ALT-13 · Paid platform · B2B edge platform

Skytropic

The network as a circulatory system.

The lab's paid edge platform: CDN, WAF, DDoS protection, Zero Trust access and encryption in one product instead of five vendors — open cryptography, European standards, no lock-in. Plans from $20 a month.

points of presence live — 14 in Europe, 5 in Asia
19
a month for the entry plan
$20
edge services, one console
5

The problem

A modern service needs a CDN, a web application firewall, DDoS protection, Zero Trust access and encryption — usually from several vendors, with several consoles, several bills and cryptography nobody outside the vendor can inspect.

01 How it works

Every request takes the shortest way home.

One edge. Traffic reaches the nearest of 19 points of presence in Europe and Asia, where it is cached, filtered and authenticated; only what your origin actually needs travels on, through a sealed tunnel. The cryptography is open and standard, and the keys can be yours, so there is nothing to be locked into.

  1. 01 The internet

    Visitors

    people · bots · attacks

    Everything that reaches your service — customers, crawlers and attacks alike — arrives at the edge first, never at your servers directly.

  2. 02 Skytropic edge

    Nearest PoP

    TLS 1.3 · HTTP/3 · cache

    The closest point of presence terminates TLS 1.3 over HTTP/2 or HTTP/3 and serves what can be cached, so most requests are answered without touching your origin.

  3. 03 Skytropic edge

    Filter & access

    WAF · DDoS · Zero Trust

    Requests are checked against the OWASP rules and your own; floods are absorbed across the anycast network; private applications are reached by identity, not by network location.

  4. 04 In transit

    Sealed tunnel

    WireGuard · mTLS

    What must reach your origin travels through WireGuard and mutual TLS, on AES-256-GCM and ChaCha20-Poly1305 — open primitives, with customer-managed keys if you want them.

  5. 05 Your origin

    Origin

    only what it needs

    Your servers see only clean, necessary traffic — and none of it arrives over the open internet.

02 Capabilities

What it does.

  1. 01

    CDN

    HTTP/2 and HTTP/3, gzip and brotli, cache rules and purge — served from the point of presence nearest each visitor.

  2. 02

    Web application firewall

    OWASP rules, rate limiting and your own expressions, applied at the edge before a request costs your origin anything.

  3. 03

    DDoS protection

    Volumetric floods are absorbed across the anycast network instead of by your infrastructure.

  4. 04

    Zero Trust access

    Internal applications reached by identity — OIDC or SAML — over private WireGuard and mTLS tunnels.

  5. 05

    Encryption

    TLS 1.3 to visitors; AES-256-GCM and ChaCha20-Poly1305 everywhere in between; customer-managed keys.

  6. 06

    One console

    One product, one console, one API and one bill instead of five overlapping vendors.

03 Pricing

Transparent, by design.

Three monthly plans. Every one includes managed TLS, DDoS protection and the full console.

  1. Lite

    For small teams

    $20 / month

    • 3 domains
    • 250 GB traffic
    • 5 custom WAF rules
    • Cache rules & purge
    • Email support
    Choose Lite
  2. Business

    For serious scale

    $100 / month

    • Unlimited domains
    • 10 TB traffic
    • Unlimited WAF rules
    • Zero Trust access
    • 99.99% SLA
    Choose Business

Enterprise — dedicated points of presence, private link, data residency, a 99.999% SLA, invoicing and an NDA.

Talk to the team

Prices in USD, excluding VAT, as published on skytropic.space. Paid in USDT, USDC, BTC or ETH; card, bank transfer or invoicing by arrangement.

04 Open standards

Nothing proprietary to be locked into.

Customer-managed keys, S3-compatible storage and configuration as code: leave whenever you like, with everything.

  • TLS 1.3
  • HTTP/3 · QUIC
  • AES-256-GCM
  • ChaCha20-Poly1305
  • X25519
  • WireGuard
  • mTLS
  • OWASP CRS
  • Anycast
  • DNSSEC
  • GDPR
  • NIS2

05 Roadmap

MVP today. Post-quantum tomorrow.

  1. Phase 1MVPCDN · WAF · DNS · automatic TLS · console
  2. Phase 2GrowthZero Trust · edge compute · API gateway · bot management · images
  3. Phase 3AdvancedPost-quantum cryptography · private link · data residency · AI threat intelligence

06 Specification

The details, and the limits.

Status
Live · MVP
Runs on
Managed edge network — 14 points of presence in Europe, 5 in Asia
Built with
Managed service
License
Commercial
Covers
CDN · WAF · DDoS protection · Zero Trust · encryption
Cryptography
TLS 1.3 · WireGuard · mTLS · AES-256-GCM · ChaCha20-Poly1305
Backbone
Private, through Istanbul, Dubai and Singapore
Plans
From $20 a month · paid in USDT, USDC, BTC or ETH

Known limits

  • An MVP. The public roadmap puts CDN, WAF, DNS, automatic TLS and the console first; edge compute, an API gateway, bot management and image optimisation next; post-quantum cryptography, private links and data residency after that.
  • Points of presence are in Europe and Asia only — 14 and 5 today; India and South-East Asia are next.
  • Plans are paid in cryptocurrency (USDT, USDC, BTC or ETH); card, bank transfer or invoicing only by arrangement.

Skytropic

Put your traffic in motion.

Plans from $20 a month, paid in crypto. Two-factor sign-in, and you can leave any time — with your keys.

Official channels

Anything not listed here, or on this site, does not speak for Skytropic.

Next from the labPhobia WalletA self-custody crypto wallet that never asks who you are.