MASSECURE

Documentation

Everything you need to deploy and manage enterprise web security.

Quick Start

1

Create an Account

Sign up at massecure.net/register — free plan available.
2

Add Your Domain

Dashboard → Sites → Add New Site → Enter your domain and origin IP.
3

Update DNS Records

Change your domain's NS records to:
  ns1.massecure.net
  ns2.massecure.net
4

Verify & Configure

DNS propagation takes 5-30 minutes.
Once verified, WAF protection activates automatically.

Getting Started

Quick Start Guide
Get your first site protected in under 5 minutes.
Account Setup
Create your account and configure your organization.
Adding Your First Site
Add a domain and configure DNS records.
Dashboard Overview
Navigate the MASSECURE dashboard.

WAF Configuration

WAF Rule Sets
Understand and configure OWASP, custom, and managed rules.
Custom Rules
Write custom WAF rules with our expression language.
Sensitivity Levels
Configure detection sensitivity per rule category.
Allowlists & Blocklists
Manage IP allowlists, blocklists, and bypass rules.

DDoS Protection

Protection Tiers
L3/L4/L7 protection and what each tier covers.
Rate Limiting
Configure rate limits per endpoint and per IP.
Challenge Mode
JavaScript challenges and CAPTCHA integration.
Under Attack Mode
Emergency mode for active DDoS attacks.

Bot Management

Bot Detection
How MASSECURE identifies bots using behavioral analysis.
TLS Fingerprinting
JA3/JA4 fingerprint matching for bot identification.
Crawler Management
Allow search engines while blocking scrapers.
Bot Score API
Access bot scores programmatically via API.

API Reference

Authentication
API key authentication and token management.
Sites API
Create, read, update, and delete protected sites.
Events API
Query WAF events, blocks, and analytics data.
Rules API
Manage WAF rules and configurations programmatically.

Analytics & Monitoring

Dashboard Metrics
Understanding traffic, threat, and performance metrics.
Event Logs
Detailed event logs with filtering and search.
Alerts & Webhooks
Configure real-time alerts via email or webhook.
Data Export
Export analytics data in CSV or JSON format.

API Quick Reference

Authentication

All API requests require an API key passed in the Authorization header.

curl -X GET https://api.massecure.net/v1/sites \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -H "Content-Type: application/json"

List Protected Sites

GET /v1/sites

Response:
{
  "sites": [
    {
      "id": "site_abc123",
      "domain": "example.com",
      "origin": "203.0.113.10",
      "status": "active",
      "threats_blocked_24h": 1432
    }
  ]
}

Get WAF Events

GET /v1/sites/{site_id}/events?limit=50&severity=high

Response:
{
  "events": [
    {
      "id": "evt_xyz789",
      "timestamp": "2026-03-02T12:00:00Z",
      "type": "SQL_INJECTION",
      "severity": "high",
      "source_ip": "198.51.100.42",
      "action": "BLOCK",
      "path": "/api/users?id=1' OR '1'='1"
    }
  ]
}

Need Help?

Our security engineers are available 24/7 for Enterprise customers.

Get StartedView Plans