Website security platform

See every visit.
Catch attacks as
they start.

Monitor visitors, detect suspicious activity, and automatically block malicious IPs like SQL injection, XSS, brute force, bots and more before they reach your application.

No setup hassleWorks with any websiteFree to get started

Rakshak is built by Firewall Breaker, the cyber security platform for ethical hackers the Rakshak Firewall Breaker security suite.

Threats
Detected
Malicious IPs
Blocked
Real-time
Monitoring
Automatic
Protection
Instant
Alerts
Works with
Any Website
Free tool · No sign-up

Check Your Website Security for Free

Check HTTPS, certificate status, security headers and security.txt. Get a score out of 100 with clear steps to improve your website's security configuration.

This checks homepage configuration; it is not a complete vulnerability assessment and does not guarantee a website is secure.

  • ' OR 1=1--SQL injection
  • /wp-adminScanning
  • <script>alert(1)</script>XSS
  • 61 requests in 60sTraffic flood
  • /.envScanning
  • sqlmap/1.7Bot activity
  • UNION SELECTSQL injection
  • 9 logins in 5 minBrute force
  • javascript:XSS
  • /phpmyadminScanning
  • niktoBot activity

From a single visit to a blocked attacker in five steps

Follow one request through Rakshak. It plays on its own, or select any step to look closer.

Step 1 of 5

Your website reports each visit

Add one small script, or a middleware file, to your website. Every page view is passed to Rakshak together with the visitor's IP address, the page and the browser.

visitor opens /pricing
your site → POST /api/ingest
{ site_id, url: "/pricing", user_agent }
accepted 200

Everything you need to keep a website safe

Six tools that work together, in one calm dashboard. Each preview below is a live animation of the real feature.

See each request as it arrives: IP address, page, country and status.

Live visitor monitoring Live

Visitors by country, last 24 hours

  • India482
  • United States211
  • Germany96
  • Brazil64
  • Unknown9

Recent visits

  • 203.0.113.24/pricingNormal
  • 198.51.100.7/login?user=admin' OR…Blocked
  • 192.0.2.15/blog/launch-notesNormal
  • 192.0.2.88/.envSuspicious

Watch the full tutorial

See the complete Rakshak Firewall workflow before you get started.

One overview for everything that touches your site

Open the dashboard and you already know how the day is going: who visited, what looks wrong, and what has been blocked.

rakshak / dashboardSample data

Security overview

Visitors today
0
Active threats
0
IPs blocked
0
Alerts this week
0
Requests, last 24 hours
Recent alerts
  • criticalSQL injection from 198.51.100.7
  • highScanning from 192.0.2.88
  • mediumBot activity from 198.51.100.120
  • lowUnusual referrer from 203.0.113.61

Live by default. New requests and alerts show up without refreshing the page.

Built for one glance. Four numbers, one chart and the latest alerts, so nothing important hides in a menu.

Every row is clickable. Open an alert to see the request, the IP address and what to do next.

Six kinds of attack, explained without jargon

Pick an attack to see what it is, what it looks like in your traffic, and how Rakshak reacts.

SQL injection attempts

critical

SQL injection is when an attacker types database commands into a normal form or web address, hoping your site will run them. A successful attempt can expose or delete your entire database.

What it looks like in your log
What Rakshak looks for
Database commands hidden inside a web address, like ' OR 1=1 or UNION SELECT.
What happens next
An alert is raised and the IP address is blocked automatically. You can unblock it in one click.

How to protect yourself

  • Always use parameterised queries or an ORM never build SQL by joining strings.
  • Validate and constrain every input: expected type, length and allowed characters.
  • Give your database user only the permissions the app actually needs.
Open the full checklist and live incident log

Connect your website in a few minutes

No servers to run and nothing to install. Rakshak works with any website, from plain HTML to modern frameworks. Use the server middleware when you need IP blocking.

  1. 1

    Create an account and add your website

    Sign in, open Settings and enter your domain. Rakshak gives your site its own ID, a public browser key and a private secret key.

  2. 2

    Paste one snippet

    Use the tracking script to record visits and raise alerts, or the server middleware to also block bad IPs.

  3. 3

    Watch the traffic arrive

    Open a page on your site and the visit appears on your dashboard within moments.

<script>
(function () {
try {
fetch("https://www.rakshakfirewall.com/api/ingest", {
method: "POST",
keepalive: true,
headers: { "Content-Type": "text/plain" },
body: JSON.stringify({
site_id: "YOUR_SITE_ID",
key: "YOUR_BROWSER_KEY",
url: location.pathname + location.search,
referrer: document.referrer
})
});
} catch {
// Never break the customer site if logging is unavailable.
}
})();
</script>

The script records visits and raises alerts. It holds only a public key and cannot block visitors by itself. Your real ID and secret are shown in Settings after you add a website.

Start free. Upgrade when you need more.

One website is free forever. Pro adds up to 5 websites, PDF reports and the Rakshak Agent with flexible plan periods.

Free

₹0forever

For one small website you want to keep an eye on.

  • 1 website
  • 7 days of traffic and alert history
  • Live attack detection: DDoS, brute force, SQL injection, XSS, scanning, bots
  • Automatic blocking of critical attacks
  • One-click IP block and unblock
  • Alerts, dashboard and CSV export
  • Rakshak Agent
  • PDF reports
  • Multiple websites

Pro

Recommended

₹149per 30 days

Works out to ₹149/month · $2 per 30 days if you pay in USD

For teams and owners who run several sites and want reports they can share.

  • 5 websites with a website switcher
  • 30 days of traffic and alert history
  • Live attack detection: DDoS, brute force, SQL injection, XSS, scanning, bots
  • Automatic blocking of critical attacks
  • One-click IP block and unblock
  • Alerts, dashboard and CSV export
  • Rakshak Agent
  • Professional PDF reports with charts
  • Block traffic by country
  • Telegram alerts (always free to use)
  • Custom blocked-page message
  • Priority email support

A security tool has to be secure itself

Your data stays yours

Row-level security in the database means every account can only ever see its own websites.

Only your site can report

Each website has its own keys. Traffic without them is rejected, the browser key can only report a visitor's own IP, and you can regenerate every key in one click.

Rate limits on every public route

The endpoints your site talks to are rate limited, so Rakshak itself cannot be flooded.

Bots kept off the sign-in page

Sign-in is protected by a Cloudflare Turnstile check, so automated password guessing is stopped early.

Made with Firewall Breaker

Rakshak is built by Firewall Breaker, the cyber security platform founded by Alok Thakur, where beginners learn ethical hacking, Kali Linux, OSINT and real-world labs. The people who teach how attacks work also built the tool that spots them.

firewall-breaker
firewall-breaker:~$ whoami
Firewall Breaker: Cyber Security Education Platform
firewall-breaker:~$ cat mission.txt
Help beginners learn Ethical Hacking in a practical, hands-on way.
firewall-breaker:~$ ls focus/
ethical-hacking/ security-research/ tool-development/ beginner-labs/
firewall-breaker:~$ echo $MOTTO
Stay Curious. Stay Secure.
firewall-breaker:~$

Questions people ask before they start

Still have a question? Contact the Rakshak team at [email protected].

No. Every alert explains what happened in plain language, and each attack type has a checklist of what to fix. Pro adds the Rakshak Agent, which can answer questions about your dashboard.

Put your website under watch today

Create an account, add your domain and paste one snippet. The next attacker who visits will not go unnoticed.