{
  "schemaVersion": "1.0",
  "dataset": "ddos-vendors",
  "title": "DDoS mitigation vendor capabilities",
  "description": "On-premises DDoS mitigation products on identical fields, in alphabetical order, with \"not publicly documented\" used wherever a value could not be established. A directory, not a ranking.",
  "lastUpdated": "2026-08-15",
  "license": "Free to reuse with attribution to ddosmitigationguide.com; source citations must be preserved.",
  "sources": [
    {
      "id": "a10-defend",
      "title": "A10 Defend — DDoS protection services",
      "publisher": "A10 Networks",
      "url": "https://www.a10networks.com/products/a10-defend/",
      "accessedDate": "2026-08-15",
      "notes": "The Thunder TPS product URL now resolves here, which is the evidence for the current naming."
    },
    {
      "id": "corero-smartwall-one",
      "title": "SmartWall ONE — DDoS protection",
      "publisher": "Corero Network Security",
      "url": "https://www.corero.com/smartwall-one-ddos-protection-innovation/",
      "accessedDate": "2026-08-15"
    },
    {
      "id": "fortinet-fortiddos",
      "title": "FortiDDoS — DDoS protection solution",
      "publisher": "Fortinet",
      "url": "https://www.fortinet.com/products/ddos/fortiddos",
      "accessedDate": "2026-08-15"
    },
    {
      "id": "netscout-aed",
      "title": "Arbor Edge Defense — inline DDoS protection",
      "publisher": "NETSCOUT",
      "url": "https://www.netscout.com/product/arbor-edge-defense",
      "accessedDate": "2026-08-15",
      "notes": "This host returns a 200 \"Request Blocked\" page to default user agents; verified with a browser user agent and a nonsense-path control."
    },
    {
      "id": "radware-defensepro",
      "title": "DefensePro — DDoS protection",
      "publisher": "Radware",
      "url": "https://www.radware.com/products/defensepro/",
      "accessedDate": "2026-08-15",
      "notes": "Served behind a browser check, so its technical detail could not be extracted programmatically."
    }
  ],
  "changelog": [
    {
      "date": "2026-08-15",
      "note": "Initial release: six products on identical fields. Capacity deliberately excluded as a comparative column."
    }
  ],
  "rowCount": 6,
  "data": [
    {
      "vendor": "A10 Networks",
      "product": "A10 Defend (formerly Thunder TPS)",
      "manufacturer": "A10 Networks",
      "category": "on-premises appliance",
      "deployment": "out-of-path with BGP and flow integration; inline modes not publicly documented",
      "l3l4": "documented design centre, with DNS protection",
      "l7": "not publicly documented",
      "multiTenancy": "not publicly documented",
      "ownScrubbingCloud": "not publicly documented",
      "publishedCapacity": "model-specific; not reproduced here",
      "managementDependency": "separate management component at scale",
      "profile": "/vendors/a10-thunder-tps/",
      "officialDocs": "https://www.a10networks.com/products/a10-defend/",
      "lastVerified": "2026-08-15"
    },
    {
      "vendor": "Corero Network Security",
      "product": "SmartWall ONE",
      "manufacturer": "Corero Network Security",
      "category": "on-premises appliance; enforcement in existing routing hardware",
      "deployment": "inline, automatic mitigation",
      "l3l4": "documented design centre, sub-second automatic action",
      "l7": "narrower than full-stack competitors by the manufacturer’s own positioning",
      "multiTenancy": "not publicly documented",
      "ownScrubbingCloud": "not publicly documented",
      "publishedCapacity": "model-specific; not reproduced here",
      "managementDependency": "not publicly documented",
      "profile": "/vendors/corero-smartwall/",
      "officialDocs": "https://www.corero.com/smartwall-one-ddos-protection-innovation/",
      "lastVerified": "2026-08-15"
    },
    {
      "vendor": "Fortinet",
      "product": "FortiDDoS",
      "manufacturer": "Fortinet",
      "category": "on-premises appliance",
      "deployment": "inline; other modes not publicly documented",
      "l3l4": "hardware-accelerated inspection on custom processors",
      "l7": "in scope; depth relative to purpose-built designs not publicly documented",
      "multiTenancy": "not publicly documented",
      "ownScrubbingCloud": "not publicly documented",
      "publishedCapacity": "model-specific; not reproduced here",
      "managementDependency": "shared management across the vendor’s own portfolio",
      "profile": "/vendors/fortinet-fortiddos/",
      "officialDocs": "https://www.fortinet.com/products/ddos/fortiddos",
      "lastVerified": "2026-08-15"
    },
    {
      "vendor": "HARPP",
      "product": "HARPP DDoS Mitigator",
      "manufacturer": "Labris Networks",
      "category": "on-premises appliance",
      "deployment": "inline",
      "l3l4": "covered in the same unit as L7 (vendor-stated)",
      "l7": "covered in the same unit as L3/L4 (vendor-stated); depth not publicly documented",
      "multiTenancy": "per-customer protection profiles on shared hardware (vendor-stated)",
      "ownScrubbingCloud": "no (vendor-stated)",
      "publishedCapacity": "200 Gbps / 80–90 Mpps, vendor-stated, not independently tested",
      "managementDependency": "no vendor intelligence cloud dependency for classification (vendor-stated)",
      "profile": "/vendors/harpp-ddos-mitigator/",
      "officialDocs": "documentation read for the profile but not yet published; no link exists to give",
      "lastVerified": "2026-08-15"
    },
    {
      "vendor": "NETSCOUT",
      "product": "Arbor Edge Defense (AED)",
      "manufacturer": "NETSCOUT",
      "category": "on-premises appliance, edge component of a wider portfolio",
      "deployment": "inline at the network edge, stateless",
      "l3l4": "documented design centre, informed by vendor threat intelligence",
      "l7": "fuller analytics involve the wider ecosystem rather than the edge appliance",
      "multiTenancy": "not publicly documented",
      "ownScrubbingCloud": "yes, through the wider portfolio rather than the edge appliance",
      "publishedCapacity": "model-specific; not reproduced here",
      "managementDependency": "threat-intelligence feed delivered from outside the customer network",
      "profile": "/vendors/netscout-arbor-edge-defense/",
      "officialDocs": "https://www.netscout.com/product/arbor-edge-defense",
      "lastVerified": "2026-08-15"
    },
    {
      "vendor": "Radware",
      "product": "DefensePro",
      "manufacturer": "Radware",
      "category": "on-premises appliance",
      "deployment": "inline; out-of-path modes not publicly documented",
      "l3l4": "covered, with behavioural detection and real-time signature generation",
      "l7": "covered including encrypted traffic; implies termination and key handling",
      "multiTenancy": "not publicly documented",
      "ownScrubbingCloud": "yes — vendor operates its own cloud DDoS service",
      "publishedCapacity": "model-specific; not reproduced here",
      "managementDependency": "single-vendor hybrid available; behaviour without the cloud tier not publicly documented",
      "profile": "/vendors/radware-defensepro/",
      "officialDocs": "https://www.radware.com/products/defensepro/",
      "lastVerified": "2026-08-15"
    }
  ]
}