Protecting online voices

Deflect is a free website security service defending civil society and human rights groups from digital attack.

Human rights

Deflect protects free expression and association on the Internet. Clear Terms of Service define our relationship with clients.

Open source

We are active members and supporters of the open source community and release all software and documentation under free and open source licenses.

Privacy first

Your data is yours and encrypted throughout the Deflect network. Your relationship with is not disclosed to any third party without explicit consent.


No hidden fees or surcharges, no data reselling and no matter the size of the attack you will never be charged or let down by Deflect.

Why Deflect?


If your website runs on WordPress, we can offer you free and secure hosting with eQPress.


We provide real-time statistics about your traffic and intelligence on DDoS attacks to improve advocacy efforts and expose attackers.

Encrypted connections

You can provision free SSL/TLS certificates for your website using the Deflect control panel.

Human support

Our system operations team works around the clock and can provide support in English, French, Spanish and Russian.

Advanced mitigation

We have built up years of experience and technical expertise to mitigate large and sophisticated attacks on your website.

Control panel

Our multilingual interface makes it easy to sign up and manage your website’s protection on Deflect.

Deflect Labs will provide website operators, journalists and human rights advocates with real-time and historical analytic tools, as well as insight into DDoS attacks and botnets characteristics.


Unique IPs served (past 24 hours)


Unique IPs banned (past 24 hours)

How Deflect works

Deflect receives all traffic bound for your website. Our servers reply with content already in cache or contact your webserver periodically to receive fresh data. Malicious requests are mitigated.

Cached content

Deflect servers store cached copies of your website’s pages.

Hidden origin

Only Deflect needs to know where your website is hosted. The Internet only talks to Deflect servers.

Attack mitigation

Hand-written and machine generated rules, advanced challenges to distinguish bots from humans.

Deflect Stories

Defending a social movement

Deflect has been defending the Black Lives Matter website from digital attacks since 2016. Over a seven-month period in 2016, we recorded more than a hundred separate denial of service incidents against the official Black Lives Matter website. Our analysis shows a variety of technical methods used in attempts to bring down this website and the characterization of these attacks points to a "mob" mentality of malicious attackers jumping on board in response to callouts made on social media and covert channels. Find out more...

Photograph by Benedict Evans

Get protected, stay connected