- Home
- DDoS Protection Software
- Project Shield
Project Shield
What it is
Project Shield is a web service that helps keep eligible websites available during distributed denial-of-service (DDoS) attacks. Created by Google Cloud and Jigsaw and powered by Google Cloud Armor, it provides protection for layer 3/4 and layer 7 attacks, with settings automatically configured for each site. Customizable caching can save bandwidth and support DDoS defenses; site operators can invalidate cached content after publishing updates. Additional controls include reCAPTCHA, IP allow and deny lists, and defenses against common exploits. Traffic, error-rate, and bandwidth-savings metrics are available. Eligible applicants include news organizations and independent journalists, human rights and political organizations, election information and monitoring groups, rights organizations for marginalized groups, and nonprofit arts and science organizations. Government entities may qualify under exigent circumstances. Setup involves adding a domain, checking proposed hostnames and the origin server, then changing DNS A records; a CNAME may be needed for certificates. The service is free, with unlimited DDoS protection for eligible organizations. It uses data such as server logs for mitigation, caching, and service improvement.
For and against
For
- Protects against layer 3/4 and layer 7 attacks
- Caching can save bandwidth and support defenses
- Includes traffic, error-rate, and bandwidth metrics
- Free unlimited DDoS protection for eligible organizations
Against
- Not available to gaming sites or businesses
- Requires DNS record changes during setup
- Uses server logs for mitigation and service improvement
The verdict
Project Shield provides free cloud-based DDoS protection for organizations that meet its eligibility criteria. Applicants should be prepared to change DNS records and note that the service does not cover gaming sites or businesses.
Who it suits
Project Shield suits eligible organizations that need DDoS protection for a website, including news, human rights, election-related, political, and nonprofit arts or science groups. Government entities may be eligible in exigent circumstances.
Plans and prices
Project Shield
Free unlimited DDoS protection · available to eligible organizations
Read 9 Oct 2026 · projectshield.google
On the record
- Analytics
- Project Shield provides metrics for site traffic, error rates, and bandwidth savings.projectshield.google · read 9 Oct 2026
- Attack coverage
- The service provides protection against layer 3/4 and layer 7 attacks, automatically configured for each site.projectshield.google · read 9 Oct 2026
- Caching
- Customizable caching can improve performance, save bandwidth, strengthen DDoS defenses, and let users invalidate the cache when they publish updated content.projectshield.google · read 9 Oct 2026
- Controls
- The service offers reCAPTCHA and IP allow and deny lists and defends against common exploits.projectshield.google · read 9 Oct 2026
- Data use
- Project Shield says it uses data it obtains, such as server logs, for DDoS mitigation and caching and to improve the service.projectshield.google · read 9 Oct 2026
- Eligibility limit
- The FAQ says it does not provide service to other types of content, including gaming sites and businesses.projectshield.google · read 9 Oct 2026
- Eligible organizations
- The site lists news and independent journalists, human rights organizations, election information and monitoring, political organizations, rights organizations for marginalized groups, and nonprofit arts and science organizations as eligible.projectshield.google · read 9 Oct 2026
- Government eligibility
- Government entities may be eligible under exigent circumstances.projectshield.google · read 9 Oct 2026
- Provider
- Project Shield is created by Google Cloud and Jigsaw and powered by Google Cloud Armor.projectshield.google · read 9 Oct 2026
- Provider terms
- The Terms of Service describe Project Shield as a free software-based service provided by Google, a subsidiary of Alphabet, Inc.projectshield.google · read 9 Oct 2026
- Purpose
- Project Shield protects websites from DDoS attacks that can take them offline.projectshield.google · read 9 Oct 2026
- Setup
- Setup involves adding a domain, reviewing the proposed hostnames and origin server, and changing DNS A records to send traffic through Project Shield; a CNAME may be needed for certificates.projectshield.google · read 9 Oct 2026
- Support
- The FAQ says approved applicants receive setup information by email and that a webmaster with administrative privileges who can modify DNS records should be able to configure the service in approximately 10 minutes.projectshield.google · read 9 Oct 2026
