DDactic

DDactic provides a platform for continuous attack surface discovery, DDoS resilience testing, and automated hardening of protection infrastructure. The company was founded by a practitioner who spent over four years running DDoS resilience engagements for enterprise clients including banks, insurance companies, payment processors, and critical infrastructure operators in Israel. The platform operates in three phases. The first phase, black-box intelligence, performs passive and active reconnaissance without credentials or agents, pulling data from multiple intelligence sources such as crt.sh, Shodan, Censys, SecurityTrails, VirusTotal, Hudson Rock, HaveIBeenPwned, DeHashed, and others to enumerate subdomains, detect origin IP exposure, and map CDN, WAF, and scrubbing center topology. The second phase runs synthetic DDoS resilience simulations from a distributed load-testing infrastructure spanning more than 20 cloud platforms, covering Layer 3 to Layer 7 protocol simulation (HTTP, DNS, TCP, gRPC), CDN bypass path identification, and risk scoring, without sending traffic to production systems unless explicitly authorized. The third phase, described as hardening as code, generates vendor-specific CLI commands and API scripts for platforms such as Cloudflare, AWS WAF, Azure, GCP, Imperva, F5, Akamai, and Fastly, intended to replace manual PDF-based recommendations with directly applicable configuration changes, including before/after validation and reporting. DDactic targets organizations that maintain layered DDoS and web protection stacks and seeks to replace periodic, project-based resilience testing with a continuous, automated monitoring and hardening loop.