Citala is Flowsec’s DDoS protection module, designed to operate at ISP scale as part of the Flowsec cybersecurity platform.
It provides in-network detection and mitigation of high-volume, multi-vector attacks — without traffic diversion, external scrubbing, or reliance on external mitigation infrastructure.
Managed through the Flowsec dashboard, Citala integrates with application security and traffic intelligence capabilities, enabling unified protection and operational control.
Citala operates directly within ISP infrastructure, analyzing traffic flows in real time and applying mitigation policies without altering traffic paths.
Detection and response are governed by predefined policies, while continuously analyzing traffic behavior to identify abnormal patterns as early as possible.
By operating entirely within the ISP network, Citala avoids external routing models and proxy-based architectures, preserving full traffic control and consistent performance under all conditions.
Citala removes the traditional trade-off between protection and availability.
Unlike diversion-based approaches, protection is applied inline — allowing legitimate traffic to continue flowing without interruption or performance degradation.
This ensures network stability, service continuity, and consistent customer experience, even under large-scale attack conditions.
Runs on your network. Protects your customers. Grows your business.
Flowsec Ltd.
Flowsec provides cutting-edge SaaS DDoS protection solutions for ISPs, CSPs, enterprises, MSSPs, and the national security sector. With multi-tenant and global shield technology, Flowsec enables communication service providers to offer advanced DDoS protection services to their customers.