DDactic: automated DDoS resilience testing for security teams that already own a CDN/WAF. Enter your domain → passive attack-surface report in minutes (exposed origin IPs, unprotected subdomains, DDoS vulnerabilities in API endpoints, breach hits). Optional authorized live simulation across 156 attack mechanisms (L3-L7) from a 23+ provider multi-cloud lab fleet. Vendor-specific hardening playbook (Cloudflare, AWS, Imperva, Akamai...) validated by stage-reprobe. Free passive scan, no sign-up.

I built DDactic after 4 years of doing manual DDoS sims. Most companies have a CDN but no way to verify it actually covers their full attack surface — exposed origin IPs, forgotten subdomains, and third-party SDK leaks routinely bypass protection. DDactic automates the discovery → simulation → hardening loop: 1. Free passive recon (no signup): https://ddactic.net/free-scan 2. Optional live simulation across 233 attack mechanisms 3. Vendor-specific hardening playbook validated by stage-reprobe Free tier always-on. Founding Design Partner pricing (90% off, 5 spots) until Apr 30: https://ddactic.net/price-list.html Would love feedback — especially from teams running Cloudflare/Akamai/Imperva who've ever wondered if their config is actually doing what they think it is.

DDactic

Find what your DDoS protection misses

Find what your DDoS protection misses