Cybersecurity software · Hong Kong

Keep services online under DDoS attack.

NetIO develops proprietary software for DDoS mitigation and web-application protection — engineered in-house, hardware-independent, and built to run on standard Linux servers.

L3–L7Full-stack filtering
24/7Expert support
On-prem
or cloud
Your choice of deployment
Traffic protected
Packet-level filteringLayers 3–5 · volumetric & protocol attacks
Application-level filteringHTTP/HTTPS · WAF · bot mitigation
Management subsystemWeb UI · documented API · reporting
The Platform

A modular protection platform

The NetIO software is delivered as installable packages for industry-standard server hardware running supported Linux distributions — no proprietary appliance required, lowering total cost of ownership.

Packet-level filtering

Analyses and filters incoming Internet traffic at OSI layers 3 to 5 to mitigate volumetric and protocol-based DDoS attacks before they reach your infrastructure.

Application-level filtering

Inspects HTTP and HTTPS traffic to detect and block application-layer attacks, malicious bot activity and common web-application threats.

Management subsystem

Unified administration through a web interface and a documented API — configuration, monitoring, reporting and integration with your own operational systems.

Technology

How NetIO stops an attack

Incoming traffic is analysed and filtered in real time: malicious packets and requests are dropped, while legitimate users reach your services with minimal added latency.

Mixed traffic Clean traffic Incoming traffic users · bots · attacks NetIO filtering Packet filtering · L3–L4 App filtering · L7 / WAF Bot mitigation Malicious traffic dropped Your origin protected
Legitimate / clean traffic Malicious traffic
1

Ingest

Traffic is processed inline on your own servers, or rerouted to NetIO filtering nodes via BGP announcement and GRE tunnelling.

2

Analyse

Per-resource baselines, statistical and behavioural models, and signature heuristics classify every flow in real time.

3

Mitigate

Floods, malformed packets and abusive requests are dropped or challenged; rate limits and WAF rules are applied surgically.

4

Deliver

Clean traffic is forwarded to your origin over the same path, keeping latency low and legitimate connections intact.

Volumetric mitigation · L3–L4

Filters high-bandwidth floods — SYN, UDP, ICMP, DNS/NTP amplification, reflection and fragmentation — before they saturate your uplinks.

Protocol & state-exhaustion defence

Protects firewalls, load balancers and servers from connection-table and resource-exhaustion attacks such as SYN, ACK and TCP state floods.

Application-layer protection · L7

Detects and blocks HTTP/HTTPS floods and slow-rate attacks, with an integrated WAF for OWASP-class web-application threats.

Bot mitigation

Separates real users from automated clients using challenge-response, JavaScript validation and TLS/HTTP fingerprinting.

Behavioural detection

Learns normal traffic patterns per resource and flags anomalies automatically — adaptive thresholds keep false positives low without manual tuning.

Flexible deployment

Run inline on premises or divert traffic to NetIO nodes via BGP/GRE — switch between models without re-architecting your network.

Attack coverage

SYN flood UDP flood ICMP flood DNS amplification NTP / SSDP / Memcached reflection IP fragmentation TCP state exhaustion (ACK / RST) Connection floods HTTP / HTTPS flood Slowloris & slow-rate SSL/TLS exhaustion DNS query flood Layer-7 bot attacks Scraping & application abuse
Commodity hardwareStandard x86-64 servers
Supported LinuxNo proprietary appliance
REST API & metricsSIEM-friendly logging
Filtering nodesHong Kong · Singapore · Frankfurt · Amsterdam
Engagement models

How we deliver protection

Choose the model that fits your operation — own the software on your infrastructure, add expert services, or let NetIO run it for you.

Primary channel

Software licensing

Deploy NetIO on premises or within your own network and retain full control of your traffic and data.

  • Term licences — 12, 24 or 36 months
  • Perpetual licences with annual maintenance
  • Transparent, published pricing
  • For ISPs, hosting & cloud providers, data centres and enterprises
Alongside the software

Professional services

Hands-on help from engineers with real operational experience.

  • Deployment & configuration
  • Integration with existing infrastructure
  • Training for your technical team
  • Time-and-materials or fixed-fee engagements
Managed service

Cloud-based protection

The same software, operated by NetIO on a network of filtering nodes — protection as a subscription.

  • Subscription, no infrastructure to run
  • Ideal for SMBs and e-commerce
  • Filtering nodes in major data centres
  • Self-service onboarding
Why NetIO

Engineering-led, fair, and in your control

Developed in-house

Proprietary software built by our own engineers, enabling rapid adaptation to new attack vectors and responsiveness to your requirements.

Hardware-independent

Runs on standard commodity servers and supported Linux distributions — no proprietary appliance, materially lower total cost of ownership.

Transparent pricing

Pricing is published and calibrated to protected traffic and resources — no opaque success fees or per-attack surcharges.

24/7 expert support

Round-the-clock technical support staffed by engineers with practical, hands-on operational experience.

Who we serve

An internationally available technology vendor

Focused on the segments that established global vendors systematically under-serve — across three priority regions.

Asia-Pacific

Hong Kong, Singapore, India, Indonesia, the Philippines, Vietnam, Malaysia

Middle East

United Arab Emirates, Saudi Arabia, Qatar, Bahrain

Europe

Germany, the Netherlands, the UK, France, Poland, Bulgaria, the Czech Republic and other EU states

Internet service providers Hosting & cloud providers Data-centre operators Telecommunications operators Enterprises E-commerce & SaaS Online media platforms
Get in touch

Contact NetIO

Reach our team to discuss licensing, a technical evaluation, or the managed service.

NetIO Limited

Registered office
Room 5003, 5/F, Yau Lee Centre,
45 Hoi Yuen Road, Kwun Tong,
Kowloon, Hong Kong

How can we help?

Sales enquiries, technical evaluations and support are handled by dedicated teams.