Bots get bounced.
Humans get through.
Point a subdomain at Crenel, upload your site, and every visitor is checked across eight layers before they reach your content. No servers. No config.
✓ 8 detection layers✓ 5 rotating themes✓ 50k IP blocklist✓ Bring your own domain
Pages you send to people, not pages you publish
Same gate, different job. If a link should only work for the person you gave it to, this is what it is for.
Client previews
Send a build or a deliverable to a client on their own domain. It stays out of search results, and the link dies when you delete the host.
Event invitations
Invitation and RSVP pages on a real domain, without a guest list ending up scraped into somebody else’s spreadsheet.
Portfolio and agency work
Case studies and previews that only open for a prospect you sent them to, not the whole open web.
Paid resources
Files, guides or communities behind the check, so a paid link is not a public link the moment it leaks.
Staging and handover
A staging copy of a site sitting on infrastructure you control, protected before it is ever public.
Anything under NDA
Work that cannot appear in an index while it is in review: the crawler gets a challenge, never the content.
Private by default
A public URL is a permanent one. Crenel flips that: the content is only served to a browser that passed a human check, so drafts do not surface in search, client work does not get scraped, and an invitation list does not become somebody’s marketing database.
✓Not indexed
Crawlers get the challenge, not your page.
✓Not scraped
Headless browsers and bulk fetchers are scored and bounced.
✓Still fast
A human is through in a few seconds, once every few hours.
Live in three steps
No servers to run, no config to learn. If you can upload a zip, you can launch a protected site.
01
Provision a subdomain
Pick a prefix and a domain. Your host is live with a challenge gate in seconds, no DNS to touch.
02
Upload your site
Drop a zip of your static site or PHP app. Files land on the platform, served over HTTPS automatically.
03
Every visitor is checked
Humans solve a quick check once, then pass for hours. Bots, scrapers and headless browsers get bounced.
Built to keep bots out
Eight detection layers run in the visitor's browser and on the server, so automation has no single choke point to learn.
✓
8 detection layers
Headless detection, frame-timing analysis, audio fingerprinting, honeypot traps, Turnstile, isTrusted checks, nonce validation and a 50k IP blocklist.
✓
5 rotating themes
The challenge page looks like a normal check, not a security tool. Cloud, white, soft, warm and slate themes rotate per subdomain.
✓
Bring your own domain
Pro and Agency plans point your own domain at your sites. Your visitors see your brand, not a platform subdomain.
✓
Real-time analytics
Requests, blocked traffic, challenge pass rates and the exact detection layer that caught each bot, per subdomain.
✓
Uptime monitoring
Every host is probed every minute. A down site shows up in your dashboard before your visitors notice.
✓
PHP support
Static sites and PHP apps both work. Upload a zip, pick your index, done.
Simple pricing
Pick a 1, 3 or 12 month term. Paid in crypto, activated the moment the network confirms.
Starter
$29 / month
- 1 protected subdomain
- 1 GB static storage
- No custom domains
- 5 challenge themes
- All protection levels
- Usage analytics
Most popular
Pro
$59 / month
- 3 protected subdomains
- 5 GB static storage
- 3 custom domains (bring your own)
- 5 challenge themes
- All protection levels
- Usage analytics
Agency
$149 / month
- 8 protected subdomains
- 20 GB static storage
- 10 custom domains (bring your own)
- 5 challenge themes
- All protection levels
- Usage analytics
Need more subdomains, storage or a custom setup? Talk to us after you sign in.
Questions, answered
Your site. Their bot problem.
Join the platform and put an eight-layer check between your content and the automation trying to take it.
Create an account