Skip to content
ThreatSTOP PlatformDNS DefenseDNS Defense CloudIP DefenseThreatSTOP for AWSIP Defense for AWS WAFDNS Defense for Route 53AWS Network FirewallPricing
HealthcareEducationFor MSPsEnterpriseSMBsCase StudiesWhy ThreatSTOP
Resource LibraryBlogCheck IoCCollateralCommunity EditionFirstSTOPVideoDocumentationAPI Docs
Partner OverviewMarketplaceChannelOEMTechnologyMSP
AboutNews and EventsCareersContact
ThreatSTOP for AWS Blog
Request a trial

Stop attacks before they reach your AWS workloads.

Anything you expose on AWS gets scanned and attacked from day one. ThreatSTOP blocks that traffic for you, automatically, across three enforcement points: AWS WAF, Amazon Route 53, and AWS Network Firewall. Every one of them keeps itself up to date, and all deploy straight from the AWS Marketplace.

Request a trial View on AWS Marketplace

Three enforcement points, all built for AWS.

ThreatSTOP for AWS runs at three enforcement points: AWS WAF, Amazon Route 53, and AWS Network Firewall, which brings ThreatSTOP's IP and DNS protection together in one place. Network Firewall is covered by two separate ThreatSTOP products on the Marketplace.

AWS WAF managed and custom rules
IP Defense for AWS WAF publishes ThreatSTOP managed rules straight into your web application firewall, so known-malicious IP addresses are turned away before they ever reach your application.
View on AWS Marketplace
ThreatSTOP managed and custom rules protecting AWS WAF and CloudFront
Amazon Route 53 DNS filtering
DNS Defense for Route 53 checks DNS resolution against ThreatSTOP intelligence and blocks malicious domains before they resolve, cutting off malware, phishing, and command-and-control at the DNS layer.
View on AWS Marketplace
ThreatSTOP DNS Defense filtering Amazon Route 53 resolution
Network Scanners Protection for Network Firewall by ThreatSTOP
Protects against incoming attacks (scanning, SSH, cracking, brute force attempts, and others).
View on AWS Marketplace
Command and Control Attack Protection for Network Firewall by ThreatSTOP
ThreatSTOP products work together to deny access to known malicious command-and-control infrastructure. By blocking the outbound communications channel that attackers depend on, organizations can disrupt malware operations and reduce the impact of successful compromises.
View on AWS Marketplace
One source of intelligence
All three draw on the same ThreatSTOP intelligence, so your WAF, your DNS layer, and your network firewall enforce against one consistent source.
Automatic updates
All three refresh their own policies as our intelligence changes, with no manual list wrangling.
Reporting
Full reporting on what was blocked and why, across the WAF, the DNS layer, and the network firewall.

How ThreatSTOP works with AWS.

Subscribe in the AWS Marketplace, connect your account, and ThreatSTOP keeps your WAF, Route 53, and Network Firewall policies current as new threats show up. You get full reporting along the way.

INBOUND TRAFFIC CLEAN + MALICIOUS THREATSTOP INTEL 25M+ INDICATORS AWS ENFORCEMENT POINTS THREATSTOP RULES ENFORCED AWS WAF MANAGED RULES CLOUDFRONT + SECURITY GROUPS AMAZON ROUTE 53 DNS FILTERING AWS NETWORK FIREWALL SCANNERS + COMMAND AND CONTROL MALICIOUS TRAFFIC STOPPED BEFORE YOUR WORKLOADS CLEAN TRAFFIC REACHES YOUR APPLICATION INBOUND TRAFFIC CLEAN + MALICIOUS THREATSTOP INTEL 25M+ INDICATORS AWS ENFORCEMENT POINTS THREATSTOP RULES ENFORCED AWS WAF MANAGED RULES CLOUDFRONT + SECURITY GROUPS AMAZON ROUTE 53 DNS FILTERING AWS NETWORK FIREWALL SCANNERS + COMMAND AND CONTROL MALICIOUS TRAFFIC STOPPED BEFORE YOUR WORKLOADS CLEAN TRAFFIC REACHES YOUR APPLICATION
The same ThreatSTOP intelligence feeds all three AWS enforcement points, AWS WAF, Amazon Route 53, and AWS Network Firewall, so malicious traffic is stopped before it reaches your workloads and clean traffic gets through.

Protect your AWS edge with ThreatSTOP.

Add automated threat blocking to AWS WAF, Route 53, and Network Firewall, straight from the AWS Marketplace. Request a trial or talk to an engineer.

Request a trial Talk to an engineer