An Operating Model for API and Account Protection
API and account protection works best as an operating model: map routes, classify signals, choose proportionate actions, preserve evidence, and tune controls from monitor to enforce.
API Bot Abuse Does Not Stay in One Endpoint
API bot abuse moves across login, checkout, and account journeys. Defenders need route-aware bot, rate, and account controls that follow the campaign rather than treating each endpoint as a separate incident.
API Protection and Account Protection Are One Request-Path Problem
Account protection does not stop at the login form. The same request path carries API, bot, rate, token, and account-risk evidence, and that is where the decision needs to happen.
How Residential Proxies Changed API and Account Abuse
Residential proxies have changed account abuse from obvious bursts into distributed, low-noise workflows across login, account, and API routes. Treat proxy use as a risk signal, not a blunt block rule.
Beyond the IP Address
Discover why traditional IP-based rate limiting is obsolete and how advanced techniques provide robust protection against modern distributed attacks.
The Bot Spectrum
Learn to classify bots into good, bad, and grey categories and apply the right management strategy for each.
Rate Limiting for API Security
How advanced rate limiting protects modern applications and APIs from sophisticated threats including proxy networks, distributed attacks, and automated abuse in enterprise security environments.
RFC 9460
Introducing SVCB and HTTPS records in DNS and their impact on web connectivity.
HTTP/2 Rapid Reset Attack Deepdive
The technicalities of the HTTP/2 Rapid Reset vulnerability and steps to fortify against DDoS threats.
Understanding the HTTP/2 Rapid Reset Attack
A comprehensive breakdown of the HTTP/2 Rapid Reset flaw and guidance on bolstering defences against potential DDoS attacks.
ZDNS - scan the entire internet
Details the use of ZDNS, a high-performance DNS toolkit, to create a comprehensive Reverse DNS (rDNS) lookup database by scanning the entire internet, and how randomizing the IP space overcomes UDP timeout issues.
Enterprise DDoS Protection
Analysis of the Microsoft 365 DDoS attack by Storm-1359 reveals critical lessons for enterprise application security platforms. Learn advanced Layer 7 DDoS protection strategies and rate limiting techniques for modern applications.
Understanding HTTP Link Headers
HTTP Link headers are a relatively unknown but powerful way to improve page load times.
Consistent Hash with Bounded Loads
An overview of consistent hashing with bounded loads, an advanced load balancing technique that ensures a more even distribution of keys across servers, preventing overload and improving system stability.
Multi-Origin Load Balancing
Websites with a global audience need more than just a traditional CDN. They need geographic multi origin load balancing.
Introducing Automatic Cache Tags in the Updated Peakhour WordPress Plugin
Read about automatic cache tags in the updated Peakhour WordPress plugin.
Layer 7 DDoS Protection
Comprehensive guide to Layer 7 DDoS protection using strategic caching within application security platforms. Learn how intelligent caching strategies provide robust defence against sophisticated application-layer attacks.
Automatic Image Optimisation
Image optimisation saves you bandwidth and designer effort while reduces page load time.
Drupal full page caching module
We're excited to announce our Drupal 8/9 caching module, read on for more details.
IP Threat Intelligence
Comprehensive guide to IP threat intelligence for modern application security platforms. Learn how managed IP reputation lists and threat intelligence feeds protect applications from known malicious sources and emerging threats.
CVE-2022-26134
Peakhour clients are protected against CVF-2022-26134 Atlassian Confluence RCE
Intelligent Rate Limiting
Comprehensive guide to intelligent rate limiting for modern application security platforms. Learn how sophisticated rate limiting protects APIs and web applications from abuse, DDoS attacks, and automated threats whilst maintaining optimal user experience.
Rate limiting
How can rate limiting protect your web application and the key items to consider when enabling.
Request collapsing
Request collapsing - saving your origin by reducing concurrent requests and re-using responses for resources.
Cdn-Cache-Control
CDN-Cache-Control is a proposed new header to augment the venerable Cache-Control. Its aim is to make controlling caching easier as CDNs become ubiquitous.
Cache-Status
Cache-Status is a proposed standard header to provide visibility into how caching providers interact and handle a request.
Website Optimisation
Even if you have the fastest server in the world, your website might still seem very slow to end users if you have lots of render blocking resources, learn how to deal with them.
Secure Dynamic Content Caching
Comprehensive guide to secure dynamic content caching that improves server performance whilst maintaining security controls. Learn how modern application security platforms integrate caching with threat protection for optimal performance-security balance.
Common Issues That Affect Website Performance
After covering testing we're going to get an overview of the common issues that impact website load times and how to check for them.
Test Your Website Performance With Google Lighthouse
This installment on website performance introduces Google Lighthouse as a measuring tool. Read on to see how we use it here at Peakhour.
Application Performance Optimisation
A practical primer for finding where website requests lose time, from cache state and origin work to browser rendering.
WordPress Performance Optimisation
How to speed up WordPress by separating public cacheable pages from private, expensive, and abused request paths.
Boost Your Website Speed with Peakhour's Full Page Caching
Experience a significant boost in website speed and performance with Peakhour's Full Page Caching feature, now easily accessible through our Wordpress plugin.