Brava, Cloudflare, doxx.net and Infoblox

About Cloudflare

Cloudflare sells one platform for apps, agents and workforce. Cloudflare describes one network for workloads and security, close to users and close to data. Cloudflare says security, connectivity and code run in 335+ cities around the world, within 50ms of 95% of the world's population. Cloudflare says DDoS protection, WAF, bot management and Zero Trust controls are built into the network and run on every request from day one. Cloudflare says every site gets the same DDoS mitigation, the same global CDN and the same network at every tier.^[1][11][21]

On DDoS defense, Cloudflare says its DDoS protection absorbs the largest attacks with 500 Tbps of network capacity. Cloudflare Spectrum provides DDoS protection for TCP/UDP applications. Spectrum covers applications built with any protocols, including custom protocols. Magic Transit protects networks, data centers and infrastructure against layer 3 and 4 DDoS attacks. Cloudflare says Anycast absorbs and auto-routes traffic, with mitigations that trigger in seconds and no manual tuning. Cloudflare offers 24/7 email and phone support, including an Under Attack hotline.^[12][13][21]

For application security, Cloudflare says customers can deploy WAF, rate-limiting, mTLS and Bot Management with a single DNS change, with no agents and no appliances. Cloudflare says one API and dashboard covers edge rules, logs and analytics, and integrates with CI/CD for policy-as-code. Cloudflare says schema validation and mTLS protect REST/GraphQL traffic and enforce client identity, with no SDK required. Cloudflare offers free, auto-renewed certificates and modern transport. Cloudflare provides real-time dashboards plus raw logs to R2/S3/SIEM. Cloudflare says it can detect Magecart-style client-side tampering before customers' card data leaks. Cloudflare says its security platform protects 20% of the Internet.^[21]

On bot defense, Cloudflare built a platform to deploy custom machine learning models for every bot management customer. Cloudflare says Super Bot Fight Mode includes bot protection for Pro, Business and all Enterprise customers, and Enterprise Bot Management is the other bot option named.^[22]

For workforce security, Cloudflare says internal apps and developer tools can be protected with identity-based access, device posture checks and single sign-on, with no VPN required. Cloudflare says its Zero Trust platform connects and secures users, devices and data, with the first 50 employees free and a flat per-user rate beyond that.^[11][21]

Cloudflare also serves developers who build applications. Cloudflare says customers can bring any JavaScript framework or build tool, connect a git repository and deploy a project to a single Worker serving both front-end and back-end. Cloudflare supports Next.js, Hono, React Router, TanStack, Remix, Astro, Nuxt and RedwoodJS. Cloudflare says it charges only for compute, not wall time, even during long agent workflows or hibernating WebSockets. RealtimeKit handles WebRTC complexities, connection management and global routing. RealtimeKit Agents supports building voice bots, interactive assistants and automated support systems.^[11][23][24]

Among customers, Shopify powers commerce for millions of merchants and businesses. Shopify uses the Cloudflare WAF, Bot Management, DDoS Protection and Gateway. Cloudflare says the log-only rules in that setup let Shopify preview the impact of security changes before they reach production. Cloudflare works with partners as well: it expanded its worldwide reseller partnership with Rackspace Technology to include managed services offerings. Cloudflare says the Rackspace service includes onboarding support for Cloudflare Managed DNS, Content Delivery Network, Advanced DDoS Protection and Web Application Firewall.^{[11][25][26][27]}

Cloudflare, Inc says its suite of products protects and accelerates any Internet application online without adding hardware, installing software, or changing a line of code. Cloudflare is headquartered in San Francisco, CA, with offices in Austin, TX, Champaign, IL, New York, NY, San Jose, CA, Seattle, WA, Washington, D.C., Toronto, Dubai, Lisbon, London, Munich, Paris, Beijing, Singapore, Sydney and Tokyo. Cloudflare Radar is powered by data from Cloudflare's global network and from aggregated and anonymized data from Cloudflare's 1.1.1.1 public DNS Resolver.^{[1][11][12][13][14][15][16][17][23][27]}

About doxx.net

The doxx.net platform is a parallel internet built on its own DNS root, IP space, encrypted mesh, and agent-driven networking. Infrastructure that runs the doxx.net platform is owned by the company. On the doxx.net network, the IP space, DNS root and hardware belong to doxx.net, and agents configure the network by API. Barrett Lyon, who founded Prolexic, BitGravity, XDN, and Defense.net, is building doxx.net around infrastructure the company owns and operates.

The problem doxx.net describes is that online activity crosses infrastructure people do not control, and that people and agents leave traces. Under the doxx.net model, people and agents share private channels on one network, and P2P Comms connects devices directly. Users of doxx.net can choose what goes through doxx.net and what connects directly.

Agents on doxx.net can set up tunnels, IPs, firewalls, and private channels. Authorized agents manage a doxx.net network through the API and MCP tools. Owners can give an agent a chat identity on doxx.net and choose who the agent can message. The doxx.net network recognizes agents and the owners responsible for their network presence. Owners can revoke an agent’s access on doxx.net if the agent behaves unexpectedly or a compromise is suspected. Encrypted messages and files are exchanged with agents through the doxxGateway API or Model Context Protocol (MCP). People and agents can be brought into conversations across a doxx.net private network.^[6]

Users of doxx.net can call, chat, and share files directly between devices. Chat on doxx.net is end-to-end encrypted, with on-device translation and no provider-held logs. Private calls on doxx.net carry voice filters and no provider-held call records. Video calls on doxx.net are limited to accepted friends, with no provider-held call records. File transfer on doxx.net is double-encrypted and forward-secret, device to device. Users can talk to their agents privately, on their own devices.

DNS lookups on doxx.net are encrypted between a device and doxx.net’s resolvers using HTTPS or TLS. Known malicious, advertising and tracking domains are blocked on doxx.net with rules for each tunnel. Curated blocklists for malware, ads, and trackers filter unwanted domains. Users can see blocked activity, its threat category, and why each request was blocked. The doxx.net DNS service helps keep apps on the chosen DNS resolver on supported connections. The doxx.net DNS service helps prevent DNS requests from bypassing chosen connection settings. The doxx.net public DNS resolver can be used without connecting to a tunnel.

Identifying browser details in supported web traffic can be masked to reduce fingerprint-based tracking. Browser signals can be masked so that different sites see different identities. Traffic can be routed through separate entry and exit relays on doxx.net’s network. HTTPS or WebSocket tunneling helps an encrypted connection pass through restrictive network filters. Tunnel traffic can be disguised as the kinds of traffic a network expects to see. Traffic is stopped from leaving a device when the tunnel connection drops. Traffic can be split so that it leaves through several exit locations at once.^[9]

Services on selected devices can be reached without exposing them to the public internet. Services are reached by name using a .doxx domain or a domain the user already owns. Services can be given memorable names under domains such as .doxx and .x. An existing domain can be imported and verified with a DNS TXT record. Certificates issued on doxx.net let devices verify the identity of private services. Connection status, traffic and blocked DNS lookups can be checked to troubleshoot access and filtering. IPv6-enabled services are reached through doxx.net while IPv4 connectivity is retained for other services. Incoming internet connections can be allowed to selected services on a user’s devices, such as a web server. A dedicated IPv4 address is reserved for one user rather than shared with other users. Connection settings are adjusted by doxx.net as network conditions change.^[11]

On the Free plan, 3 devices connect on a private network, with calls, messaging, and file sharing. Essentials includes 5 devices and 1 AI agent seat, and Pro includes 8 devices and 5 AI agent seats. Each connected phone or computer counts as one device, and each AI agent or gateway counts separately. Essentials costs $60/year and Pro costs $160/year. A dedicated IPv4 address can be added to Essentials or Pro for $10/month or $100/year.^[6][9]

About Infoblox

Infoblox supplies networking and security offerings designed to improve performance and protection for organizations. The company presents itself as uniting networking and security functions in a single set of solutions.^[1]