Project Shield review
A free Google reverse proxy for eligible sites needing Layer 3/4 and Layer 7 DDoS protection.
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Project Shield is a free Google service for eligible public-interest websites, including news, human-rights, elections-related, political, marginalized-groups, arts, sciences, and certain government sites. It also serves eligible individual journalists. The service operates as a cloud-based reverse proxy, filtering malicious traffic before it reaches the origin server. Its stated fit is strongest for solo, small, and mid-market organizations that need website or API protection without a paid software plan.
The Free plan provides DDoS protection for eligible websites. Its protection scope covers both Layer 3/4 and Layer 7 attacks, while caching helps absorb traffic and reduce origin load. Administrators can apply intelligent rate limiting, IP allowlists and denylists, path-based block and bypass rules, reCAPTCHA controls, and SSL and HTTPS proxying. Traffic, error-rate, and bandwidth metrics are available, and cache invalidation can be handled through the dashboard or API. These controls make Project Shield more than a basic traffic filter, particularly for organizations that need configurable access and traffic policies.
Google Cloud infrastructure is central to the service, with integrations for Google Cloud Load Balancing, Google Cloud CDN, and Google Cloud Armor. That fit will appeal to organizations already working within Google Cloud, while the documentation-led support model gives applicants a clear but limited support channel. Eligibility is the decisive consideration: organizations and journalists must apply and pass Google's review. Project Shield suits qualifying public-interest publishers and groups seeking free, broad-layer protection. Organizations outside those eligibility categories, or teams requiring paid tiers, broader support channels, or a different deployment model, should consider another DDoS protection product.
Project Shield pros and cons
- Where it wins
- Protects against Layer 3/4 and Layer 7 DDoS attacks
- Combines filtering, caching, rate limiting, and access rules
- Integrates with Google Cloud Load Balancing, CDN, and Armor
- Where it doesn't
- Access requires eligibility and Google's application review
- Support is provided through documentation
- Protection is limited to eligible websites and organizations
Project Shield fact sheet, pricing and score →
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update