Zyre documentation
How to connect your site, tune protection, and read what it shows you. New here? Start with "How Zyre works" — the rest follows on its own.
Getting started
Compare
WAF or security plugin: what actually separates them
A plugin runs inside your site, a web application firewall runs in front of it. What follows from that difference, and the four cases where a plugin remains the right choice.
7 min
Zyre or Cloudflare: two reverse proxies, two different jobs
Both sit in front of your site, but Cloudflare is first a global delivery network, Zyre a web application firewall tuned to your technology. What separates them, and when Cloudflare is the better choice.
6 min
Understand
What is a web application firewall (WAF)?
A WAF inspects every HTTP request before it reaches your site, and refuses the ones carrying an attack. How it works, what it stops, and what it cannot stop.
6 min
OWASP Top 10 (2025): what a WAF covers, and what it does not
The ten categories of the 2025 OWASP Top 10, one by one, with what a web application firewall such as Zyre can actually do about each. Short answer: a lot for one, partly for five, nothing for four.
7 min
NIS2 and your website: who is in scope, and what a WAF changes
What the NIS2 directive requires, which companies it covers, where the French transposition law stands, and the real place of a web application firewall in a compliance effort.
6 min
Protecting a WordPress site with a web application firewall
The attacks that target WordPress first, what Zyre's WordPress rules block precisely, what they let through on purpose, and the WordPress setting to check before switching over.
6 min
Domain and DNS
Verify your domain
The TXT record proving the domain belongs to you.
3 min
The origin server
Where your site actually lives, and why we ask you to prove it.
6 min
The DNS cutover
The A record to change, and the three traps that cost the most time.
5 min
The www version
A separate address with its own record — and a complete bypass if you forget it.
3 min
Protection
Blocking or observation
The one setting that really matters after the cutover — and the only one that can leave you unprotected.
4 min
False positives
When a legitimate visit is blocked: how to spot it, report it, and what happens next.
4 min
IP lists and exemptions
Allow, ban, and suspend inspection on a specific path.
4 min
Emergency modes
Under attack and lockdown: what they actually do, and why you must switch them back off.
3 min
Monitoring
The threat centre
Read what was refused, find an incident, export — and what we never keep.
4 min
Uptime, certificate and bots
What Zyre watches besides attacks, and how to read each indicator.
3 min
Technologies and known flaws
Stack Lens identifies what runs your site; the watch tracks the flaws that affect it.
3 min