SLY protection is live

Stay sly.
Link freely.

A smooth bio for your audience. Six quiet security layers underneath it. Your destination stays server-side until the request is cleared.

No destination URL in initial HTML · No-referrer redirect
Scheduled
Protected route

Redirect handshake

Edge → Policy → Human check

UA
ASN
GEO
Quick scan
3 client identities
Protection

6×

Independent checks before a redirect can resolve.

Country is evaluated first.

Cloudflare Edge
Bot Identity
Canary event Live

Suspicious execution

Fingerprint recorded. Destination remained server-side.

Vienna edge
42 ms

Built on a serverless edge stack

Product wave 01

Protection first. Creator tools next.

The redirect core and public exposure scanner already work. The builder, analytics workspace, and custom domains are the next product surfaces on top of them.

LIVE NOW

Protected redirects

Server-side destinations, signed five-minute flows, no-referrer responses, Turnstile verification, and transparent automated-access controls.

Creator page studio Coming next

Multiple pages, live mobile and desktop preview, reusable templates, custom colours, cover media, and per-link protection settings.

0 URL
in initial HTML
100%

Human-first analytics Dashboard next

The event model already separates denied, challenged, canary, and allowed traffic. The visual workspace and conversion views come next.

02
// PROTECTED RESOLVE PIPELINE

Six checks before the destination.

Every request is classified, challenged when necessary, and resolved only after the edge policy has passed again.

01

Inspect & classify

Country policy runs first. User agent, Cloudflare bot signals, ASN, and network tier determine whether the request is denied or continues.

02

Challenge & verify

Suspicious but eligible traffic receives a canary signal. Restricted links require a server-validated Turnstile token and signed flow.

03

Resolve & observe

A successful request receives a no-referrer 303 response. Security events are pseudonymised and retained for a limited period.

Redirect Security Schema

The same animated zero-trust flow, mapped to our live redirect pipeline.

Request context

Country, user agent, Cloudflare bot data, ASN, and network ownership are classified at the edge.

Policy decision

Country gate, bot identity, network tier, Canary, and Turnstile decide whether the flow can continue.

Server-side resolve

The destination is loaded from D1 only after verification and returned as a no-referrer redirect.

FLOW: 5M-7F21
country ="AT" shield ="standard"
ALLOWED
sly.bio edge events — live
[edge] Incoming GET /r/creator-main
[geo] Country policy: allowed (AT)
[identity] Browser UA · no crawler match
➜ Checking ASN and network tier... Standard passed
➜ Signing five-minute redirect flow... HMAC verified
[turnstile] Siteverify token accepted
> destination loaded server-side
i Response 303 · referrer-policy: no-referrer
i Security event: redirect_allowed
[privacy] raw IP not stored
➜ Retention cleanup scheduled... 90 days
[edge] Incoming GET /r/creator-main
[geo] Country policy: allowed (AT)
[identity] Browser UA · no crawler match
➜ Checking ASN and network tier... Standard passed
➜ Signing five-minute redirect flow... HMAC verified
[turnstile] Siteverify token accepted
> destination loaded server-side
i Response 303 · referrer-policy: no-referrer
i Security event: redirect_allowed
[privacy] raw IP not stored
➜ Retention cleanup scheduled... 90 days

Built for one link or ten thousand pages.

One Cloudflare Worker serves every creator and direct link. D1 stores page policy and destinations; KV holds short-lived security signals.

  • Multi-page D1 schema and per-page policy
  • Cloudflare Worker, Turnstile, KV, and WAF-ready
  • Custom domains, builder, and visual analytics are next

Simple launch pricing

The layout is ready; billing is not live yet. Early access users will be invited before paid launch.

Early access
$0 /mo

For testing the current protected-redirect core before the creator studio ships.

Protected redirect testing
Turnstile test environment
Product feedback access
Creator
Recommended
€9.99 /mo

Planned launch bundle for creator pages and protected direct links.

Up to 10 creator pages
Six-layer redirect protection
Live preview and analytics
7-day trial at launch
Add-ons
Flexible

More pages, custom domains, and direct-to-destination links as your traffic setup grows.

Extra page bundles
Custom domains
Direct protected links

Ready to protect the first link?

The edge pipeline and public scanner are working now. Help shape the creator studio, analytics, and domain layer that come next.