🛡️ Site protection and speed-up

WhiteShield — a shield in front of
your site

I block bots and scrapers, repel attacks and speed up loading with caching. It is installed on your server, and I take care of setting up and updating the protection.

Enable protection How it works Watch the demo.
https://little-white.by/services/shield/
WhiteShield — control panel
WhiteShield — mobile panel
Features

Everything for site protection and speed

Professional-grade protection out of the box — without diving into configs.

🤖

Anti-bot and anti-scraping

I cut off automated scrapers by TLS fingerprint and behavior. Content and prices don’t leak to competitors.

⚔

Attack-protection mode

During a bot surge, a browser check (JS challenge) kicks in. A real visitor passes it unnoticed, a bot does not.

🛡

WAF filtering

I block SQL injections, XSS, vulnerability scanners and web-shell probes before they reach the site.

⚡

Cache and compression acceleration

I cache statics (pictures, CSS, JS, fonts) and compress text responses in gzip or brotli: the volume of HTML, styles and scripts drops 3-4 times during transfer, the load on the server is lower.

🌍

Geo and IP control

Blocking by country, IP and subnet at the core level. I cut off junk traffic and scraper data centers.

🔔

Monitoring and alerts

I monitor availability and load and send notifications to Telegram. You’re the first to hear about a problem — not from your customers.

🔀

Subdirectory proxying

Different subdirectories of a domain go to different backends: /shop/ → one service, /api/ → another. One domain — several applications behind a shared shield.

🔗

Peer servers

I add and remove backup peer servers with no downtime — traffic is balanced and protection scales with growing load.

💎

The version stays with you

Even without an active subscription, the configured protection keeps running on your server — you’re never left without a shield.

Advanced features

Plan extension modules

Included in the Pro plan extension.

📡

Website availability scanner

Website availability monitoring (backend probe), Telegram alerts when a site goes down and a 30-day stability chart for each website.

🔍

Content analyzer

Homepage tampering control (anti-defacement): a snapshot “as a visitor”, comparison with an approved baseline (title/h1/noindex/redirect/external links + anti-malware) and an alert when the content is tampered with.

WhitePanel — free with WhiteShield

A server control panel — free together with protection

WhitePanel is a panel for the sites on your server: sites, databases, files and backups in one browser window. It is installed on the same VPS as WhiteShield — no second server needed.

🌐

PHP and Node.js sites

Each site runs under its own user and in its own process: a problem on one site does not affect the others.

📊

Databases

MariaDB and PostgreSQL: browse tables, edit rows, run SQL, export to CSV, back up and import a database.

📁

Files and SFTP

A file manager with an editor and previous file versions, a trash with restore, and SFTP access for a developer.

💾

Backups

Site files, databases and settings on a schedule. A backup can be downloaded, or the site restored from it.

⏰

Scheduled tasks

Recurring site tasks run on a schedule — no need to edit system files by hand.

🔒

Closed to outsiders

The panel opens only through WhiteShield and only from a device you have linked.

WhitePanel can be installed for free — together with WhiteShield, on one and the same VPS.

Get protection
How it works

Launch in one day

1

You grant access

You provide SSH access to your VDS (or I’ll help you set one up with a hosting provider).

2

I deploy the protection

In 1 day I install and configure a protection layer for your site and enable SSL.

3

I maintain and update

I monitor, update the rules against new threats and respond to attacks. You just get on with your work.

Plan and extension

Pro
from 79.00 BYN2 304.2 RUB27.4 USD23.5 EUR / mo

−10% Renewal: 71.10 BYN2 074 RUB25 USD21.2 EUR

Server protection and maintenance of your websites.

  • Setup and support for up to 10 websites
  • Installation of protection on your server
  • WhitePanel — server control panel, free
  • Proxy + SSL with auto-renewal
  • Static-content caching
  • Geo-blocking, basic WAF
  • Monitoring + Telegram alerts
  • Theme selection
  • Anti-bot / anti-scraping (TLS fingerprint)
  • Attack-protection mode (JS challenge)
  • Manual tuning for your attacks and load
  • Adding and removing peer servers
  • Subfolder Proxy — subdirectories to different backends
  • Support (up to 1000 tokens per month)
Get it
Plan extension
50.00 BYN1 458.4 RUB17.4 USD15 EUR / mo

−10% Renewal: 45.00 BYN1 313 RUB16 USD13.4 EUR

For a server with an active Pro license.

Get it

How support tokens are counted

How many tokens a task will take can’t be said in advance: every website and every task needs a different amount of work — one fix takes minutes, analysing a complex attack takes several hours. That’s why there are no fixed consumption rates.

If the monthly limit runs out, support doesn’t stop: requests are still accepted and handled, just in the general queue — after tasks within the limit.

The server stays yours.

Works in Russia and Belarus

Available and payable where Western services are not

No VPN, with payment by Russian and Belarusian cards and via ERIP.

🌐

Works without a VPN

Stable access from Russia and Belarus — the service doesn’t drop out and requires no workarounds.

💳

Card payments from Russia/Belarus and ERIP

Acceptance of Visa, Mastercard, MIR and BELKART cards via bePaid and WebPay, as well as ERIP. A receipt for every payment.

🔒

Independence from Western services

Your access to work won’t disappear because of blocks or the departure of foreign services.

FAQ

FAQ — WhiteShield

Whose server is used?

Yours. The protection is deployed on your VDS, and I maintain it. You retain full control of your infrastructure at all times.

What if the hosting provider does maintenance or shuts down the server?

The availability of the server itself is your hosting provider’s responsibility. I set up and maintain the protection, and if something fails I will help restore it.

How is this better than Cloudflare?

Cloudflare is a good foundation. On top of it comes fine manual tuning for your specific attacks and scrapers, challenge-level mechanisms and responsive Russian-language support instead of self-service.

Will the protection affect real visitors and SEO?

No. Search bots (Google, Yandex) are whitelisted, and real users pass the checks unnoticed. Only automated scrapers and malicious traffic are blocked.

What do gzip and brotli compression do?

Compression reduces the size of a page in transit: HTML, styles, scripts, JSON and fonts are sent compressed, the browser unpacks them itself, and nothing has to be changed on the site. On text files the saving is usually 70–80%: a set of styles and scripts weighing 200 KB reaches the visitor as about 50 KB.

It shows most on mobile networks and slow connections: the page appears sooner, speed scores are higher and less traffic is used. Brotli is a newer algorithm and compresses text about 15–20% tighter than gzip; browsers that do not support it automatically get gzip. Images and video are not compressed again: these formats already have compression inside. Compression works together with the cache and is switched on when the protection is set up.

Can I opt out and manage it myself?

Yes, everything runs on your server. But protection has to be constantly updated against new threats — most clients leave that to me.

How many sites can be protected?

The Pro plan includes setup and support for up to 10 websites on one of your servers. Need more? Each plan extension adds up to 10 more websites on the same server and 1000 support tokens per month to the shared pool.

How are support tokens counted?

How many tokens a task will take can’t be said in advance: every website and every task needs a different amount of work — one fix takes minutes, analysing a complex attack takes several hours. That’s why there are no fixed consumption rates.

If the monthly limit runs out, support doesn’t stop: requests are still accepted and handled, just in the general queue — after tasks within the limit.

What does the “Website availability scanner” do?

It monitors website availability (backend probe), sends Telegram alerts when a site goes down and builds a 30-day stability chart for each website. The module is included in the Pro plan extension.

What does the “Content analyzer” do?

It watches the homepage for tampering (defacement): it takes a snapshot “as a visitor”, compares it with an approved baseline (title, h1, noindex, redirect, external links + anti-malware) and sends an alert when the content is tampered with. The module is included in the Pro plan extension.

What server (VDS) do I need?

A clean Ubuntu 22.04 or 24.04. Minimum specs — from 1 CPU, 1 GB RAM and 10 GB of disk; for busy sites it’s better to take some headroom. I’ll help you choose a VDS if you don’t have one yet.

Can the panel’s appearance be changed?

Yes, you can specify the theme at installation. Several themes are available to choose from — you can view them in the demo.

WhiteShield and WhitePanel

Website protection and a server control panel on your own VPS

WhiteShield is a protective layer in front of your site: it filters requests, cuts off bots and scrapers, withstands traffic floods and makes pages load faster. WhitePanel is a browser control panel for the same server: sites, databases, files and backups in one window. Both run on your server rather than in someone else’s cloud, so your site and visitor data stay with you.

Website protection

WhiteShield — protection from bots and attacks

WhiteShield sits in front of the site and lets through only the traffic it needs. The request filter (WAF) stops SQL injections, XSS, vulnerability scanners and web-shell probes. Anti-bot recognises scrapers by their TLS fingerprint and behaviour. During a bot flood the under-attack mode turns on a browser check that real visitors pass without noticing.

Google and Yandex crawlers pass through their official networks, so protection does not hurt SEO. Static files are cached and text is compressed with gzip or brotli: pages open faster and the server carries less load. Monitoring watches site availability and sends alerts to Telegram.

  • WAF and vulnerability scanner blocking
  • Anti-bot and anti-scraping
  • Under-attack mode
  • Geo and IP filter
  • Cache and gzip / brotli compression
  • Monitoring and Telegram alerts
WhiteShield features →
Server panel

WhitePanel — a server control panel

WhitePanel is a panel for everyday server work in the browser. It creates PHP or Node.js sites, MariaDB and PostgreSQL databases, scheduled tasks and SFTP users. Files are edited in the built-in editor, and site backups with files and databases run on a schedule and restore in one step.

Each site runs under its own user and in its own process and sees only its own folder. The PHP version is chosen per site. Sign-in to the panel is protected by device binding, and updates arrive as signed releases. WhitePanel is installed free of charge together with WhiteShield on the same VPS.

  • PHP 8.4 / 8.5 and Node.js sites
  • MariaDB, PostgreSQL and Redis
  • Files, editor and SFTP
  • Scheduled tasks
  • Backups and restore
  • Server alerts in Telegram
About WhitePanel →

How WhiteShield and WhitePanel work together

On one VPS WhiteShield receives all the traffic, and the sites and the panel itself open only through it: nobody can connect to the server directly from the internet. I keep both up to date: WhiteShield rules for new threats, WhitePanel with releases such as 0.14.1, which closed PHP2Shell. You work on your sites, and the server stays yours.

WhiteShield plans
Connection

Protect your site without getting into the details

Leave a request — I usually deploy protection on your server within 1 day and take over its maintenance.

Leave a request Compare plans
White — the Little White robot assistantWhite — the Little White robot assistant
White is here

White on website protection

I’m White, and I look after websites. Bots, scrapers, an attack in the middle of the night — I’ve seen it a thousand times.

WhiteShield stands in front of the site: it blocks bots and scrapers, repels attacks and speeds up loading with a cache. Let’s find where the customer gets lost — before the site goes down under another wave of requests. Meanwhile, the site stays looked after. Until the next investigation.

Demo

Control panel — live

An interactive demo of the WhiteShield client dashboard — exactly what a client sees. The data is fictional; on the login page, just press the button.

WhiteShield client dashboard — overview ClientLight Client dashboard Login, site list, notifications, reports and license, “under attack” mode — what the client sees. Open demo →

Plus 5 more panel themes
Analytics. This site anonymously measures page reading time. No personal data is collected.