Zyre Logo
Zyre

Your site will be attacked.
Zyre protects it in real time.

Zyre is a web application firewall (WAF) that inspects every request before it reaches your server. It switches on with a single DNS record, no plugin needed, and also watches your known vulnerabilities and your site's uptime.

Protect my siteSee pricing
  • Set up in 10 minutes
  • No commitment
  • Secure payment
  • Threats blocked live, with the rule that fired
  • Site availability, probed every 30 seconds
  • Known vulnerabilities on the detected technologies
Read the film transcript

Online store, WordPress, brochure site: if it's online, it's a target. Bots probe your site day and night. Zyre stops them before they reach your server. It sits in front of your site, and keeps watch around the clock. Every attack is blocked, and you see exactly which one. If your site goes down, you get an alert. A new vulnerability hits your tools? Zyre warns you, in plain English. And for agencies, every client is managed from one place. Ten minutes is all it takes, no technical skills required. Zyre. Your site, protected in real time.

What the firewall inspects, before your server.

Every request is matched against the rule set before it reaches your server. The figures below describe the engine itself, not a traffic volume.

5 600+

active inspection rules

16

technologies covered

30 s

uptime probe interval

< 5 ms

inspection latency added

11,334 new vulnerabilities were found in the WordPress ecosystem in 2025 — one every 46 minutes on average. Source: Patchstack — State of WordPress Security in 2026

The problem

As you read these lines, bots are scanning your site looking for flaws.

The invisible

Most web attacks are automated. They do not target your company specifically: they test everything on the internet, constantly, and your site is hit because it exists.

The real cost

A breach is paid for three times over: the technical clean-up, the data lost, and the delisting of a site flagged as malicious — the longest of the three to repair.

CNIL fine

Up to €20M or 4% of annual revenue

in case of an unsecured personal data leak

The false sense of security

"My host takes care of it." No. Your host protects its infrastructure, not your application. Your WordPress site, your contact form, your store: that's your responsibility.

See how Zyre protects your site→
Features & Solutions

Everything you need.
Nothing superfluous.

Zyre monitors and protects your sites continuously. Instant alerts, WAF active from day one, a clear monthly report.

Web application firewall (WAF)

Every request is analyzed before it reaches your site. SQLi, XSS, path traversal, malicious bots: blocked automatically, no action needed.

Vulnerability detection

Zyre identifies your stack and alerts you the moment a flaw is discovered. Before attackers do.

Real-time cyber intelligence

Our AI agent follows CISA, CERT-FR and NVD publications and delivers the threats relevant to your stack every day, with the CVSS score as published by the NVD.

Availability monitoring

Your site is probed every 30 seconds. An email or Slack alert the moment it goes down. Incident reports with cause and duration.

All your sites, one dashboard

Centralize the security of all your sites (up to 20) in a single console: real-time statuses, team roles and grouped alerts. Built for agencies and multi-site SMBs.

Your profile

Are you an agency or a business?

For SMBs and e-merchants

Protect your site with no technical skills

  • Set up in 10 minutes, automatic configuration
  • Zyre monitors 24/7, you get a clear monthly report
  • Focus on your business, not your infrastructure
  • Responsive support whenever you have questions
Start with the Starter plan
mon-site.frExample
96/ 100
Security score
Protection active 24/7
Threats blocked this month4,891
Next reportSun. 15

Natively integrates with your existing stack.

Don't change your architecture. Zyre sits transparently between your users and your infrastructure, wherever it's hosted.

See all integrations
WordPress
Shopify
Laravel
Next.js
Webflow
Framer
Wix
Django
Symfony
Drupal
ZyreZYRE
Pricing

Simple. Transparent. No surprises.

No hidden fees. No usage-based overcharging. A fixed price, clear features.

Starter

Everything you need to protect your first site.

1 site · 1 member

29€/mo
  • WAF enabled
  • Custom IP rules
  • Threat logs (7 days)
  • Email alerts
  • 72h support
Start with Starter
Most popular

Pro

Full protection for growing teams.

3 sites · 3 members

99€/mo
  • Everything in Starter
  • Lockdown mode & Auto-blacklist
  • CVE read-only
  • Uptime monitoring
  • Reports + CSV export
  • 24h support
Choose Pro

Agency

Centralized multi-site management for agencies and SMBs.

20 sites · 5 members

249€/mo
  • Everything in Pro
  • CVE Feed + AI Scan
  • Advanced intelligence
  • GDPR rights (access & erasure)
  • Audit log (12 months)
  • 12h support
Choose Agency

All plans include guided setup, WAF active from day one and email support.

Enterprise · Unlimited

Power and compliance for critical infrastructures. 1-year logs, white-label, dedicated SLA, 24/7 support.

Talk to an expert

The questions we get asked all the time.

Straight answers, no corporate speak.

No. Our WAF adds less than 5 ms of latency. Your visitors won't notice any difference.

A plugin runs after the request has reached your server. Zyre filters before, at the proxy level, before your site is even touched. It's not comparable.

No. Installation is done by changing your DNS to point to Zyre. 10 minutes, guided step by step depending on your host.

You cancel from your customer area, with no notice period and no penalty. Since your DNS points at Zyre, you repoint it to your own server: its address stays visible in your dashboard, with the steps to follow at your DNS provider. Your site is never cut off in the meantime.

Zyre is hosted in France, GDPR-compliant, and never stores the content of your pages. Only the traffic metadata needed for threat detection.

Against application-layer attacks, yes: every IP address is rate-limited, and "Under attack" mode puts a browser check in front of your site that turns bots away. On the Pro and Agency plans, that mode switches on by itself when a site's traffic clearly exceeds its usual pattern. No web application firewall, however, can absorb an attack that saturates the network link itself: that is the job of the host's network protection.

Partly, and it is worth knowing which part. The firewall blocks what shows up in a request: SQL and command injection, XSS, path traversal, template probes. Threat intelligence flags the vulnerable or outdated components on your site. But badly written access control or a design flaw in your application shows up in no request: no WAF fixes those for you.

The firewall reads every request to inspect it, but keeps almost none of it. Request bodies, cookies and authentication headers are never stored. For a blocked request, we keep the IP address, the targeted path, the rule that fired and the name of the offending field, never its value.

The firewall runs as two instances, and a standby machine in another data centre automatically takes over Zyre's address if the main machine stops responding: under a minute of downtime in our tests. That standby depends neither on our database nor on our dashboard, which can go down without your visitors noticing.

It is a filter placed in front of your site that reads the content of every request — requested address, parameters, form fields — and refuses the ones carrying a known attack: SQL injection, XSS, path traversal, files exposed by mistake. Unlike a network firewall, it does not look at where a request comes from, but at what it contains. How a WAF works →

Both sit in front of your site, but they do different jobs. Cloudflare is first a global delivery network: the right choice for an international audience or against volumetric attacks. Zyre applies rules chosen for your technology, with no tuning and without changing DNS provider, with vulnerability watch and uptime monitoring in the same dashboard. Read the full comparison →

NIS2 mainly targets medium and large companies (as a rule from 50 employees or €10 million turnover) in eighteen sectors, and also reaches their suppliers through the supply chain. A web application firewall contributes to several of the measures it requires, but no product makes a company "compliant" on its own. What NIS2 requires, and where France stands →
Protection available now

Your site will be attacked.
The only question is whether you'll be ready.

Join the companies that chose to stop taking the hit.

Protect my site nowTalk to an expert

Set up in 10 minutes · Cancel anytime · Hosted in France

Zyre LogoZyre

Enterprise-grade SaaS protection for your sites and infrastructure.

Zyre

© 2026 Zyre · All rights reserved