ALT-13 · Paid platform · B2B edge platform
Skytropic
The network as a circulatory system.
The lab's paid edge platform: CDN, WAF, DDoS protection, Zero Trust access and encryption in one product instead of five vendors — open cryptography, European standards, no lock-in. Plans from $20 a month.
- points of presence live — 14 in Europe, 5 in Asia
- 19
- a month for the entry plan
- $20
- edge services, one console
- 5
The problem
A modern service needs a CDN, a web application firewall, DDoS protection, Zero Trust access and encryption — usually from several vendors, with several consoles, several bills and cryptography nobody outside the vendor can inspect.
01 How it works
Every request takes the shortest way home.
One edge. Traffic reaches the nearest of 19 points of presence in Europe and Asia, where it is cached, filtered and authenticated; only what your origin actually needs travels on, through a sealed tunnel. The cryptography is open and standard, and the keys can be yours, so there is nothing to be locked into.
Visitors
people · bots · attacks
Everything that reaches your service — customers, crawlers and attacks alike — arrives at the edge first, never at your servers directly.
Nearest PoP
TLS 1.3 · HTTP/3 · cache
The closest point of presence terminates TLS 1.3 over HTTP/2 or HTTP/3 and serves what can be cached, so most requests are answered without touching your origin.
Filter & access
WAF · DDoS · Zero Trust
Requests are checked against the OWASP rules and your own; floods are absorbed across the anycast network; private applications are reached by identity, not by network location.
Sealed tunnel
WireGuard · mTLS
What must reach your origin travels through WireGuard and mutual TLS, on AES-256-GCM and ChaCha20-Poly1305 — open primitives, with customer-managed keys if you want them.
Origin
only what it needs
Your servers see only clean, necessary traffic — and none of it arrives over the open internet.
02 Capabilities
What it does.
- 01
CDN
HTTP/2 and HTTP/3, gzip and brotli, cache rules and purge — served from the point of presence nearest each visitor.
- 02
Web application firewall
OWASP rules, rate limiting and your own expressions, applied at the edge before a request costs your origin anything.
- 03
DDoS protection
Volumetric floods are absorbed across the anycast network instead of by your infrastructure.
- 04
Zero Trust access
Internal applications reached by identity — OIDC or SAML — over private WireGuard and mTLS tunnels.
- 05
Encryption
TLS 1.3 to visitors; AES-256-GCM and ChaCha20-Poly1305 everywhere in between; customer-managed keys.
- 06
One console
One product, one console, one API and one bill instead of five overlapping vendors.
03 Pricing
Transparent, by design.
Three monthly plans. Every one includes managed TLS, DDoS protection and the full console.
Lite
For small teams
$20 / month
- 3 domains
- 250 GB traffic
- 5 custom WAF rules
- Cache rules & purge
- Email support
Pro
For growing products
$60 / month
- 25 domains
- 1 TB traffic
- 50 WAF rules · bot rules
- Real-time analytics
- Priority support
Business
For serious scale
$100 / month
- Unlimited domains
- 10 TB traffic
- Unlimited WAF rules
- Zero Trust access
- 99.99% SLA
Enterprise — dedicated points of presence, private link, data residency, a 99.999% SLA, invoicing and an NDA.
Talk to the teamPrices in USD, excluding VAT, as published on skytropic.space. Paid in USDT, USDC, BTC or ETH; card, bank transfer or invoicing by arrangement.
04 Open standards
Nothing proprietary to be locked into.
Customer-managed keys, S3-compatible storage and configuration as code: leave whenever you like, with everything.
- TLS 1.3
- HTTP/3 · QUIC
- AES-256-GCM
- ChaCha20-Poly1305
- X25519
- WireGuard
- mTLS
- OWASP CRS
- Anycast
- DNSSEC
- GDPR
- NIS2
05 Roadmap
MVP today. Post-quantum tomorrow.
- Phase 1MVPCDN · WAF · DNS · automatic TLS · console
- Phase 2GrowthZero Trust · edge compute · API gateway · bot management · images
- Phase 3AdvancedPost-quantum cryptography · private link · data residency · AI threat intelligence
06 Specification
The details, and the limits.
- Status
- Live · MVP
- Runs on
- Managed edge network — 14 points of presence in Europe, 5 in Asia
- Built with
- Managed service
- License
- Commercial
- Covers
- CDN · WAF · DDoS protection · Zero Trust · encryption
- Cryptography
- TLS 1.3 · WireGuard · mTLS · AES-256-GCM · ChaCha20-Poly1305
- Backbone
- Private, through Istanbul, Dubai and Singapore
- Plans
- From $20 a month · paid in USDT, USDC, BTC or ETH
Known limits
- An MVP. The public roadmap puts CDN, WAF, DNS, automatic TLS and the console first; edge compute, an API gateway, bot management and image optimisation next; post-quantum cryptography, private links and data residency after that.
- Points of presence are in Europe and Asia only — 14 and 5 today; India and South-East Asia are next.
- Plans are paid in cryptocurrency (USDT, USDC, BTC or ETH); card, bank transfer or invoicing only by arrangement.
Skytropic
Put your traffic in motion.
Plans from $20 a month, paid in crypto. Two-factor sign-in, and you can leave any time — with your keys.
Official channels
Anything not listed here, or on this site, does not speak for Skytropic.