realcorvus
Hi Elixir Forum,
I’ve been working on Paraxial.io for a while now, and am excited to announce the beta is officially live! Here’s the announcement post.
If you currently use reCaptcha or a CDN based bot defense (Cloudflare, Akamai, etc.), you’re familiar with the problems bots cause. I’ve seen bypasses of both these systems via:
- Outsourced/automated captcha solving.
- Hosts leaking their IP address, leading to the CDN protection being completely bypassed.
The key features of Paraxial.io are:
- You install the agent through your mix file.
- You can define a rule like, “If an IP sends > 10 logins in 10 seconds, ban it”. Unlike a CDN based approach, this cannot be bypassed due to a host IP leak.
- If an attacker is using a cloud server (AWS, GCP, etc.) for a large pool of IPs (see Bypassing IP Based Blocking with AWS API Gateway), the Paraxial.io agent can be configured to block cloud provider IPs.
- You control the data you want to send to the Paraxial.io backend, unlike a CDN where all your data has to pass through a third party server.
- A nice dashboard showing allowed and blocked requests.
The price for a personal account is $27 per month, where your site has less than 10,000 good events per month. If you sign up for the beta and provide feedback, I’m happy to drop that to $9. Business pricing scales with the number of requests.
To get access, email support@paraxial.io and I’ll add your email to the approved users list.
I hope this is posted under the correct category, I can move it if it violates a forum rule. Thank you!
Where Next?
Trending in Discussions
Other Trending Topics
Latest on Elixir Forum
Sponsor Spotlight
Catch errors, track performance, monitor hosts and more.
Categories:
Sub Categories:
Forums
Popular Tags
- #ecto
- #liveview
- #troubleshooting
- #learning-elixir
- #library
- #deployment
- #erlang
- #testing
- #genserver
- #mix
- #absinthe
- #remote-other
- #otp
- #plug
- #how-to-question
- #macros
- #postgres
- #elixirconf
- #channels
- #exunit
- #discussion
- #code-sync
- #podcasts
- #javascript
- #onsite
- #dialyzer
- #docker
- #authentication
- #umbrella
- #full-time-contract
- #podcasts-by-brainlid
- #ecto-query
- #ai
- #elixirconf-us
- #blog-post
- #elixir-ls
- #phoenix_html
- #iex
- #graphql
- #genstage
- #websockets
- #supervisor
- #advent-of-code
- #distillery
- #processes
- #api
- #forms
- #elixirconf-eu
- #metaprogramming
- #hex
Our Sponsors
Build Elixir applications with speed and confidence.
Supporting innovation across the BEAM ecosystem.
We build reliable cloud platforms for business-critical systems.
Error tracking, logs, uptime, and Just Enough APM. Built for developers.
Elixir, Erlang & BEAM conferences from Code Sync - join us in 2026!
Master modern tools, write cleaner code, and tackle real-world challenges.
Bringing learning, work and compliance together since 1987.
Producing high quality Elixir screencasts since 2017.
The team behind Membrane, Popcorn, LiveDebugger. Available for hire.
Courses that'll move you from confusion to "Aha, now I get it!"
Showing Posts 1 to 10- Show Best Posts
- Show All (oldest first)
- Show All (newest first)
realcorvus
Hi everyone, just a brief update, the beta is no longer invite only! I’ve published a step-by-step guide to installing Paraxial via mix here - Getting started with Paraxial.io, Free Tier — Paraxial v2.10.0
To create an account, just visit - https://app.paraxial.io/users/register - and sign up. The agent is hosted on Hex, and installation only takes a few minutes.
marcin
Hey @realcorvus
I lately noticed that Elixir Companies website is down and it seems the maintainers do not know how to deal with spam – perhaps you could afford the generosity to offer a free plan for that project which promotes elixir?
It looks like adding Paraxial to a website is a breeze.
realcorvus
It’s a good idea, since Elixir Companies is not run for profit and contributes to the Elixir ecosystem. Paraxial.io is able to detect spam/bot submissions as well.
pedromtavares
Tried using this but it depends on httpoison 1.0 which is a bit absurd given the latest version has been 2.1.0 for quite a while. I use v2 of httpoison because data streaming is a core part of my app so this was a hard stop for me
realcorvus
Very sorry you ran into this issue, the agent has been updated to include the new versions of httpoison - paraxial | Hex
realcorvus
Hi Elixir Forum,
Paraxial.io 2.0 recently launched, here’s the announcement blog post - Introducing Paraxial.io 2.0
And a video overview of the features:
The original launch was just over a year ago, and focused on stopping bot attacks. This release helps you ensure the Elixir application you deploy cannot be hacked. For example, the sites overview page gives a list of your current sites, if they are exposed to the internet, and a summary of vulnerabilities.
There are a number of security metrics relevant to Elixir applications, including:
The new Overview page for each site displays the most relevant information on one screen.
A common barrier to using security tools in Elixir is the high number of initial findings. Paraxial.io is able to prioritize findings by severity, and provide details on how to fix the issue.
The mix task is fully compatible with your CI/CD pipeline, because it runs as normal Elixir code. For example, you can configure a Github action to check each new pull request for security problems.
If no issues are found the build is successful.
The feedback and support from the community has been really fantastic, and this release incorporates so many things learned over the last several months. Thank you all for the support, I’m so grateful to be working in Elixir, and hope this release will encourage further adoption of the language.
realcorvus
Hello Elixir forum, it has been 2 years since Paraxial.io first went live, and I would like to thank you all for the incredible feedback and support you have shown. The goal of Paraxial.io is to help developers secure their work, and today I’m very excited to announce a free non-commercial tier: Paraxial.io is Free for Elixir Developers
You can sign up now, no credit card required, and use most of the available features to improve the security of your side project, academic work, or just learn more about appsec. The free tier limits:
Mostafa86
I tried to create an account and boom I am banned
Don’t know why this is the case ?!
cmo
How come the priciing is hidden and you have to send an email to upgrade? I generally refuse to use products that make you schedule a call or whatever just to try it.
realcorvus
Sorry about that, recently there have been a large number of spam signups. I sent you a DM.