Corero Network Security

Corero sells DDoS mitigation as a product rather than as a feature bundled into a CDN, aimed specifically at internet service providers, hosting companies and carriers who need to protect their own network — and, by extension, every customer sitting behind it — rather than a single website. The SmartWall product line runs as physical or virtual appliances, detecting and automatically mitigating an attack in real time rather than routing traffic to a scrubbing centre after the fact.

That automated, in-line model is the distinguishing choice: a scrubbing-centre approach can take minutes to reroute traffic once an attack is detected, long enough for a volumetric flood to have already done its damage, while an appliance sitting in the data path can start dropping malicious packets within seconds of the pattern appearing.

Corero Network Security plc is listed in London, with its operating UK subsidiary registered in England and Wales (company number 04047090, incorporated in 2000 as Top Layer Networks Limited). Pricing is enterprise and appliance-based, quoted per deployment rather than published, and buying it means capital equipment or a managed service contract rather than a monthly SaaS bill. It is built for the operator layer of the internet, not for a single e-commerce site.

What Corero Network Security does well

• Automated, real-time DDoS mitigation, not scrubbing-centre rerouting
• SmartWall physical and virtual appliances
• Built for ISPs, hosting providers and carriers
• Publicly listed UK company (London)
• DDoS lineage stretching back to Top Layer Networks (2000)

Where Corero Network Security falls short

• Enterprise, appliance-based pricing on request only
• Aimed at network operators, not single websites
• UK jurisdiction, adequacy decision rather than EU establishment
• Capital-equipment or contract commitment, not a SaaS signup

Standout feature. Mitigation in the data path within seconds, not a reroute to a scrubbing centre after the flood has already landed.