Nexusguard
Nexusguard is a Singapore-headquartered cybersecurity provider specializing in DDoS mitigation for communications service providers and large enterprises, operating 50+ global scrubbing centers with 3+ Tbps capacity and serving 100+ ISP partners across 50,000 protected ASNs.
- Company typePrivate
- Founded2010
- HeadquartersTsuen Wan, Hong Kong SAR China
- Headcount101–250
- GTM typeB2B
- OfferingSoftware
What Nexusguard does
Nexusguard is a Singapore-headquartered, privately held cybersecurity company specializing in DDoS mitigation for communications service providers (CSPs) and large enterprises. Founded in 2008 (per firmographic records; the corporate website references 2010), the company has operated for over 15 years and is led by CEO Andy Ng, CTO Juniman Kasman, SVP Sales Xenophon Giannis, and Head of Marketing Benjamin Yip. Nexusguard serves more than 100 global ISP partners and protects 50,000 ASNs worldwide through a network of 50+ distributed scrubbing centers delivering 3+ Tbps of total mitigation capacity.
The company's core platform combines cloud-based scrubbing infrastructure with the Bastions on-premise/hybrid appliance family (MX7000, R760, R660, X12 servers supporting 40-800 Gbps). Its protection stack spans Layer 3 through Layer 7 via the NetShield engine, WebShield WAF, SMART Filter AI-driven rule generation, Smart Baselining deep-learning baseline analysis, and the Network Threat Intelligence Feed (NTIF) IP reputation database. Products are delivered through Cloud, On-Premises, and True-Hybrid deployment models and target four primary use cases: Application Protection, Origin Protection, DNS Protection (with 100% uptime SLA), and Network/Edge Protection for CSPs. The portfolio is complemented by Managed SOC, SOC Staff Training, DDoS Penetration Testing, and vertical-specific solutions for Government, FSI, and Large Networks.
Nexusguard generates revenue through subscription-based DDoS protection services (priced by protected network size, IP count, and traffic volume), licensing/royalties from CSP productization of DDoS protection-as-a-service, managed SOC services, professional services, and Bastions hardware sales. GTM motion is primarily enterprise field sales combined with a partner-first channel via the TAP, Franchise, Reseller, and Referral programs, targeting ISPs, telcos, data centers, financial institutions, and government/public sector buyers globally with a strong Southeast Asia concentration. The company holds PCI DSS, ISO 27001, and SOC Type 2 certifications, has been recognized as a 2025 SPARK Matrix Leader and consecutive CybersecAsia Best DDoS Defence winner (2020-2025), and maintains 4.7-4.9/5 ratings across Gartner Peer Insights, G2, and PeerSpot.
Nexusguard firmographics
Firmographics- Name
- Nexusguard
- Legal name
- Nexusguard
- Website
- https://nexusguard.com
- Company type
- Private
- Founded year
- 2010
- Operating status
- Operating
- Headcount range
- 101–250 employees
- Short description
- Nexusguard is a Singapore-headquartered cybersecurity provider specializing in DDoS mitigation for communications service providers and large enterprises, operating 50+ global scrubbing centers with 3+ Tbps capacity and serving 100+ ISP partners across 50,000 protected ASNs.
- Ownership category
- akta.pro rank
Nexusguard industry classification
Industry- Product category
- DDoS Mitigation and Protection
- NAICS
- Computer Systems Design and Related Services (54151), Security Systems Services (56162)
- SIC
- Communications Services, Nec (4899)
- akta.pro primary industry
- DDoS Protection & Mitigation (HDADABAG)
- akta.pro secondary industries
- DDoS Protection & Network Security Services (Carrier-Grade) (HDAIAFAK), Edge Security Delivery (DDoS, WAF, Bot Mitigation at Edge) (HDABAGAH), Cloud Network Security (Microsegmentation, Cloud Firewall, WAF, DDoS) (HDABAHAJ), DDoS Mitigation & Traffic Scrubbing (Edge/ADC‑Adjacent) (HDAFAHAJ)
Keywords
Where Nexusguard is headquartered
LocationHeadquarters
- HQ city
- Tsuen Wan
- HQ country
- Hong Kong SAR China
- HQ region
- Asia
Offices4 records
Markets served
Nexusguard business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Infrastructure, Technology or R&D, Personnel, Marketing or Sales, Supply Chain, Operations
Revenue model
- Subscription-based DDoS Protection Services: Recurring subscription fees for DDoS protection services including Origin Protection, Application Protection, Network Protection, Edge Protection, DNS Protection, and Clean Pipe. Pricing based on protected network size, protection intensity at Layers 3-4, number of protected IP addresses, and traffic volume.
- DDoS Productization for CSPs: CSP partners deploy Nexusguard Bastions to offer DDoS protection-as-a-service to their downstream customers, creating new revenue streams for partners while Nexusguard receives service/platform fees
- Managed Security Services: Fully managed SOC services with 24/7 monitoring and expert support, bundled with protection services or sold separately
- Professional Services: SOC staff training, DDoS penetration testing, and consulting services
- Hardware Sales (Bastions Servers): Sale of Nexusguard Bastions server hardware (MX7000, R760, R660, X12) to CSP partners for on-premise deployment
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Unit Pricing | Multi-year contract | Network-level DDoS protection pricing based on protected network size and protection intensity at Layers 3-4 |
| Subscription | Multi-year contract | Application Protection pricing based on protected IP addresses, protection level, and traffic size |
| Other | Annual | DNS Protection with flat-fee pricing for cost predictability |
| Unit Pricing | Subscription | Bastions server capacity options from 40 Gbps to 800 Gbps |
Go-to-market motion3 records
Distribution channels5 records
Marketing channels7 records
Nexusguard product offering
Product offeringCore offering
Nexusguard provides cloud-based and hybrid DDoS mitigation services to communications service providers (CSPs) and large enterprises, delivering Layer 3 through Layer 7 protection across applications, networks, DNS, and origin infrastructure. Its portfolio combines the Bastions on-premise/hybrid hardware platform, a globally distributed scrubbing network with 3+ Tbps capacity, and AI-driven threat detection to enable CSPs to productize DDoS protection-as-a-service for downstream customers.
Product overview
Nexusguard offers a comprehensive DDoS protection platform with multiple integrated products and deployment options. The core portfolio includes Application Protection (Layer 7 WAF and DDoS mitigation), Origin Protection (large-scale network defense), DNS Protection (always-on domain resolution), Network Protection, Edge Protection, and Clean Pipe services. These products share the Nexusguard Bastions platform—which combines carrier-grade hardware servers (MX7000, R760, R660, X12) with proprietary detection/mitigation technology (NetShield, WebShield)—as the foundational infrastructure. Deployment is available via Cloud (global scrubbing network), On-Premises (via Bastions), or True-Hybrid (simultaneous cloud and on-prem). Professional services include Managed SOC, SOC Training, and DDoS Penetration Testing. Vertical-specific solutions cover Government, FSI, Large Networks, and DNS Resilience. The platform also supports CSP productization through Clean Pipe monetization and partnership programs.
Differentiator
Problem solved
Functional benefit
Products and services
- Application Protection Multi-layered defense for websites, applications, and APIs spanning Layers 3 through 7. Combines always-on DDoS protection with Web Application Firewall (WAF) capabilities including OWASP Top 10 protection, SQL injection prevention, and cross-site scripting (XSS) mitigation.
- Origin Protection Comprehensive Anti-DDoS Solutions for Large-Scale Networks. Safeguards mission-critical services across environments managing hundreds of Class C networks with flexible deployment options including Nexusguard Bastions for on-premise or hybrid setups and Nexusguard Fully Managed Service for cloud-based solutions.
- DNS Protection Always-on domain resolution through globally distributed, high-capacity scalable DNS infrastructure engineered to absorb DNS-based DDoS attacks while maintaining uninterrupted service for legitimate users. Offers 100% DNS uptime guarantee with DNSSEC support and flat-fee pricing.
- Network Protection Purpose-built solution to strengthen local network infrastructure of CSP partners by proactively mitigating malicious attack traffic that targets network availability, minimizing congestion and ensuring secure, uninterrupted operations.
- Edge Protection Integrated solution bridging on-premise and cloud protection for CSPs, providing instantaneous increase in mitigation capacity by intelligently diverting malicious traffic to Nexusguard Cloud when attacks exceed local scrubbing capabilities.
- Clean Pipe Maximizes service availability to internet access clients by delivering clean, filtered traffic. Forms a layered defense mechanism with Network Protection, providing security for downstream customers while ensuring CSP operational resilience.
- Bastions The Ultimate DDoS Protection and Productization Solution for Communications Service Providers. Next-generation fully managed solution delivering Nexusguard services to on-premises or edge locations for consistent hybrid experience. Combines carrier-grade hardware with proprietary technology including MX7000, R760, R660, and X12 server models with 40-800 Gbps scrubbing capacities.
- Managed SOC Service 24/7 Security Operations Center service staffed by skilled security professionals monitoring and defending against emerging threats including zero-day attacks with guaranteed 5-minute response time.
- DDoS Penetration Testing Service to evaluate mitigation measures, assess and fine-tune DDoS defense strategies.
Quantifiable outcome
- 97.3% year-over-year increase in total DDoS attacks detected in 2025 threat analysis
- +6 more outcomes
Companies that use Nexusguard
Customer profileNamed customers11 records
Segments4 records
Ideal customer profiles4 records
Nexusguard technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- Yes
- API docs
- API detail
Core technology
AI maturity
App detail
AI capability5 records
Feature10 records
Nexusguard partnerships and signals
Strategic signalPartnerships
Eleven partnerships are on record, tiered core.
- Linknet Enterprise (PT Link Net)coreStrategic MoU partnership integrating Nexusguard's cloud-based DDoS mitigation technology into Linknet's Indonesian network infrastructure. Includes deployment of local scrubbing center in Jakarta with 100 Gbps capacity, leveraging Nexusguard's 3+ Tbps global mitigation capacity. Targets government institutions, financial institutions, and enterprise clients across Indonesia.
- TIM (Philippines)coreTIM Philippines building the first true-hybrid DDoS scrubbing center in the Philippines in partnership with Nexusguard. TIM is transitioning to become an MSSP leveraging Nexusguard's technologies.
- Cellcard (Cambodia)coreIntegration of Nexusguard's globally proven technologies with local scrubbing capabilities in Cambodia, delivering unmatched level of protection and peace of mind to customers.
- Ezecom (Cambodia)corePartnership delivering DDoS protection services leveraging Nexusguard's global technologies combined with local scrubbing capabilities in Cambodia.
- Wind Telecom (Dominican Republic)corePartnership to deliver robust cybersecurity solutions addressing critical data security vulnerabilities for institutions and businesses in Dominican Republic.
- RETNcoreEuropean telecommunications network operator deploying Nexusguard's Bastions platform for DDoS protection, enabling flexible package offerings with rapid onboarding.
- StarHub (Singapore)coreSingapore telecommunications company partnering with Nexusguard for DDoS mitigation, with focus on addressing customer pain points in cybersecurity.
- NetPluz (Singapore)coreManaged services provider in Singapore with Nexusguard-powered mitigation facility commissioned, delivering proactive and intelligent DDoS protection to customers.
- REDtone (Malaysia)coreMalaysian telecommunications company securing network with enterprise-grade SLAs ensuring uptime for business-essential applications using Nexusguard solution.
- Azion Technologies Inc.coreEdge computing company partnering with Nexusguard for DDoS protection with prompt support for service requests ensuring smooth business operations.
- SNOC (Thailand)coreThai managed security services provider offering customized internet security solutions powered by Nexusguard for uninterrupted customer interactions.
Scale indicators10 records
Recent moves6 records
Expansion highlights5 records
Nexusguard competitors and assessment
Company assessmentEmerging players
- Path Network: Path Network is a DDoS mitigation and anti-bot provider focused on game servers, crypto, and web3 infrastructure, offering cloud-based, real-time protection. Emerging player with overlapping cloud DDoS mitigation model and hybrid deployment ambitions, though targeting different customer segments (digital-native/Web3) than Nexusguard's CSP-led GTM.
- Link11 (DDoS Protection): Link11 is a European DDoS protection specialist offering cloud-based L3-L7 mitigation and managed security services to enterprises and hosting providers. Emerging player with meaningful overlap to Nexusguard's Origin and Application Protection products, particularly in the EMEA market where Nexusguard is underpenetrated.
Broad incumbents
- Akamai (Prolexic): Akamai is a global CDN and cloud security leader with Prolexic as its dedicated DDoS protection platform, serving large enterprises, financial services, and governments. Comparable to Nexusguard in L3-L7 protection, hybrid deployment, and CSP-grade scrubbing, but with a much larger global scrubbing footprint and stronger North American enterprise presence.
- Cloudflare: Cloudflare is a global edge/cloud platform that bundles DDoS protection (L3-L7) as a core feature across its CDN, WAF, and Magic Transit services, serving enterprises, CSPs, and developers worldwide. It is a broad incumbent offering that overlaps directly with Nexusguard's cloud scrubbing and WAF capabilities, but at vastly greater scale and with much broader product portfolio.
- Fastly (Next-Gen WAF + DDoS): Fastly is an edge cloud platform offering DDoS protection as part of its CDN, compute, and security services, serving digital-native enterprises and large web properties. Comparable to Nexusguard on L7 application-layer DDoS protection, WAF capabilities, and edge security delivery, but with a developer-platform-led GTM motion.
- Imperva (DDoS Protection): Imperva is an application and data security vendor offering DDoS protection as part of its broader web application firewall and API security portfolio, serving mid-market and enterprise customers. Comparable to Nexusguard on L7 DDoS and WAF layers, but as a feature within a wider application security suite rather than a DDoS-specialist.
- F5 (Distributed Cloud DDoS): F5 is an application delivery and security company offering DDoS protection via its BIG-IP, NGINX, and Distributed Cloud services, serving large enterprises and service providers. Comparable to Nexusguard on ADC-adjacent DDoS mitigation, hybrid deployment patterns, and CSP/enterprise customer overlap.
Direct peers
- Radware: Radware is a cybersecurity specialist focused on DDoS protection, WAF, and application security with cloud, on-premises, and hybrid deployment options, serving carriers, enterprises, and financial services. Closest direct peer to Nexusguard — similar pure-play DDoS focus, comparable hybrid architecture, overlapping carrier customer base, and equivalent product portfolio scope.
- NSFOCUS: NSFOCUS is a global cybersecurity vendor with strong DDoS mitigation, anti-DDoS appliances, and scrubbing services, with significant APAC (especially China and Southeast Asia) enterprise and carrier footprint. Direct peer to Nexusguard given overlapping APAC market focus, similar hybrid deployment model, and comparable telco/carrier customer base.
- Corero Network Security: Corero Network Security is a DDoS protection pure-play offering real-time, automatic detection and mitigation for hosting providers, ISPs, and enterprises via hardware and cloud solutions. Direct peer to Nexusguard with comparable target customer (CSPs, hosting providers), similar hybrid deployment approach, and overlapping product focus on L3-L7 mitigation.
Market position
Strengths5 records
Weaknesses4 records
Competitive moat6 records
Key risks6 records
Key highlights7 records
Customer concentration
Nexusguard social profiles
Digital presenceNexusguard compliance and trust
Trust signalCompliance3 records
Nexusguard financial estimates
Financial estimateRevenue estimate
Valuation estimate
Nexusguard leadership team
Management profileNumber of profiles
Profiles4 records
Nexusguard funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Nexusguard M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Nexusguard
What does Nexusguard do?
Nexusguard provides cloud-based and hybrid DDoS mitigation services to communications service providers (CSPs) and large enterprises, delivering Layer 3 through Layer 7 protection across applications, networks, DNS, and origin infrastructure. Its portfolio combines the Bastions on-premise/hybrid hardware platform, a globally distributed scrubbing network with 3+ Tbps capacity, and AI-driven threat detection to enable CSPs to productize DDoS protection-as-a-service for downstream customers.
Is Nexusguard a public or private company?
Nexusguard is a private company. It is classified as unknown and is currently operating.
When was Nexusguard founded?
Nexusguard was founded in 2010. It employs 101 to 250 people.
Where is Nexusguard based?
Nexusguard is headquartered in Tsuen Wan, Hong Kong SAR China, in the Asia region.
How does Nexusguard make money?
Five revenue lines are on record. Subscription-based DDoS Protection Services are the primary driver. The others are DDoS Productization for CSPs, managed Security Services, professional Services and hardware Sales (Bastions Servers).
Who are Nexusguard's main competitors?
Emerging players on record are Path Network and Link11 (DDoS Protection). Broad incumbents are Akamai (Prolexic), Cloudflare, Fastly (Next-Gen WAF + DDoS), Imperva (DDoS Protection) and F5 (Distributed Cloud DDoS). Direct peers are Radware, NSFOCUS and Corero Network Security.
Does Nexusguard have an API?
Yes. Nexusguard offers a proprietary API for seamless CSP (Communications Service Provider) integration. The API enables tight integration with partner CSP operations, helping streamline workflows, enhance efficiency, and simplify management for a more cohesive service experience. No additional technical details (protocol, authentication, rate limits, versioning) are specified in the available source material.
What industry is Nexusguard in?
Nexusguard's product category is DDoS Mitigation and Protection. Its primary akta.pro industry code is HDADABAG, DDoS Protection & Mitigation, with a secondary code of HDAIAFAK, DDoS Protection & Network Security Services (Carrier-Grade). Its NAICS code is 54151 and its SIC code is 4899.