Home Features How it works FAQ How to set up
English español français Deutsch italiano Português Brasileiro

Protecting news from digital attacks

Project Shield is a free service that uses Google technology to protect news sites and free expression from DDoS attacks on the web.

Apply now Learn more


Advanced DDoS protection

Project Shield is built on Google's infrastructure, creating a multi-layer defense system to protect your site against DDoS attacks, including layer 3/4 and layer 7 attacks.

Learn more

Free, unlimited protection

No matter the size of your website or the size of the attack, Project Shield provides free protection for news, journalist, human rights, and elections monitoring sites.

Learn more

Customizable caching

Project Shield caches content to strengthen DDoS defenses and improve site performance. You can customize the cache settings to meet your site's needs.

Learn more

Other features

Real-time site analytics

Support from Google

SSL support

Fast, reliable service

Easily add new sites and admins

Bare domain support

How it works

Once you set up your website on Project Shield, here’s how we protect your site:

Review traffic and filter out bad requests

When someone visits your website, the request comes to Project Shield first so that we can filter out bad requests.

Attacks are blocked

If it looks like the traffic is an attack, we reject the request and prevent it from reaching your server. We use a multi-layer filtering system, applying DDoS defenses at both the edge of our network and again in our data center. Requests are filtered at the edge of our network and again in our data centers.

Reverse proxy in Google's data centers

User requests enter Google’s network at a location close to the end user, and then are proxied through the nearest Google Cloud data center. This improves performance and reduces latency.

Content is served back to the user

We retrieve the requested site content either from our cache or from your server and send it back to the user. By serving content from cache, we reduce the load on your server and improve performance for the end user.

"We used to experience occasional DDoS attacks on our network of news sites, so we gave Google's Project Shield a try.

It took 30 minutes for the initial setup, followed by some optimizations over the next two days, and since then we've simply left it to run without issues.

A wonderful case of 'install and forget.' We've suffered no more attacks since, and as an extra bonus the load on our server has approximately halved."


What is DDoS?

A DDoS attack is an attempt to make an online service unavailable by overwhelming it with traffic from multiple sources. Learn more

Am I at risk?

DDoS attacks are often used to attempt to censor news, human rights, and elections monitoring sites, and to bring down many other types of sites. Many sites do not have the capacity to defend against these attacks.

Do I qualify?

Project Shield welcomes applications from news, human rights, or elections monitoring organizations and individual journalists. We do not provide service to other types of content, including gaming sites and businesses. See our User Content and Conduct Policy for more details.

How do I get started?

Start by applying for Project Shield using the application form below. If your site is approved, you will receive an email with the information needed to configure Project Shield. A webmaster who has administrative privileges for the website and is able to modify DNS records should be able to set the service up in approximately 10 minutes.

How is my data used?

Project Shield only uses the data we obtain (such as logs from the Project Shield servers) for DDoS mitigation and caching and to improve the service. See this Help Center article for more details.

Apply now

Your details

This field is required
Checking your email address
This field is required
Please enter a valid email address
Please use a Gmail or Google Apps email address
This field is required
Please enter a valid domain name e.g. example.com
This field is required
Aruba Afghanistan Angola Anguilla Åland Islands Albania Andorra United Arab Emirates Argentina Armenia American Samoa Antarctica French Southern Territories Antigua and Barbuda Australia Austria Azerbaijan Burundi Belgium Benin Bonaire, Sint Eustatius and Saba Burkina Faso Bangladesh Bulgaria Bahrain Bahamas Bosnia and Herzegovina Saint Barthélemy Belarus Belize Bermuda Bolivia, Plurinational State of Brazil Barbados Brunei Darussalam Bhutan Bouvet Island Botswana Central African Republic Canada Cocos (Keeling) Islands Switzerland Chile China Côte d'Ivoire Cameroon Congo, The Democratic Republic of the Congo Cook Islands Colombia Comoros Cabo Verde Costa Rica Cuba Curaçao Christmas Island Cayman Islands Cyprus Czech Republic Germany Djibouti Dominica Denmark Dominican Republic Algeria Ecuador Egypt Eritrea Western Sahara Spain Estonia Ethiopia Finland Fiji Falkland Islands (Malvinas) France Faroe Islands Micronesia, Federated States of Gabon United Kingdom Georgia Guernsey Ghana Gibraltar Guinea Guadeloupe Gambia Guinea-Bissau Equatorial Guinea Greece Grenada Greenland Guatemala French Guiana Guam Guyana Hong Kong Heard Island and McDonald Islands Honduras Croatia Haiti Hungary Indonesia Isle of Man India British Indian Ocean Territory Ireland Iran, Islamic Republic of Iraq Iceland Israel Italy Jamaica Jersey Jordan Japan Kazakhstan Kenya Kyrgyzstan Cambodia Kiribati Saint Kitts and Nevis Korea, Republic of Kuwait Lao People's Democratic Republic Lebanon Liberia Libya Saint Lucia Liechtenstein Sri Lanka Lesotho Lithuania Luxembourg Latvia Macao Saint Martin (French part) Morocco Monaco Moldova, Republic of Madagascar Maldives Mexico Marshall Islands Macedonia, Republic of Mali Malta Myanmar Montenegro Mongolia Northern Mariana Islands Mozambique Mauritania Montserrat Martinique Mauritius Malawi Malaysia Mayotte Namibia New Caledonia Niger Norfolk Island Nigeria Nicaragua Niue Netherlands Norway Nepal Nauru New Zealand Oman Pakistan Panama Pitcairn Peru Philippines Palau Papua New Guinea Poland Puerto Rico Korea, Democratic People's Republic of Portugal Paraguay Palestine, State of French Polynesia Qatar Réunion Romania Russian Federation Rwanda Saudi Arabia Sudan Senegal Singapore South Georgia and the South Sandwich Islands Saint Helena, Ascension and Tristan da Cunha Svalbard and Jan Mayen Solomon Islands Sierra Leone El Salvador San Marino Somalia Saint Pierre and Miquelon Serbia South Sudan Sao Tome and Principe Suriname Slovakia Slovenia Sweden Swaziland Sint Maarten (Dutch part) Seychelles Syrian Arab Republic Turks and Caicos Islands Chad Togo Thailand Tajikistan Tokelau Turkmenistan Timor-Leste Tonga Trinidad and Tobago Tunisia Turkey Tuvalu Taiwan, Province of China Tanzania, United Republic of Uganda Ukraine United States Minor Outlying Islands Uruguay United States Uzbekistan Holy See (Vatican City State) Saint Vincent and the Grenadines Venezuela, Bolivarian Republic of Virgin Islands, British Virgin Islands, U.S. Viet Nam Vanuatu Wallis and Futuna Samoa Yemen South Africa Zambia Zimbabwe
This field is required

How would you describe your site?

News or independent media Elections information Human rights information Other

Does your site use SSL?

Yes No I’m not sure Keep me up to date with news and product updates from Project Shield.

Are you currently being attacked by DDoS?

Yes No I’m not sure

Have you been attacked by DDoS in the past?

Yes No I’m not sure

Where did you hear about Project Shield?

Anything else you’d like us to know?

Apply for Project Shield