See every visit. Catch attacks as they start.
Rakshak watches the traffic on your website, spots floods, login attacks, SQL injection and bots, explains each one in plain language, and blocks the bad IP addresses for you.
Built by Firewall Breaker, the cyber security platform for ethical hackers.
- 10:42:16203.0.113.90GET /contact200
- 10:42:14198.51.100.7GET /login?user=admin' OR 1=1--SQL injectionChecking
- 10:42:12192.0.2.15GET /blog/launch-notes200
- 10:42:10198.51.100.61GET /pricing200
- 10:42:08203.0.113.24GET /200
' OR 1=1--SQL injection/wp-adminScanning<script>alert(1)</script>XSS61 requests in 60sTraffic flood/.envScanningsqlmap/1.7Bot activityUNION SELECTSQL injection9 logins in 5 minBrute forcejavascript:XSS/phpmyadminScanningniktoBot activity
From a single visit to a blocked attacker in five steps
Follow one request through Rakshak. It plays on its own, or select any step to look closer.
Step 1 of 5
Your website reports each visit
Add one small script, or a middleware file, to your website. Every page view is passed to Rakshak together with the visitor's IP address, the page and the browser.
Everything you need to keep a website safe
Six tools that work together, in one calm dashboard. Each preview below is a live animation of the real feature.
See each request as it arrives: IP address, page, country and status.
Visitors by country, last 24 hours
- India482
- United States211
- Germany96
- Brazil64
- Unknown9
Recent visits
- 203.0.113.24/pricingjust nowNormal
- 198.51.100.7/login?user=admin' OR…12s agoBlocked
- 192.0.2.15/blog/launch-notes31s agoNormal
- 192.0.2.88/.env48s agoSuspicious
One overview for everything that touches your site
Open the dashboard and you already know how the day is going: who visited, what looks wrong, and what has been blocked.
Security overview
- criticalSQL injection from 198.51.100.72m ago
- highScanning from 192.0.2.889m ago
- mediumBot activity from 198.51.100.12024m ago
- lowUnusual referrer from 203.0.113.611h ago
Live by default. New requests and alerts show up without refreshing the page.
Built for one glance. Four numbers, one chart and the latest alerts, so nothing important hides in a menu.
Every row is clickable. Open an alert to see the request, the IP address and what to do next.
Six kinds of attack, explained without jargon
Pick an attack to see what it is, what it looks like in your traffic, and how Rakshak reacts.
SQL injection attempts
criticalSQL injection is when an attacker types database commands into a normal form or web address, hoping your site will run them. A successful attempt can expose or delete your entire database.
- What Rakshak looks for
- Database commands hidden inside a web address, like ' OR 1=1 or UNION SELECT.
- What happens next
- An alert is raised and the IP address is blocked automatically. You can unblock it in one click.
How to protect yourself
- Always use parameterised queries or an ORM never build SQL by joining strings.
- Validate and constrain every input: expected type, length and allowed characters.
- Give your database user only the permissions the app actually needs.
Connect your website in a few minutes
No servers to run and nothing to install. Rakshak works with any website, from a plain HTML page to a Next.js app.
- 1
Create an account and add your website
Sign in, open Settings and enter your domain. Rakshak gives your site its own ID, a public browser key and a private secret key.
- 2
Paste one snippet
Use the tracking script to record visits and raise alerts, or the server middleware to also block bad IPs.
- 3
Watch the traffic arrive
Open a page on your site and the visit appears on your dashboard within moments.
<script> (function () { try { fetch("https://your-rakshak-app/api/ingest", { method: "POST", keepalive: true, headers: { "Content-Type": "text/plain" }, body: JSON.stringify({ site_id: "YOUR_SITE_ID", key: "YOUR_BROWSER_KEY", url: location.pathname + location.search, referrer: document.referrer }) }); } catch (e) {} })();</script>The script records visits and raises alerts. It holds only a public key and cannot block visitors by itself. Your real ID and secret are shown in Settings after you add a website.
Start free. Upgrade when you need more.
One website is free forever. Pro adds up to 5 websites, PDF reports and the AI assistant for a small monthly fee.
Free
₹0forever
For one small website you want to keep an eye on.
- 1 website
- 7 days of traffic and alert history
- Live attack detection: DDoS, brute force, SQL injection, XSS, scanning, bots
- Automatic blocking of critical attacks
- One-click IP block and unblock
- Alerts, dashboard and CSV export
- AI assistant
- PDF reports
- Multiple websites
Pro
₹299per 30 days
$4 per 30 days if you pay in USD
For teams and owners who run several sites and want reports they can share.
- 5 websites with a website switcher
- 30 days of traffic and alert history
- Live attack detection: DDoS, brute force, SQL injection, XSS, scanning, bots
- Automatic blocking of critical attacks
- One-click IP block and unblock
- Alerts, dashboard and CSV export
- AI assistant (Ask Rakshak)
- Professional PDF reports with charts
- Direct support on Telegram
How payment works. Pro is 30 days per payment and does not renew by itself. Message us on Telegram, pay by UPI (India) or USDT (other countries), send the screenshot and we switch Pro on after verifying it.
Chat on TelegramA security tool has to be secure itself
Your data stays yours
Row-level security in the database means every account can only ever see its own websites.
Only your site can report
Each website has its own keys. Traffic without them is rejected, the browser key can only report a visitor's own IP, and you can regenerate every key in one click.
Rate limits on every public route
The endpoints your site talks to are rate limited, so Rakshak itself cannot be flooded.
Bots kept off the sign-in page
Sign-in is protected by a Cloudflare Turnstile check, so automated password guessing is stopped early.
Made with Firewall Breaker
Rakshak is built by Firewall Breaker, the cyber security platform founded by Alok Thakur, where beginners learn ethical hacking, Kali Linux, OSINT and real-world labs. The people who teach how attacks work also built the tool that spots them.
Questions people ask before they start
Still not sure? Message Firewall Breaker on Instagram or join the WhatsApp community.
Put your website under watch today
Create an account, add your domain and paste one snippet. The next attacker who visits will not go unnoticed.