Why Zyre exists, and the rules it is written by

The problem we set out to move

A security plugin runs inside your site: by the time it acts, the request has already reached your server, your PHP, your database. It defends from inside the room the attacker just walked into. That is useful, but it happens after the fact.

Zyre moves that filtering upstream. Your domain points at our servers, every request is inspected there, and the ones that fail never reach your origin. The practical consequence matters more than the principle: there is nothing to install, nothing to maintain, and the protection works on stacks that have no plugin ecosystem at all.

The rules we hold ourselves to

They are not decorative: each one is verifiable on this site, and each one cost us something.

• No number we cannot show you

  Our home page claimed “127,000 attacks blocked per day” and “4,300 sites protected” before the product had even launched. Those figures were removed, not adjusted: the four that replaced them describe the engine — rule count, technologies covered, probe interval, added latency — and can be recounted inside the product.

• A published score comes from its source, never from us

  The CVSS scores in your intelligence feed are fetched from the NVD by CVE identifier, with the score version and source shown. They are never produced by the model that writes the alert: an invented 9.8 reads exactly like a real one, and it would move your remediation effort onto the wrong vulnerability.

• A block has to be explainable

  Every rule carries an identifier, every blocked request carries an incident identifier, and both show up in your threat centre. Protection you cannot question is not auditable — and you usually find that out at the worst possible moment.

• Our limits are written down, not discovered during an incident

  Our security page lists what Zyre cannot do, in the same place as what it does. A page that only lines up guarantees informs no one, and the customer ends up learning the difference in production.

The publisher

Zyre is a French SaaS service. The application and your data are hosted in Switzerland, with Infomaniak Network SA (Geneva). The publisher's identity, contact details and host are listed in the legal notice, as required by Article 6-III of the French LCEN.