Sercurius, your web application security service

Sercurius is a free cloud based web application security service. It scans web applications on common security mistakes and provides users advise to improve their webhosting environment. The free Layer 7 DDoS protection with advanced Web Application Firewall will protect your website against all common attacks.


Bullet proof?

No way! The things we do we do good, so all current functionality is working like a charm. But we still have a waiting list of more than 318 major features, so although Sercurius can help already to secure web application and its hosting, of course it does not offer the same bullet proof protection like other solutions which allready for years in the business. Yes, we adding more and more features to make better, but still it will not cover protection against all dangorous things of the internet. We are at start of something beautiful, but there is a long way to go. For now the service it's usefull to get some extra website protection and receive simple secuity advice by email which will help help you to prevent stupid minstakes. And ofcourse, it also will help you to fight most layer 7 DDoS attacks. But i's free, so don't complain but inform us when something is not working like you expected. We will listen, learn and fix the bug or add your missing feature. 


Sercurius started in 2018 as a test case to find out if all functionality of the Serverius Cyber security suite really worked like it should do. One simple question needed to be answered: “Which API calls are missing in client environment. Are there essential parts missing?”. Therefore two Serverius R&D engineers started to work like an average Serverius client who wanted to protect many of its WordPress websites, the most common used CMS system on the planet. During the setup, all missing features where added to the Serverius product line. 
After some programming time the Sercurius project became more and more serious. Although it is not complete security tool, the application became that good that it would be a pity not to use it in for real. Therefore in January 2019 Serverius decided to officially support it and offer it as a free service for everyone. By adding it to the Serverius project group it became technically and financially supported for an indefinite period of time. By this, Serverius contribute to make the internet a little bit better. 

Why offering a free service?

Sercurius is a child of Serverius, a privately owned commecial company which is operating with and without financial profit goals. Yes, they are a commercial company and they make profit for many years but one of their main objectives are to contribute to a better and safer Dutch internet. Therefore they support the development of Sercurius and other non-profit projects like IP Judge and Speed-IX. The only return Serverius will get is experience of the use of its Serverius Cyber security suite Rest API (where Sercurius is fully build with), insights of attacks information what can be used for others and a little bit of publicity.

The technolgy we use

Sercurius is using the Serverius Cyber security suite platform. It's build in 2019 and us running on a scalable datacenter Kubernetes / Docker cluster environment. No commercial or Open Source software or public cloud network/hardware is used, it’s 100% coded by Serverius its own R&D department using Google its programming language GO which allows multiple processes running simultaneously and therefore handles up to billions of concurrent requests per second! This way we can guarantees ultra-low latency web request parsing. Everything is physical hosted on dedicated and private Serverius hardware, no public cloud environments are used. It's hosted on dedicated hardware in the Dutch Datacenters of Serverius and outside the Netherlands allot of other IP networks are used to host our own dedicated hardware (routers, switches, etc). All WAF PoP's are covered with anycast which is fully managed by the Serverius NOC. This way users will always use local continent PoP's which offers also low latency and data regulation law coverage per country. 

Somtimes Serverius engineers give showcases about how they technically did it. Once a while they post (and remove) it on the yourtube channel of Serverius.


Sercurius is just stated. Although the current functionality is working quite well, we understand that it’s technically impossible to offer 100% web application security and that allot new functionality can be added. But still, by using the new Serverius Web Application Firewall version 2.0 beta, more protection, extra crawling and scanning and logging features will be added during this year. In the past months of Q1 and Q2 almost every 2 weeks a new technical feature was added. Registered websites will automatically be be able to use these new features. If you have idea’s, please shoot:

Scan & protect your website today!

Protect your website now, create your account for free!