nuDefend blocks known attackers on any cloud or on-premise Linux server - inbound and outbound - automatically. One command installs a lightweight, privacy-first agent that self-updates every 30 minutes with zero telemetry.
nuDefend is a lightweight security agent that protects any Linux server - on any cloud or on-premise - by blocking known-malicious IP addresses and domains, both inbound and outbound.
A single command installs the signed, hardened agent. Every 30 minutes it fetches a cryptographically signed threat list of 45,000+ malicious domains and 44,000+ attacker IPs and enforces it at both the network (kernel firewall) and DNS layers, so threats are stopped before they ever reach the services running on your server.
nuDefend is privacy-first: the only outbound call is fetching the signed blocklist. Your logs, traffic and metadata never leave the machine - reports stay local. The agent is self-healing and restores its rules if anything tampers with them, and it fails open if a subscription lapses so you are never locked out.
Key capabilities:
Any cloud, any server - AWS, Azure, GCP, DigitalOcean or bare metal
Inbound and outbound protection at the network and DNS layers
Automatic threat-list refresh every 30 minutes
Local-only reporting with zero telemetry
One-line install, no console to learn
Highlights
Blocks 45,000+ malicious domains and 44,000+ attacker IPs, inbound and outbound, at both the network and DNS layers.
One-line install on any Linux server - AWS, Azure, GCP, DigitalOcean or on-prem. Self-updating every 30 minutes.
Privacy-first with zero telemetry - your logs and traffic never leave the server. Fails open, no lock-in.
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing is based on the duration and terms of your contract with the vendor. This entitles you to a specified quantity of use for the contract duration. If you choose not to renew or replace your contract before it ends, access to these entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Protection for one Linux server. Includes real-time inbound and outbound blocking of malicious domains and attacker IPs, with automatic threat-feed updates every 30 minutes. One license covers one server.
This listing offers one pricing option: the nuDefend Server License, billed monthly per protected Linux server. Pricing scales by the number of servers you protect. One license covers one server, so you buy a license for each server you want to secure. Each license includes real-time inbound and outbound blocking of malicious domains and attacker IPs. The agent refreshes its threat feed automatically every 30 minutes. To protect more servers, you add more licenses. There are no separate tiers or add-ons; the structure is a straightforward per-server, per-month charge.
Top-of-mind questions for buyers
What counts as one server for licensing purposes?
One license covers one Linux server, whether it runs on a cloud provider or on-premise hardware. Each virtual machine or physical server needs its own license. To protect more servers, you buy one license per server. The agent installs with a single command on any Linux server.
What happens to protection if my license lapses or is cancelled?
If a subscription lapses, the agent stops blocking rather than locking you out. It fails open and can uninstall itself cleanly. You are not locked in. Since billing is monthly per server, you stop paying once you cancel a server's license.
What does each server license actually protect against, and what is not covered?
Each license blocks traffic to and from known attacker IPs at the firewall, and blackholes dangerous domains at the DNS level. It does not stop brand-new threats not yet listed, inspect encrypted traffic, or remove existing malware. It is a network filter, not antivirus software.
www.nuvpn.com+1
Helpful?
Vendor refund policy
We offer a full refund within 30 days of purchase if you are not satisfied. To request a refund, email support@nuvpn.com with your AWS account ID and subscription details. Refunds are processed through AWS Marketplace.
How can we make this page better?
Tell us how we can improve this page, or report an issue with this product.
Give us feedbackReport a problem with this product or seller
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA).
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Support
Vendor support
Email support is available at support@nuvpn.com. Documentation and setup guides are at https://www.nuvpn.com/nudefend. We typically respond within one business day. For urgent issues, include your license key and server details.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Threater is the only active defense solution that blocks every threat from every path in your network at any scale in real time. Your security stack is better with Threater.
ThreatSTOP products work together to deny access to known malicious command-and-control infrastructure. By blocking the outbound communications channel that attackers depend on, organizations can disrupt malware operations and reduce the impact of successful compromises.
Be the first to review this product. We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.