Neustar SiteProtect NG: DDoS Protection Overview and Analysis

eSecurity Planet content and product recommendations are editorially independent. We may make money when you click on links to our partners. Learn More.

See our complete list of top DDoS vendors.

Company Description

For over 20 years, Neustar has offered performance monitoring, managed DNS and distributed denial of service (DDoS) defense solutions. Originally part of Lockheed Martin, it divested in 1999 and is now privately held.

Product Description

Neustar SiteProtect NG offers both on-premises and cloud options. With 4 Tbps of capacity (increasing to 10 Tbps over the next few months), its cloud-based DDoS protection service scrubs malicious traffic to defuse large and complex attacks. It can put countermeasures in place to limit exposure, protect a site’s uptime and preserve a brand’s reputation. Neustar provides automated mitigation across multiple attack vectors. It recently launched an integrated Web application firewall (WAF) solution that works in tandem with its cloud DDoS mitigation.

“Research shows cybercriminals have adapted their attack strategies and are now executing more targeted strikes on a brand’s entire network by taunting defenses and probing network vulnerabilities,” said Nicolai Bezsonoff, vice president and general manager, Neustar Security Solutions.

Markets and Use Cases

Financial services, technology, large ecommerce, retail, utilities, gaming


Neustar is currently capable of absorbing and defending attacks of greater than 4 Tbps. By year’s end it will grow that number to 8 Tbps, and 10 Tbps by Q1 of 2019. Its average time to mitigate is under 90 seconds.


Neustar’s security operations center (SOC) utilizes a combination of threat analytics based on its DNS footprint (10 percent of authoritative DNS passes through Neustar), plus external threat feeds. It also monitors hacker forums/IRCs, social media and other intelligence sources to maintain awareness of developing threats. Its SOC makes use of real-time packet capture and deep packet inspection to spot anomalous trends and craft very granular mitigations to drop only the undesirable traffic.


Cloud-based with on-premises hardware options that can also provide hybrid DDoS protection and a web application firewall in its always-on (always routed or always proxied) configurations.


No agents used.


Neustar offers pricing based on the level of risk rather than the traditional pay-per attack.

Get the Free Cybersecurity Newsletter

Strengthen your organization’s IT security defenses by keeping up to date on the latest cybersecurity news, solutions, and best practices. Delivered every Monday, Tuesday and Thursday

Drew Robb Avatar

Subscribe to Cybersecurity Insider

Strengthen your organization’s IT security defenses by keeping abreast of the latest cybersecurity news, solutions, and best practices.

Top Cybersecurity Companies

Top 10 Cybersecurity Companies

See full list

Get the Free Newsletter!

Subscribe to Cybersecurity Insider for top news, trends & analysis