Stop bots and abuse before they reach your app.
SwarmTech Shield screens every request to your product, explains each verdict in plain language, and lets you test a rule on real traffic before it blocks a single customer. Built for product teams who are not security engineers.
Built and operated by SwarmTech Consulting- 1No allow rule matched
- 218 sign-in attempts in 60 s on /api/login
- 3Credential-stuffing threshold exceeded (10 / 60 s)
- 4Safe throttle engaged, behaviour continued, block escalated
- $0
- to protect your first app
- 25,000
- screened requests a month on the free plan
- 100%
- of verdicts carry a readable decision trace
- 3 steps
- from unprotected to enforced
What is SwarmTech Shield?
SwarmTech Shield is an application-layer abuse and bot protection service for SaaS apps. It screens every request through a middleware package or API, blocks credential stuffing, scraping and fake signups, and records a readable reason for every verdict. It is free for one app, with paid plans from $19 a month.
Your login page is somebody else's test bench.
Every public SaaS app attracts automated traffic within days of launch. Most of it never shows up as an outage; it shows up as a cloud bill, a support queue and customers who stop trusting you.
Credential stuffing
Leaked password lists are replayed against your login until something works. One success is an account takeover you have to explain.
Signup and trial abuse
Bots open free accounts by the hundred, burn your trial allowance and pollute the metrics you use to decide what to build next.
Scraping
Your catalogue, pricing or content is pulled out page by page and republished somewhere else, on your bandwidth.
Black-box tools
Most protection products give you a score and a block. When a real customer is caught, nobody can say why, so the rules get switched off.
Protection you can read, test and defend.
Decisions you can read
Every allowed, throttled or blocked request carries a reason and a step-by-step trace, not an opaque score. Support can answer "why was I blocked?" in seconds.
Test rules before they bite
Run any rule in observe-only mode, replay recent traffic against it, and see exactly who it would affect before it blocks anyone.
Credential stuffing, throttled
Repeated sign-in attempts from one source are counted in a sliding window and throttled automatically, so your login stops being free practice.
Scraping caught early
Sequential reads, directory walking and bulk pulls are recognised by path pattern and request velocity before your content walks out the door.
Throttle before you block
Hostile sources get a bounded, safe throttle first and an escalated block only if the behaviour continues, with every step recorded.
Threats grouped into campaigns
Related incidents are clustered with a plain-language summary, so one botnet reads as one problem, not four hundred alerts.
STSA 2.0 security agent
An AI agent drafts response plans and rule changes. It proposes; a person approves each one. Nothing changes behind your back.
Live traffic and reports
Requests stream into the console with IP, path, verdict and deciding rule, and weekly or daily security reports land in your inbox.
Live in an afternoon, enforced when you're ready.
Step 1: Register your app
Add the app you want to protect. It receives a screening key and a separate connection key for the middleware.
Step 2: Route requests through Shield
Drop in the @swarmtechshield/middleware package or call the screening endpoint directly. Nothing is enforced until you promote a rule out of observe-only.
Step 3: Watch, tune, approve
Live traffic, incidents and campaigns show what is happening. STSA 2.0 drafts a response plan and you approve each step.
Works with Express, Next.js, Cloudflare Workers, Base44 functions or plain HTTP.
What SwarmTech Shield is built for, and what it isn't.
- Credential stuffing against login and signup
- Scraping and content harvesting
- Signup, trial and API abuse from bots
- Noisy public endpoints you need to keep open
- Replacing your cloud provider's network-level DDoS protection
- Teams that want a black box they never look at
Start free. Upgrade when the traffic is real.
Prices in US dollars per month. Every plan starts in observe-only, so you can see the value before you enforce anything.
Starter
One app and enough volume to see whether Shield fits your traffic.
$0forever- 1 protected app
- 25,000 screened requests / month
- 7-day traffic history
- IP, range, path and port rules
- Standard bot and rate limiting
- Explainable verdicts with decision traces
Essential
For a product team screening real customer traffic across a few apps.
$19per month- 3 protected apps
- 250,000 screened requests / month
- 30-day traffic history
- Adaptive protection with bounded auto-throttle
- Credential stuffing and scraping detection
- Observe-only rule testing
- Attack campaigns with plain-language summaries
- Weekly security reports
- Most requested
Professional
Six apps, the full protection set and the STSA 2.0 agent included.
$35per month- 6 protected apps
- 1,000,000 screened requests / month
- 90-day traffic history
- STSA 2.0 security agent
- Agent proposes, you approve every change
- Human-approved automations
- Daily security reports
- Everything in Essential
- Full coverage
Enterprise
Unlimited apps and every protection, for teams running many products behind one gateway.
$69per month- Unlimited protected apps
- Unlimited screened requests / month
- 365-day traffic history
- Every feature, including the STSA 2.0 agent
- Daily security reports
- Priority support and onboarding
Traffic is never blocked because of your plan: limits cap new apps and history, and going over your request volume raises an alert, not an outage.
Before you decide
Will it block my real customers?
Not unless you decide it should. Rules start in observe-only: you see who a rule would have caught, against your own recent traffic, before you promote it to enforcement. When something is blocked, the decision trace shows exactly which rule matched and why.
How much engineering effort is it?
Usually an afternoon. Install the middleware for your framework, or call one screening endpoint from your server, and paste in your key. There's no proxy to stand up and no DNS change.
Does the AI agent change my rules on its own?
No. STSA 2.0 drafts proposals with its reasoning. Each one waits for a person to approve it, and every change is written to the audit log.
Is this a replacement for Cloudflare or my cloud firewall?
No, and we'd rather tell you now. Shield works at the application layer, on the abuse that gets past network defences: credential stuffing, scraping, fake signups. Most customers run it alongside their edge provider.
Can SwarmTech set it up for us?
Yes. SwarmTech Consulting builds and operates Shield, so we can onboard your apps, tune the first rules with you, and connect it to SwarmTech Continuity for incident response.
SwarmTech Shield stands on its own. If you also run these, they connect through the same practice.
Protect your first app today, free.
One app, 25,000 screened requests a month, and every verdict explained. No card, no proxy, no DNS change.