Peak DDoS traffic hit 545 Gbps in 2024. Overload.su simulates real attack vectors so you know exactly where your infrastructure fails — before the incident report lands.
Recorded incidents in 2024. Peak attack traffic exceeded 545 Gbps.
Rise in UK critical cyber incidents year-over-year per NCSC data.
UK companies that experienced a cyberattack in 2024.
HTTP/HTTPS floods with real browser fingerprints. Login storms. Password reset abuse. Search endpoint exhaustion. Cart stuffing. The attacks that bypass bandwidth monitoring and kill your database.
SYN floods that exhaust connection tables. UDP amplification through open resolvers. Your load balancer and firewall state tables tested at line rate.
ICMP floods, ping of death, fragmentation attacks. Verify your upstream scrubbing actually works before you need it.
Model attacks from your OpenAPI spec. Specific endpoints, specific payloads, specific failure modes. Not generic traffic — your traffic.
Gradual increase from baseline to 10x. Watch latency percentiles. Find the exact VU count where p99 crosses your SLO.
Zero to max in 5 seconds. Your K8s HPA has 60 seconds. Cloudflare has 30. The spike reveals whether your scaling policies work.
Run at 80% for 4 hours. Memory leaks, connection pool exhaustion, log disk fill, GC pressure. The failures that only appear over time.
Increase until error rate hits 5%. Keep going. Document every degradation: latency spikes, partial outages, cascade failures. That's your incident runbook.
Test your own systems, learn, prepare for bug bounty
Continuous resilience in CI/CD
Compliance, dedicated capacity, on-prem