Dataset
DDoS mitigation vendor capabilities
On-premises DDoS mitigation products on identical fields, in alphabetical order, with "not publicly documented" used wherever a value could not be established. A directory, not a ranking.
- Rows
- 6
- Last updated
- 2026-08-15
- Schema version
- 1.0
Alphabetical, not ranked. Capacity is deliberately absent as a comparative column: the published figures are not measured under a common method, so placing them side by side would imply a comparison nobody made.
DDoS mitigation vendor capabilities
| Vendor | Product | Manufacturer | Category | Deployment | L3/L4 coverage | L7 coverage | Multi-tenancy | Own scrubbing cloud | Published capacity | Management / cloud dependency | Profile | Official documentation | Last verified |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| A10 Networks | A10 Defend (formerly Thunder TPS) | A10 Networks | on-premises appliance | out-of-path with BGP and flow integration; inline modes not publicly documented | documented design centre, with DNS protection | not publicly documented | not publicly documented | not publicly documented | model-specific; not reproduced here | separate management component at scale | /vendors/a10-thunder-tps/ | a10networks.com/products/a10-defend | 2026-08-15 |
| Corero Network Security | SmartWall ONE | Corero Network Security | on-premises appliance; enforcement in existing routing hardware | inline, automatic mitigation | documented design centre, sub-second automatic action | narrower than full-stack competitors by the manufacturer’s own positioning | not publicly documented | not publicly documented | model-specific; not reproduced here | not publicly documented | /vendors/corero-smartwall/ | corero.com/smartwall-one-ddos-protection-innovation | 2026-08-15 |
| Fortinet | FortiDDoS | Fortinet | on-premises appliance | inline; other modes not publicly documented | hardware-accelerated inspection on custom processors | in scope; depth relative to purpose-built designs not publicly documented | not publicly documented | not publicly documented | model-specific; not reproduced here | shared management across the vendor’s own portfolio | /vendors/fortinet-fortiddos/ | fortinet.com/products/ddos/fortiddos | 2026-08-15 |
| HARPP | HARPP DDoS Mitigator | Labris Networks | on-premises appliance | inline | covered in the same unit as L7 (vendor-stated) | covered in the same unit as L3/L4 (vendor-stated); depth not publicly documented | per-customer protection profiles on shared hardware (vendor-stated) | no (vendor-stated) | 200 Gbps / 80–90 Mpps, vendor-stated, not independently tested | no vendor intelligence cloud dependency for classification (vendor-stated) | /vendors/harpp-ddos-mitigator/ | documentation read for the profile but not yet published; no link exists to give | 2026-08-15 |
| NETSCOUT | Arbor Edge Defense (AED) | NETSCOUT | on-premises appliance, edge component of a wider portfolio | inline at the network edge, stateless | documented design centre, informed by vendor threat intelligence | fuller analytics involve the wider ecosystem rather than the edge appliance | not publicly documented | yes, through the wider portfolio rather than the edge appliance | model-specific; not reproduced here | threat-intelligence feed delivered from outside the customer network | /vendors/netscout-arbor-edge-defense/ | netscout.com/product/arbor-edge-defense | 2026-08-15 |
| Radware | DefensePro | Radware | on-premises appliance | inline; out-of-path modes not publicly documented | covered, with behavioural detection and real-time signature generation | covered including encrypted traffic; implies termination and key handling | not publicly documented | yes — vendor operates its own cloud DDoS service | model-specific; not reproduced here | single-vendor hybrid available; behaviour without the cloud tier not publicly documented | /vendors/radware-defensepro/ | radware.com/products/defensepro | 2026-08-15 |
Sources
- A10 Defend — DDoS protection services
A10 Networks · accessed 2026-08-15
The Thunder TPS product URL now resolves here, which is the evidence for the current naming.
- SmartWall ONE — DDoS protection
Corero Network Security · accessed 2026-08-15
- FortiDDoS — DDoS protection solution
Fortinet · accessed 2026-08-15
- Arbor Edge Defense — inline DDoS protection
NETSCOUT · accessed 2026-08-15
This host returns a 200 "Request Blocked" page to default user agents; verified with a browser user agent and a nonsense-path control.
- DefensePro — DDoS protection
Radware · accessed 2026-08-15
Served behind a browser check, so its technical detail could not be extracted programmatically.
What changed
- 2026-08-15Initial release: six products on identical fields. Capacity deliberately excluded as a comparative column.
Reuse: Free to reuse with attribution to ddosmitigationguide.com; source citations must be preserved.