Only clean traffic is passed on to the customer's web server. The site's dashboard shows what was stopped.
The consoles
See it on screen.
These are the real SENTRA consoles. The figures shown are demo data.
Every request, inspected live
Every request passes five checks (network, fingerprint, behaviour, AI intent and policy) on its way to the site. Each verdict is listed with its reason, and the swarm radar groups many addresses into one campaign.
Deployment
On your servers, in front of your site.
AI Threat Shield is an inspecting reverse proxy. Point the website's DNS at it, and it terminates HTTPS, inspects and forwards clean traffic to the web server.
Same server
Runs beside the website on one machine and forwards over loopback. Simplest for a single site and for trials.
Dedicated edge
Its own small server holds the public address and certificates; the web server sits behind it on a private address. Recommended for production.
Fail-safe by design
A guard watches the shield every few seconds. If it ever stops answering, traffic goes straight to the web server and you are alerted, so the site stays up.
Next step
See SENTRA on your own traffic.
Book a walkthrough, or start with a free Safety Check of your site.