Support
We can help.
A question, an incident, a request: the team replies within 72 business hours.
Contact
Write to us at [email protected] from your registered address for any question about your account, your sites or your licenses.
To report a vulnerability, use the security.
Frequently asked questions
Q1. Can I try it before buying?
Yes: Starter is free for new accounts during the private allowlisted beta, with no card and no automatic conversion.
Q2. Is my data hosted in Europe?
The application and its primary storage are hosted by HG-HOSTING SAS in Nozay, France. Stripe and the future email provider may process required data in the locations and under the safeguards published in the subprocessors register.
Q3. Is Shugoi compatible with a CDN like Cloudflare®?
Yes. Shugoi runs server-side and can be used as a complement for Cloudflare® services. Both address different needs: the CDN handles the network and caching, Shugoi focuses on recognizing abusive machines at your application level.
Q4. How are my passwords and secrets stored?
Passwords use bcrypt (cost 12, server-side pepper), TOTP secrets are AES-256-GCM encrypted, site secrets use scrypt. See our security page.
Q5. How do I cancel my subscription?
Cancel anytime from your dashboard (Stripe portal), no fees. Protection stays active until the end of the paid period.
Q6. How do I delete my account or a site?
A site can be deleted from the dashboard. To delete your account, write to [email protected] from your registered address: deletion within 72 business hours.
Q7. Is Shugoi a web application firewall (WAF)?
Shugoi protects the application layer against abuse: it flags signs of automation or risky environments, then applies your rate-limit, challenge and allowlist rules. It does not inspect SQLi, XSS or injection signatures: pair it with a signature WAF for that layer.
Complementary protection
Depending on your infrastructure, Shugoi can be deployed as a complement for Cloudflare® services: the CDN handles the network and caching, Shugoi adds abusive-machine recognition at your application level.
Cloudflare, the Cloudflare logo, and Cloudflare Workers are trademarks and/or registered trademarks of Cloudflare, Inc. in the United States and other jurisdictions.