Is Sucuri’s protection compatible with all platforms?

Yes, Sucuri’s WAF is built to support all platforms and custom websites. It includes load balancing, global CDN, and machine learning-based threat detection to ensure high availability and performance.

HTTP/2 Rapid 
Reset Protection

Q: What is the HTTP/2 Rapid Reset vulnerability?

The HTTP/2 Rapid Reset vulnerability, also known as CVE-2023-44487, allows attackers to exploit the HTTP/2 protocol to launch large-scale DDoS attacks. It affects over 60% of websites using HTTP/2.

Q: How does Sucuri protect against HTTP/2 Rapid Reset attacks?

Sucuri’s Web Application Firewall uses heuristic and signature-based detection to sanitize traffic and automatically block HTTP/2 Rapid Reset and CVE-2023-44487 exploit attempts before they reach your server.

Protect your website and server resources from
CVE-2023-44487 and HTTP/2 rapid reset attacks.

Get Protection Chat Now

Icons of a flaming reset triangle and a secure shield—illustrating the threat of HTTP/2 Rapid Reset attacks and Sucuri’s protective security solutions.

What Is HTTP/2 Rapid Reset Protection?

The vulnerability in HTTP/2 protocol, known as HTTP/2 Rapid Reset, has potential for exploitation leading to devastating DDoS attacks.

It’s a fact: over 60% of the web uses HTTP/2, making the vulnerability a high-risk issue. Attacks have leveraged this flaw, leading to some of the most large-scale DDoS attacks ever witnessed.

Sucuri customers already enjoy robust protection against HTTP/2 rapid onset attacks. But if you’re not currently on our platform, we’re ready to help. Our web application firewall offers extensive protection against HTTP/2, denial of service attacks, and other threats.

How Sucuri Protects Against HTTP/2 Exploits

Our web application firewall is able to successfully mitigate attacks
that attempt to exploit the CVE-2023-44487 vulnerability.

Signature Detection

Sanitizes traffic via heuristic and signature-based techniques before it reaches your server.

Automated Blocking

Detects and mitigates HTTP/2 rapid reset, CVE-2023-44487, and DDoS attacks of every size.

Load Balancing

Support for load balancing and server failover configurations to help keep you online.

Zero-Day Prevention

Stops unknown vulnerability exploitation attempts against your website and server environment.

Global Network

Uses a globally distributed Anycast Network and secure content delivery to handle large traffic spikes.

Machine Learning

Correlates attack data to anticipate malicious behavior and protect your from malicious threats.

Built for all platforms and custom sites

Get Protected from HTTP/2 Rapid Reset & DDoS

Protection is just a click away. Our web application firewall automatically blocks fake traffic and DDoS attacks of all sizes, without interfering with your legitimate traffic.

Professional support available 24/7.

Chat to Learn More

Advanced Features of Sucuri’s WAF

Agnostic

Direct to Tier 3 Ticket Support

Unlimited

Chat Now

Why Choose Sucuri?

Before Sucuri, we had limited visibility into security threats and we spent a lot of time investigating and manually cleaning up breaches. Now we can get ahead of security issues and focus our attention elsewhere-which is a huge help when you have 50+ websites to support.

ITW Consulting

When it comes to website security, we want to provide our customers with the most exemplary service available. That’s why we have partnered with Sucuri. To expand on our commitment to offer only the safest hosting environment, Sucuri offers the best website malware cleanup, protection, and monitoring services in the business.

Vanessa Vasile, InMotion Hosting

Sucuri is more of an insurance policy to prevent problems. It does all of the work for us by blocking all things malicious. We are a web hosting provider, so how would it look if our own site was compromised or down?

Anton Resnick, Webhosting.net

Upgrade to Enterprise-Level Security

Get website security that scales as you grow. Easily upgrade to these Agency and Enterprise-level features at any time.*

SIEM Integration

Custom security incident and event management integration.

Custom Block Pages

Custom pages for traffic blocked by the web application firewall.

Monthly Payment Options

Convenient payment options at monthly intervals.

Onboarding Assistance

Customized onboarding, education, and a dedicated account specialist.

Advanced Priority Support

Beat the queue and promptly address website security issues.

Multi-Tenancy

Role-based account access to the Sucuri dashboard interface.

Dedicated Account Management

Account executives available 24/7/365 for full-event escalation.

Slack Integration

Set up and customize alerts and notifications for Slack.

Emergency Response SLAs

Priority response escalation services for faster resolutions.

* Additional costs for Agency and Enterprise features.

Frequently Asked Questions

What is the HTTP/2 Rapid Reset vulnerability (CVE-2023-44487)?

The HTTP/2 Rapid Reset vulnerability (CVE-2023-44487) allows attackers to flood servers with rapid stream resets, overwhelming resources and causing denial-of-service (DoS) conditions. It’s a protocol-level flaw that has been exploited in large-scale DDoS attacks.

How does Sucuri protect against HTTP/2 Rapid Reset attacks?

Sucuri’s Web Application Firewall (WAF) uses signature detection, heuristic analysis, and machine learning to identify and block HTTP/2 Rapid Reset exploits in real time. Our global infrastructure ensures uptime and performance even during attack surges.

Is CVE-2023-44487 a zero-day vulnerability

Yes, CVE-2023-44487 was initially exploited as a zero-day, meaning it was actively used in attacks before public disclosure. Sucuri’s proactive threat detection helped mitigate the risk before widespread awareness.

Can Sucuri’s WAF prevent future zero-day vulnerabilities?

Absolutely. Sucuri’s WAF is designed to detect anomalies and unknown threats using behavioral analysis and machine learning, offering protection even against emerging zero-day exploits.

Is this protection available for all websites?

Yes. Sucuri’s WAF supports websites across all platforms, including WordPress, Joomla, Magento, and custom-built sites. Our protection is platform-agnostic and works at the protocol level.

How does Sucuri compare to other security providers?

Unlike general DDoS protection tools, Sucuri specifically addresses HTTP/2 vulnerabilities like CVE-2023-44487. We offer personalized onboarding, advanced threat detection, and enterprise customization that many competitors lack.

HTTP/2 Rapid Reset Protection

Protect your website and server resources from CVE-2023-44487 and HTTP/2 rapid reset attacks.