Flowtriq review
Sub-second attack detection with automated response; mitigation is not managed by Flowtriq.
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Flowtriq is a DDoS detection and response platform for infrastructure teams, including hosting providers, game server operators, MSPs and ISPs. A Linux server agent monitors network traffic for network- and application-layer attacks, while flow-source and mirror-port options cover other monitoring setups. Its combination of detection, packet capture and automated response is aimed at teams that want to handle mitigation actions within their infrastructure rather than buy a managed service from Flowtriq.
Detection and response are the product’s central strengths. Flowtriq classifies attack families and provides confidence scores, including for Layer 7 activity such as HTTP floods, credential stuffing and API abuse. It can apply local firewall rules, deploy BGP FlowSpec or RTBH actions, and trigger third-party cloud scrubbing. Full packet captures support forensics, while automated runbooks and multi-channel alerts connect detection to incident response. The dashboard and REST API are available across web, Linux and API platforms. Listed integrations include Cloudflare, OVH, Hetzner, Slack, PagerDuty, Grafana, Datadog and Prometheus.
Pricing is split by monitoring source. Per Server / Node costs $7.99 per node monthly with annual billing or $9.99 monthly; both include kernel-level detection, PCAP capture, BGP FlowSpec, RTBH and cloud-scrubbing support. Flow Source costs $15 per source monthly with annual billing or $19 monthly for sFlow, NetFlow and IPFIX ingestion. Mirror / SPAN is $39 per source monthly and supports per-IP detection without an agent on monitored hosts. A 14-day trial is available. Enterprise has custom volume pricing, dedicated support, 365-day PCAP and audit retention, SSO/SAML and a 99.9% SLA. Choose Flowtriq for detection and automated technical controls; teams seeking Flowtriq-managed scrubbing or an included WAF should look elsewhere.
Flowtriq pros and cons
- Where it wins
- Detects network and Layer 7 attacks at kernel level in under a second
- Automates firewall, BGP FlowSpec and RTBH responses
- Captures packets and can trigger third-party cloud scrubbing
- Where it doesn't
- Flowtriq Shield managed cloud scrubbing is listed as coming soon
- No WAF is included
- Node, flow-source and mirror-source pricing requires choosing a monitoring model
Flowtriq fact sheet, pricing and score →
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update