меню
DDoS protection
Advantages DDoS protection
Protection service rates
Who needs protection
Details
Protection service rates
Service name
Normal+
Business+
Premium+
Service fee, monthly*
120 000 (including VAT)
300 000 (including VAT)
800 000 (including VAT)
Guaranteed availability, more
97,0%
99,0%
99,5%
Maximum DDoS filtering bandwidth **
1 Gbps
10 Gbps
unlimited
Billable traffic
legitimate
legitimate
legitimate
Amount of traffic covered by service fee
3 Mbps
3 Mbps
3 Mbps
Overage rate, per Mbps***
4 500 (including VAT)
4 500 (including VAT)
4 500 (including VAT)
*Service fee - a fixed monthly payment for Operator's services, service fee depends on the tariff chosen by the Client and is fixed throughout the period of their use.

**When the maximum filtering bandwidth is reached, Client is suggested to upgrade to another tariff with corresponding maximum filtering bandwidth. Should the Client refuse to switch to another tariff, Company may unilaterally disconnect the Client from the service with 10-days prior notice.

***The mechanism for calculating the monthly payment for load is as follows: the average bandwidth of prevailing traffic (in mbps) is accounted every three minutes. The monthly statistics are collected and the 30 largest values are discarded. From the 31th maximum channel load value (in mbps) 3 mbps is deducted (that is, included allowance) and multiplied by the rate specified in Table 1.
«Anti Hacker» service (Web Application Firewall)
Additional service is provided only as part of the
«Protection against DDoS attacks» service
Service name
Active WAF+
Total WAF+
Individual WAF+
Service fee, monthly
250 000 (including VAT)
600 000 (including VAT)
800 000 (including VAT)
Data allowance covered by service fee
3 Mbps
3 Mbps
3 Mbps
Overage rate, per Mbps*
1 500 (including VAT)
1 500 (including VAT)
1 500 (including VAT)
Attack response time, no more than minutes
4 min
instantly
instantly
Blocking attacks
by source IP
by source IP + malicious queries
by source IP + malicious queries
Consulting on vulnerability and incidents
available
available
available
Active vulnerability detection
available
available
available
Virtual Patching
unavailable
available
available
*The mechanism for calculating the monthly payment for load is as follows: the average bandwidth of prevailing traffic (in mbps) is accounted every three minutes. The monthly statistics are collected and the 30 largest values are discarded. From the 31th maximum channel load value (in mbps) 3 mbps is deducted (that is, included allowance) and multiplied by the rate specified in Table 1.
Cost of additional services
Service name
Normal+
Business+
Premium+
Allocation of additional IP, for 1 IP per month
50 000 (including VAT)
70 000 (including VAT)
150 000 (including VAT)
HTTPS filtering with certificate disclosure, one-time, per site
35 000 (including VAT)
35 000 (including VAT)
0
Activation of HTTPS filtering without disclosing certificates, one-time, per site
50 000 (including VAT)
50 000 (including VAT)
0
HTTPS filtering with certificate disclosure, including API allocation, one-time, per site
40 000 (including VAT)
50 000 (including VAT)
0
Notification of incidents over the phone
0
0
0
What is a DDoS attack?
DDoS attack is a cyberattack aiming to compromise a website by sending a large number of fake resource-intensive requests from tens and hundreds of infected computers from around the world.
Massive requests can be initiated by fraudsters or due to a website being in high demand for at a certain point in time.

All this leads to financial and reputational losses.
Advantages DDoS protection from Kcell
1
Automatic protection
Many filtering tools demand continued involvement of skilled professionals and manual tuning to combat sophisticated attacks. Our service does not require your attention or time. You will only learn about DDoS from reports.
2
Visual online reporting in your Personal Account
You can view your website traffic analysis for any period in online mode. This tool can be used to monitor the performance of your web applications.
3
Easy to activate
We allocate you an IP address on our network. Then you change the A-record of the DNS of your site - all traffic comes into our network and then, after being cleared, to your side. You don't need to change hosting.
4
DDoS response time - 30 seconds to 3 minutes
According to statistics, in 97% of cases attacks on a site are suppressed automatically in 2.5 minutes or less.
5
Filtering HTTPS traffic without decryption
We can protect websites without the need to transfer SSL certificates to us. So, clients are able to maintain the confidentiality of their data or transactions.
6
Traffic filtering point in Kazakhstan
One of the filtering points is located in the server room of Kcell, which allows filtering traffic on the territory of Kazakhstan.
Who needs protection from DDOS attacks?
Protection against DDOS attacks is for Companies whose collaboration environment is the Internet (websites, mobile applications).

It is important that the business resource be available on a 24/7 basis.

With DDoS protection, availability of the client's website increases to 99.5%.
Details
How does it work?
Thanks to the partners' (Qrator) distributed network of filtering points all over the world, traffic is filtered at the source of malicious traffic. For example, if malicious traffic originates from infected computers in the United States, then a filtering node located in the United States will prevent this traffic from reaching Kazakhstan.
What do you need to do to start filtering traffic?
To start filtering traffic from DDoS attacks, client must change the A-record of the domain to the IP of Kcell filtering server and provide an IP address to send cleared traffic.
What is A-record? And who can change it?
A-record is a record indicating the correspondence between a domain name and an IP address. It can be changed by the hosting provider (organization that originally provided the domain) who can do it himself or provide such opportunity through personal account.
How will I learn about attacks?
With activated service, you will learn about attacks from reports or through your client personal account.
Is it possible to find out who the attacker is?
It is possible to find the fraudster, however it is difficult and expensive as requires both significant technical resources and involvement of the law enforcement bodies. DDoS attacks are one of the most "anonymous" methods of attacking websites.
How to check if DDoS protection is on?
There are paid services on the Internet that can organize load testing on the client's website. (Unfortunately, Kcell does not provide this service).
How long does it take to activate the service?
For basic version (without additional options), it is 1 day.
Service activation request
Fill in all the necessary fields. After receiving and processing the application, our specialist will contact you.
Your name
Your phone number
Your email
By filling out this form, you give your consent to the collection, processing and storage of your personal data