UnifySSL

UnifySSL is a control plane for teams running many domains across many servers. Adding a domain gets it a certificate that issues and renews automatically with traffic routing handled centrally, so nothing is edited by hand on a server, and a bad change can be rolled back in a click. Every site behind it sits behind an edge firewall that blocks or allows traffic by IP address, network range, network operator or country, rate-limits abusive callers, and can learn the paths a site is meant to serve and treat anything else as suspect.

Beyond certificates and firewalling, UnifySSL manages domain purchase and DNS, provisions edge servers across more than one cloud, migrates a site from one server to another, and adopts an existing domain into the system. Access is role-based and every change writes to an audit log. It is explicit about its limits: it is an edge firewall and rate limiter, not a volumetric DDoS-mitigation service, a deep payload-inspecting WAF, or a CAPTCHA provider. As of the case study it had blocked more than 17 million threats at the edge.