Cybersecurity appliance · Coming soon

NuajBridge

Plug in. Shut out.

It sits between your internet connection and your router, stops DDoS attacks and known threats coming in and infected devices calling out, and has no address anyone can reach. For 2.5 and 25 Gb/s links.

Reserve a NuajBridge

NuajBridge 2.5G

Protection that rivals a $90,000 appliance,
in a box that fits your hand.

FortiDDoS-200F, first year, US street price, October 2026 · See the comparison

Plug it in

It installs like a cable.
Nothing else changes.

Scan a code to claim it, then cable it in: your internet connection on one side, your router on the other. Nothing is readdressed, and the bridge has no address of its own on the traffic it protects.

WAN LAN Internet Your connection NuajBridge Filters both ways Your router Unchanged Your network Servers, VMs, containers Internet Your connection WAN NuajBridge Filters both ways LAN Your router Unchanged Your network Servers, VMs, containers

Under attack

A botnet attacks.
Your traffic gets through.

On the bench, a DDoS attack came at one address from 65,536 others, and the traffic you depend on kept flowing.

97%

Of the attack stopped

0.71 Gb/s from 65,536 addresses at one of yours.

99.8%

Of your traffic delivered

The lowest result across six different attacks.

Proven

Both directions at once.
Not a packet lost.

Internet traffic in and out at the same time, with every protection on — and every packet that came out checked against what went in.

4.3Gb/s

Internet traffic, both ways at once

91% of the link, every protection on.

0

Packets lost or altered

Out of 671 million, each checked against what was sent.

A production NuajBridge 2.5G and separate test equipment, October 12 to 16, 2026. Full conditions in the product sheet.

Two models

Every protection in both.
Pick your link speed.

Both models run the same engine and every protection layer — nothing is held back for a bigger box. What a larger model buys you is a faster link.

POWERMGMTLAN2LANLAN1WANWAN
NuajBridge 2.5GCompact and fanless, for 2.5G and 1G business internet links.Coming soon
POWERON/OFFWANLANMGMTWANLAN
NuajBridge 25GA 1U rack unit for 25G and 10G links, at service providers, data centres and campus edges.Coming soon

Compare

The two models,
side by side.

NuajBridge 2.5G 25G
For Business internet links Service providers, data centres and campus edges
Link speeds it serves 2.5G · 1G 25G · 10G with SFP+ modules · 2.5G on its copper pair
Network ports Two 2.5 Gigabit Ethernet, RJ45 Two 25 Gigabit Ethernet, SFP28, and two 2.5 Gigabit Ethernet, RJ45
Management port One 1 Gigabit Ethernet, RJ45 One 2.5 Gigabit Ethernet, RJ45
Form factor Compact, fanless desktop 1U rack unit
Power USB-C Power Delivery AC, IEC C14 inlet
Performance Line rate from 256-byte packets, both ways —
Availability Coming soon Coming soon
Every protection, on every model
DDoS and reflection attacks ✔ ✔
Zero-day attack signatures ✔ ✔
Port scans and brute-force ✔ ✔
Threat intelligence and geo-blocking ✔ ✔
DDoS reports, alerts and cloud dashboard ✔ ✔
NuajProtect subscription Included Included

Every network is different, so we size each deployment with you.

Reserve a NuajBridge

Downloads

Every detail,
in one PDF.

A sheet per model with its ports, protection and test results, and a one-page comparison with a firewall, a DDoS appliance and cloud DDoS protection.

NuajBridge 2.5G

NuajBridge 25G · Preliminary

Installation

Fits in front of your router.
Replaces nothing.

No rules to write. Your firewall stays.

Transparent

An inline bridge

Your internet connection to the WAN port, your router to the LAN port. Same addresses, no proxy, no extra hop.

Invisible

Nothing to attack

It has no address on the traffic it protects, so it can’t be scanned, logged into or targeted from the internet.

Both directions

Every packet, in and out

Inspected on the way in and on the way out. Attacks it catches are dropped before they reach your network.

Out-of-band

Managed apart from your traffic

Its management port sits behind your router, apart from the traffic it protects. It takes an address by DHCP and only connects out, so there is no firewall rule to open.

Safe updates

Kept current, carefully

Threat feeds update continuously. A software update is kept only once the box is back up and forwarding.

Included

NuajProtect in the box

The threat feeds, the cloud dashboard, reports, alerts and updates. A NuajProtect subscription ships with every NuajBridge.

Protection

DDoS protection, in layers.
From floods to probes.

DDoS

Attacks, large and small

Per-source rate limiting stops loud attackers. An address under attack is held to its own normal rate, an adaptive rate limit caps the rest, and replies to your own connections get through.

Reflection

Reflection and amplification

Replies from DNS, NTP, memcached and similar services pass only when a device on your network asked for them.

Zero-day

New attacks, recognised

It learns your normal traffic and writes an attack signature that blocks only what sets the attack apart.

Probing

Port scans and brute-force

It watches the ports your services listen on and blocks sources that keep failing to connect.

Threat intelligence

Known threats, blocked

Curated threat feeds, your own blocklist and geo-blocking, for IPv4 and IPv6.

Community

Blocked across the community

When one NuajBridge catches an attacker, every network in the NuajProtect community blocks it, often before it reaches yours. You choose who you share with, and how many separate devices must report an attacker first.

Visibility

See every threat,
and why it was stopped.

A DDoS attack report: 45 minutes, 1.04 billion packets blocked, your traffic through the attack, and the networks it came from A DDoS attack report: 45 minutes, 1.04 billion packets blocked, your traffic through the attack, and the networks it came from

Every attack, reported

After each DDoS attack: what came, from which countries and networks, what was blocked and learned. By email, text or a daily digest.

Compromised devices

An alert when a device on your network keeps trying to reach listed addresses, a sign it is infected. That traffic is blocked.

Why, for any address

Live traffic, an activity log, and a lookup that says why any address was blocked or let through.

Limits

What it can’t do.

Stop attacks bigger than your link

They fill your internet link before they reach the box. Those need your internet provider.

Single out DDoS traffic that looks like yours

It is held to the rate limit: your connections carry on, but new visitors to a public server may be dropped too.

Block reflection with asymmetric routing

Reflection blocking needs to see requests going out. If outbound traffic takes another path, turn it off.

Questions

Before you reserve one.

When can I get a NuajBridge?
The 2.5G and 25G models are coming soon. Join the NuajProtect beta and you get priority access to each model as it ships; to reserve one, or to size a deployment, write to sales@nuaj.com.
Do I have to change my network to install it?
No. Your internet connection goes into the WAN port and your router into the LAN port. Nothing is readdressed, there is no proxy or extra hop, and the bridge has no address on the traffic it protects. Its management port sits behind your router, takes an address by DHCP and only connects out, so there is no firewall rule to open.
Does NuajBridge replace my firewall?
No. A firewall enforces the rules you write. NuajBridge sits in front of your router and removes what no rule describes: DDoS floods, sources on live threat feeds, port scans and brute-force attempts. It complements your firewall rather than replacing it.
Which model do I need for a 10 Gb/s link?
The NuajBridge 25G. Its SFP28 ports take 10 Gb/s SFP+ modules, so the same box serves a 10G link today and a 25G link later.
Can NuajBridge stop an attack bigger than my internet link?
No, and no box on your side of the link can: such an attack fills the link before it reaches the box, and that needs your internet provider. NuajBridge stops what arrives over your link, in both directions.
Is a NuajProtect subscription included?
Yes. Every NuajBridge ships with NuajProtect included: the threat-intelligence feeds, the cloud dashboard, DDoS reports and alerts, and updates.

For a single server or a MikroTik you already run, start today with NuajProtect on Linux or NuajProtect on RouterOS. Same account.

Coming soon

Be first
in line.

Beta members get priority access to each model as it ships. Until then, protect your servers and routers in software.

Join the beta