bunny.net

A challenge or block page is one of the few moments a real visitor hits a wall on your site. With custom response pages for Bunny Shield, you control what visitors see when they're challenged, blocked, or rate limited. Drop your own HTML, CSS, and #JavaScript into the page body to make it look and behave like the rest of your site. Here's how to get the most out of custom response pages: → Brand your challenge page so verification feels like part of your site, not a detour → On block pages, tell legitimate users why they were stopped and how to contact support if it was a mistake → On rate limit pages, explain the wait and set expectations instead of leaving people guessing → Localize the messaging for multilingual audiences Protection logic, status codes, and the challenge itself stay exactly the same, so you're only changing what the visitor sees. And if you leave a page uncustomized, #BunnyShield falls back to its clean default. See how to set it up👇

You learn a lot when hundreds of billions of requests pass through your edge every day. That’s exactly what we’ve seen across our network. It gives us a unique view into how attacks are evolving, what malicious traffic actually looks like, and the techniques attackers continue to rely on. We’ve distilled those insights into the 2026 Edge Security Report, built from 149 days of production telemetry across our global edge network. Link to blog in comments. ⬇️

You learn a lot when hundreds of billions of requests pass through your edge every day. That’s exactly what we’ve seen across our network. It gives us a unique view into how attacks are evolving, what malicious traffic actually looks like, and the techniques attackers continue to rely on. We’ve distilled those insights into the 2026 Edge Security Report, built from 149 days of production telemetry across our global edge network. Link to blog in comments. ⬇️

WebSockets are now billed pay-as-you-go 🔌 When we launched WebSockets support last year, you picked a connection tier and paid for it, whether or not you filled it. As some of you pointed out, that's not exactly how bunny.net hops, and you were right. Now the number you set is just a safety cap, not your bill. You pay per connection-minute for the connections you actually have open, and your maximum connection limit only determines how many a zone will accept, not what you owe. → No fixed tiers to choose from or upgrade between → Billing follows real usage, minute by minute → Set a connection cap purely to protect against surprise costs → Scale from a prototype to 25,000 connections (more upon request) Find out more in the WebSockets reference in the docs 🔗

What does a 16.5 million requests-per-second DDoS attack actually look like? Here's a closer look at one of the biggest Layer 7 attacks we've seen this year. We unpack how the Aisuru botnet operated and how Bunny Shield kept it under control.🛡️ If you missed the live webinar, this is just a preview. The full replay dives deeper into the attack, the telemetry behind it, and includes a live attack demo where you'll see Bunny Shield stop threats in real time. Hosted by: Armin Talić and Lamar Waterman Catch the full replay through the link in the comments👇 #bunnyshield #websecurity

bunny.net Picker brings Bunny Storage directly into DatoCMS 🏃 Pick an asset in your DatoCMS editor, and it's stored in Bunny Storage. Query the GraphQL API, and it comes back alongside your content, with a clean CDN URL pointing straight at your Storage Zone. Files go in through DatoCMS, land in Bunny Storage, and come back ready to render, with Bunny Optimizer params ready to resize or crop on the fly. See for yourself👇 #bunnyoptimizer #bunnystorage

#WordPress users, take note! Time to optimize your site performance. Congratulations to the WP Rocket team on their 3.22 launch and the new free, built-in #CDN. We are proud to have WP Rocket as a Bunny for Platforms partner, with RocketCDN powered by bunny.net infrastructure. The big unlock in this release: a free, built-in CDN available to every RocketCDN user. Deploy it with one click directly from the WordPress dashboard, with no separate account or setup required. Serve key pages across 10 global edge locations at no extra cost. We love seeing edge delivery become this accessible for WordPress site owners. Latency is one of the biggest hidden drags on page speed, and removing the friction to fix it is a win for the whole web. Check it out: https://lnkd.in/dcNF-qTZ

Scrapers don't execute #JavaScript. That makes them invisible to your analytics, but very visible on your bandwidth bill. The challenge is knowing what not to block. Here's one tell: a real browser loads your #HTML, then fetches the #CSS, JavaScript, fonts, and images it referenced on the page. A scraper loads the HTML and stops there. If a suspicious IP is requesting pages but none of the supporting assets, that’s a strong sign you’re dealing with a scraper. The harder part is verification. A request claiming to be Googlebot from an EC2 instance in Singapore isn't Googlebot. A single reverse #DNS lookup tells you that. Legitimate crawlers resolve back to their own domains. Our latest blog covers the full diagnostic toolkit, straight from your access logs. If you'd rather not do it manually, #BunnyShield identifies and blocks malicious bots before they reach your origin.

The #internet is becoming machine-first. Our latest data shows that 1 in 5 website requests is now automated, and #AI crawlers have overtaken traditional search bots. This shift is forcing #websites and applications to adapt to a very different type of traffic. As AI agents continue to grow, so does the volume of automated traffic and the complexity of the threats that come with it. During the reporting period, we mitigated attacks reaching 16.5 million requests per second and 4.2 Tbps. The internet was built for humans. Increasingly, it's being used by machines. The findings caught TechRound's attention 👉 https://lnkd.in/din4JTXM #AIagents #AIcrawlers

Most security reports rely on surveys, estimates, or limited datasets. This one doesn't. The 2026 Edge Security Report is built on the analysis of more than 42 billion real-world requests processed across Bunny's global edge network.🛡️ The result is a data-driven view of the trends shaping today's internet, including the rise of AI-driven traffic, changing automation patterns, and practical strategies for mitigating modern threats. If you're building, securing, or scaling applications, understanding what's happening at the edge is becoming more important than ever. Download the report and explore the data for yourself 👇 #CyberSecurity #WebSecurity #EdgeComputing #AI #Developers #Security