Skip to content
StartupHyderabad, TelanganaDelivered

APISentry Security Gateway

API Rate Limiting & Edge Threat Shield

Tap to zoom
APISentry Edge Threat Shield Preview
Project Snapshot
Client

APISentry Security Gateway

Industry

Startup

Location

Hyderabad, Telangana

Service Type

API Rate Limiting & Edge Threat Shield

Status

Delivered

Revisions Used

2 Rounds

Stack:RustCloudflare WorkersNext.jsTailwind CSSRedis

The Challenge

Fast-growing fintech and AI startups faced crippling cloud compute bills and DDoS risks caused by aggressive scraper bots and credential-stuffing attacks hitting exposed REST APIs.

Engagement Origin

How We Started

Built in Rust and compiled to WebAssembly for execution directly on edge nodes, terminating malicious requests before they ever touch origin application servers.

Key Requirements

Distributed token-bucket rate limiting configurable by IP, API key, and user ID
OWASP Top 10 automated threat inspection with sub-2 millisecond added latency
Real-time threat telemetry dashboard with live IP ban and rate adjustment toggles
Seamless reverse proxy integration with zero backend code modification required

What We Delivered

Deliverable 1

Rust/Wasm edge threat filter module

Deliverable 2

Founder security telemetry dashboard

Deliverable 3

Automated IP ban and reputation scoring engine

Deliverable 4

Webhook alert dispatcher for security anomalies

Engineering Timeline

1

Wasm Edge Filter in Rust

Authored memory-safe edge inspection filter adding only 1.8ms to request time.

2

Token-Bucket Logic

Implemented sliding-window counter in edge key-value storage for precise quotas.

3

Threat Visualizer

Built dark-mode real-time threat map showing blocked attacks globally.

4

Penetration Stress Testing

Simulated 500,000 bot request bursts with 100% mitigation success.

Refinement & Launch Handover

Client Sign-Off & Knowledge Transfer

Completed in 2 structured revision rounds. What was handed over:

  • Cloudflare Workers global route configuration
  • Admin rate limit policy and threshold tuning handbook
  • Threat response webhook setup guide
Real Production Outcome
  • Over 2.4 million malicious automated scrapers and brute-force attacks blocked per month.
  • Customer origin server compute bills decreased by 42% via edge request shedding.
  • Average overhead added to valid legitimate API requests remained strictly under 1.8ms.