Clean your website traffic from $10/month.Hide your origin with EchoNod from $99/month.
Shield cleans every visit and veils every response, but does not hide your origin. EchoNod adds origin cloaking: an outbound agent on your origin dials out to a NodPulse gateway, so you close every inbound port and your server leaves public DNS.
Visitors reach NodPulse. Your server stays out of sight.
NodPulse sits in front of your site. With Shield, every visit is cleaned on the way through. With EchoNod, your server dials out to NodPulse, so nothing on the internet can reach it directly.
Your website is sitting at a fixed address, bleeding information to everyone watching.
Your origin IP is in public DNS. Every response tells the world what you run. Third-party trackers ride in on every visit. Scanners probe your endpoints at a static address that never changes.
None of this is a bug. It's how the web works by default. Most security products try to protect you from attackers after they've mapped you. NodPulse removes the map.
Two entry points. Same cleaning engine.
Start wherever you're comfortable. Shield is the fastest path in — point one A record at a NodPulse gateway and you're cleaning traffic in minutes. EchoNod adds origin cloaking: run the agent, close your inbound port, and your origin leaves public DNS.
Point one A record at a NodPulse gateway. Every visitor passes through the gateway and is cleaned before reaching your origin; every response is veiled on the way out. Shield does not hide your origin — it cleans and veils traffic. Your CDN and DNS provider stay in place.
Need more? GateNod ($499/mo) splits every request across three blind relays for up to 25 domains and is available now on smb.nodpulse.com. Dedicated ($299/mo, up to 10 domains) is coming. Enterprise is sales-led from $1,499/mo. See all plans →
Keep your CDN. Keep your DNS provider. We clean what passes through them.
You don't have to rip anything out. Veil runs on the NodPulse gateway in front of your origin: a strip-pass on every request coming in, a veil on every response going out. Your intermediaries see a NodPulse gateway, not your stack.
Every request is cleaned before reaching your origin
Tracking query parameters dropped (utm_*, fbclid, gclid and more). Tracker cookies removed from the Cookie header while your own session cookies pass. Cross-site referrers reduced to their origin. High-entropy fingerprint client-hint headers dropped; user preferences like DNT kept. Malformed request shapes rejected.
Every response is veiled before it leaves
Server, X-Powered-By, Via and other fingerprint headers stripped and replaced with Server: NodPulse. Headers emitted in a fixed order so responses don't identify your stack. Set-Cookie lines that plant tracker cookies dropped. The body passes through untouched.
One A record. Five minutes. Protection starts now.
Create an account, add your domain, and point one A record at the gateway we assign you. Shield starts with a 14-day trial (card required). EchoNod adds a one-line agent install on your origin.
Frequently asked questions
What is NodPulse?
NodPulse sits in front of your website. Shield ($10/mo) cleans every visit and veils every response, but does not hide your origin. EchoNod ($99/mo) and up add origin cloaking: an outbound agent on your origin dials out to a NodPulse gateway, so it has no inbound port and no public address. Point one A record at a NodPulse gateway to start.
How does NodPulse work?
You connect in one of two ways: point one A record at a NodPulse gateway (Shield), or install the outbound agent on your origin so it dials out and you close every inbound port (EchoNod and up). The gateway runs a strip-pass on every request and veils every response.
How much does NodPulse cost?
Shield is $10 per month for one domain with a 14-day trial. EchoNod is $99 per month for up to 3 domains. GateNod is $499 per month for up to 25 domains. Dedicated ($299, up to 10 domains) is coming soon, and Enterprise is sales-led from $1,499 per month.
Does NodPulse hide my origin IP?
EchoNod, GateNod, Dedicated and Enterprise cloak your origin: the agent dials out so your origin has no inbound port and no public address. Shield does not hide your origin; it cleans and veils traffic through the gateway.
Is there a free trial?
Shield starts with a 14-day trial and a card is required. You can cancel any time.
How do I get started?
Create an account or sign in at nodpulse.com/app, add your domain, and point one A record at the NodPulse gateway we assign. EchoNod adds a one-line agent install on your origin.