Moving Target Defense for SMB. Websites, APIs, agents, and supply chain. All rotating, all cleaned.
. All rights reserved.
company.
Small & Medium Business. Multi-domain, multi-endpoint.
Your website is protected.
Your API, admin panel, and staging environment aren't.
Every endpoint your business runs. api.yourcompany.com, admin.yourcompany.com, webhook receivers, MCP connectors, AI agent origins. All of them sit at a static IP. Attackers map them once and come back whenever they want. NodPulse SMB rotates everything, cleans everything, and shows you what would have happened if it hadn't.
Stripe, Twilio, etc.
Every one of these sits at a static IP. Every one of them is being scanned right now.
Your website is one endpoint. Your business has thirty. Each one is an open door.
Consumer products protect the main site. That's fine for a blog. A business has a login portal, an API, a webhook receiver, an admin panel, a staging environment, and connections into five SaaS tools that each have their own API endpoints. Every one of those is a static address an attacker can map, probe, and return to.
STATIC. EXPOSED.
ROTATING. INVISIBLE.
CLEANED. UNREADABLE.
Four layers of protection. Stack what you need.
Shield covers your domains. Rotation covers your DNS. Endpoints covers your APIs and agents. NodLink covers your supplier integrations. Every layer runs on the same cleaning engine. Same data, same dashboard, same predictable bills.
Your main website plus every subdomain. Admin panels, staging environments, marketing pages, internal dashboards. All get the same cleaning and Veil treatment. Visitor metadata stripped inbound, response patterns normalized outbound. Every intermediary in your path becomes blind to what you're serving.
Response normalization makes homepage look identical to checkout
You delegate your nameservers to NodPulse. Your A records rotate continuously across a private pool dedicated to your business. A scanner that fingerprints your IP at 10:00 AM gets a different IP at 10:01. Your attacker's reconnaissance data goes stale before they can act on it.
Configurable rotation cadence. Sub-second to every few minutes.
Every API endpoint, webhook receiver, MCP connection, and AI agent origin rotates on the same engine as your website. Your integrations keep working because the customer-facing DNS always resolves. The actual infrastructure behind it changes continuously. Attackers who fingerprint your API surface once find it gone a minute later.
Emergency severance. Kill any endpoint in one click.
Your business connects to Stripe, Twilio, SendGrid, your payment processor, your CRM. Each integration is a direct pipe between your systems and theirs. If either side is compromised, the other side is next. NodLink puts a rotating relay between both ends. Neither side knows the other's real IP. If one is breached, you sever the link before the attacker pivots.
Both ends rotate. Your supplier never sees your real infrastructure.
Operator-grade visibility for every endpoint.
The NodPulse dashboard shows every domain, every API, every subdomain, every rotation event, every scan attempt in one scoped view. This is what your ops team needs. It's also what your auditor wants to see in the SOC 2 review.
Rotation engine status. Tick count, direction, phase, pool health.
Endpoint table with calls, response times, rotation events per API
Security tab with suspicious IPs, scan paths, SSL cert tracking
Alerts routable to email, Slack, PagerDuty, or custom webhook
Dedicated rotation or full endpoint protection.
Dedicated covers your domains with a private rotation pool. GateNod adds API endpoints and agent origins to the rotation engine. Both run on a dedicated pool. No sharing infrastructure with other customers.
Private pool. Up to 10 domains. DNS rotation across your own nodes.
Private pool. 3 to 5 dedicated nodes.
Everything in Dedicated + your APIs, agents, and MCP origins rotate.
Enterprise tiers start at $1,499/mo for 10 dedicated nodes and scale to 100+. White-label dashboards, SLA 99.9%, SOC2-ready audit logs, NodForge perpetual license for on-prem deployment.
Your endpoints are rotating. Your laptops aren't protected.
NodPulse rotates your network surface. ECHORON protects the hardware your employees work on. A rotating API endpoint doesn't help if one of your employees clicks a phishing link and the attacker gets a foothold at the silicon layer. Stack both for complete defense.
DNS rotation, endpoint rotation, supplier relay. Everything between your infrastructure and attackers.
Below-OS protection for every laptop, server, and endpoint device your team uses.
Two ways to start. Both take 5 minutes.
Self-serve the trial below, or book a 20-minute demo with our team to see your specific endpoints running through the rotation engine before you pay.
Questions? We read every message.
Have questions about multi-domain setup, NodLink pricing, SOC 2 compliance, or how your specific stack fits together? Send a message and a real person gets back to you within one business day.