Germany’s Federal Office for Information Security (BSI) has recognized Zero Services GmbH as a qualified DDoS mitigation service provider under Section 3 of the BSI Act (BSIG). We are now listed on the official BSI register of qualified providers.
What This Means
The BSI evaluates DDoS mitigation providers against 37 performance criteria, including: technical capacity, availability, response times, data protection compliance. Being listed means meeting the BSI’s requirements for professional DDoS defense.
The register helps operators of critical infrastructure (KRITIS) and federal agencies identify qualified providers.
Why This Matters to Us
We are a small, efficient team. No corporate parent, no venture capital, no 200-person sales team. We run our own network (AS215197), our own datacenters, and we built our own DDoS mitigation platform. We now stand alongside companies like Akamai, Cloudflare, and Deutsche Telekom — corporations with thousands of employees and billions in revenue. That the BSI places our work on the same level is something we are proud of.
What We Protect
Our DDoS protection service ZERO-PROTECT works in ten stages — from the network edge to the application layer. BGP Flowspec against volumetric attacks, JA4 TLS fingerprinting against bot farms, proof-of-work challenges, WAF with OWASP CRS. All manageable through a self-service portal.
No third-party dependencies. Direct peering with DE-CIX Frankfurt and AMS-IX. Your data stays in Europe (or optionally Germany-only).
The BSI Register
The full list of qualified DDoS mitigation service providers is available on the BSI website.