E
ESA
E
Edge Security Acceleration

A Unified AI-Native
Web Application Platform

Powered by Edge Cloud

Edge Cloud Dept. — ESA Product | May 2026
Overview

What We'll Cover

01
A Unified Platform
Challenges of Modern Web App in AI-Era and ESA's Solution
02
AI-Ready Capabilities
AI-Ready Acceleration, Security, Edge Computing & Observability
03
Plans & Get Started
From Free to Enterprise – Scale with Global Infrastructure
04
User Scenarios
Tailored Solutions for Diverse Needs & Industries
01

A Unified Platform

Challenges of Modern Web Applications in the AI-Era
and ESA's Solution

Challenges

Why Legacy Stacks Fail
in the AI Era

DevOps
Managing multi-services (DNS, CDN, WAF, DDoS, Anti-Bot, Compute) from different vendors creates complex SRE overhead, increasing operational risk and configuration drift.
🛡
Security
Static defense rules and siloed security tools fail against AI-driven automated threats. Legacy WAFs lack unified context, leaving origins exposed.
📊
Data-driven
Fragmented data obscure real-time user insights. Legacy stacks lack unified visibility into traffic trends, geographic distribution, and performance metrics.
💰
Cost
High upfront costs and unpredictable billing models hinder lean startup agility. Traditional providers often charge for attack traffic or overage.
🌐
Globalization
Inconsistent cross-border latency and complex multi-vendor management slow global expansion. Regional deployment leads to operational drift.
Solution

ESA: Empowering Modern Organizations

A Single AI-native Platform for Edge Security, Acceleration & Multi-Team Workflows

👤 User
End Users & Clients
🛡️ ESA
Edge Security Acceleration Platform
Acceleration Security Compute
🖥 Backend
Origin Servers & Services
SRE / Ops Team
  • Global caching & acceleration
  • IaC & API Integration
  • Real-time SLO monitoring
  • Cost optimization via caching
Security / Network Team
  • AI-driven WAF & DDoS mitigation
  • Automated bot detection
  • API security & schema validation
  • Compliance-ready audit logs
Dev / DevOps Team
  • Serverless edge functions
  • Edge SSR for React/Vue
  • GitOps-native CI/CD
  • MCP Server for AI coding
Data / BI / Management
  • Real-time log streaming
  • Geo-distribution analytics
  • Performance metrics (TTFB)
  • Custom dashboards for KPIs
Platform

ESA: A Unified Web Application Platform

One-stop Solution to Accelerate, Secure & Scale Your Web Application

3200+
Global POPs
180Tbps+
Bandwidth Capacity
🌐
Global Acceleration
3200+ POPs worldwide with 180Tbps+ bandwidth capacity for deterministic low-latency delivery.
🛡
AI-driven Security
AI-powered WAF, DDoS mitigation, bot detection and API security all at the edge.
Edge Computing
Serverless functions, SSR, KV storage, and MCP Server for AI-native development.
📈
Real-time Analytics
Built-in dashboards for traffic, security events, and performance monitoring.
🔒
Traffic Management
DNS, SSL, load balancing, waiting room, and version control at the edge.
🆕
Free DNS / SSL
Free SSL certificates, DNS hosting, and basic DDoS protection to get started.
Evolution

From Legacy CDN to the New AI-native ESA

Leveraging Mature Edge POPs to Rebuild the Foundation for Web & AI Applications

2014
Commercial CDN
Based on years of best practice from Taobao and Youku private CDN
2018
DCDN (Original)
Beyond legacy caching, supports dynamic acceleration for non-cacheable content and multi-protocol transmission
2020
ESA v1.0
Integrated enterprise-grade security engines directly onto the edge, enabling real-time WAF & DDoS protection
2024
Unified Platform
ESA launched as a unified platform, merging global acceleration, native security, and serverless computing
2026
AI-native ESA
Empowered by Alibaba's full-stack AI, ESA evolves to neutralize AI-driven threats and host AI workloads
02

AI-Ready Capabilities

AI-Ready Acceleration, Security, Edge Computing & Observability

Overview

ESA's AI-Ready
Core Capabilities

Unifying Acceleration, Security, Compute, and Observability on a Single AI-Native Plane

🌐
Intelligent Global Acceleration
Unified static/dynamic content delivery, cross-region acceleration, and LLM API acceleration (L4-L7). Supports HTTP/3, gRPC, WebSocket and private Layer 4 protocol.
🛡
AI-Native Security & Defense
AI-driven WAF and Deep Learning DDoS mitigation. Machine-learning-based anomaly behavior detection. AI Bot Control & AI CAPTCHA to defeat AI abuse.
Serverless Edge Computing
Functions & Pages with global distributed deployment. MCP Server Integration for LLM agents. KV storage for low-latency state management.
📈
Observability & Analytics
Real-time log delivery to SLS or 3rd-party SIEM. Built-in dashboard for traffic analytics, security events, and performance monitoring.
Acceleration

Intelligent Global Acceleration

Unified Acceleration for Static Assets, Dynamic APIs, and AI-driven Workloads

💾
Advanced Caching & Purge
Intelligent tiered caching with customizable rules. Instant purge & prefetch tools, backed by a real-time cache analytics dashboard.
📈
Smart Routing
Real-time network probing dynamically selects the optimal path. Ensures deterministic low latency for dynamic LLM API, normal APIs and interactive apps.
🌐
Full Stack Protocols
Native L4 (TCP/UDP) proxy for private protocols. Full support for HTTP/3, QUIC, WebSocket, and SSE optimization for LLM token streaming.
📡
Global Backbone
Leverages a dedicated global backbone and specialized cross-border links. Guarantees high stability with industry-leading coverage in Asia & China.
3200+
Global POPs
180Tbps+
Bandwidth
<10ms
Edge Latency
Security

AI-Native Security & Defense

Intelligent Protection Powered by AI-driven Security Engine and Scenario-based Solutions

01
WAF: Precise Access Control
  • Managed Rules Prevent OWASP Threats
  • Zero-day Vulnerability Protection
  • Custom Rules (IP, Location, etc.)
  • Request Fingerprint
  • Custom/Smart Rate Limiting
  • Abuse Prevention & Scan Protection
02
DDoS: Mitigate Flood Attack
  • Layer3/4 Volumetric DDoS Protection
  • Layer 7 HTTP Flood Protection
  • Web Resource Exhaustion Protection
  • Deep Learning AI Patterns Mitigation
  • Tbps-Level DDoS Scrubbing
  • Global Anycast Network
03
Bot: Manage Automated Traffic
  • One-click Smart Mode / Custom Rulesets
  • AI Protection Engine for Bot Behavior
  • Legitimate Bot Management
  • Bot Threat Intelligence Library
  • Fake Spider Blocking
  • Web/Native APP Bot SDK
04
Scenario: API / Account
  • API Discovery & Monitoring
  • API Schema Validation
  • API JWT Token Authentication
  • ATO (Account Takeover) Protection
  • Anomalous Login Behavior Detection
  • Origin Protection & AI Captcha
Computing

Serverless Edge Computing

Run JavaScript Business Logic at the Edge with AI-native Tooling

Millisecond Page Rendering (Edge SSR)
Deploy React/Vue SSR at the edge. Delivers ultra-fast TTFB, cuts origin load, and boosts SEO.
🤖
Vibe Coding & Agentic Support
AI Coding assistant + MCP Server. AI agents can generate, debug, and deploy edge functions directly via natural language prompts.
AI Coding MCP Server Deploy by Agent
📈
Client-Side Log Pre-processing
Filter and aggregate client logs at the nearest POP using JS & ZSTD. Drastically reduces origin bandwidth and compute costs.
🗃
Distributed KV Storage
Read/writes across distributed POPs. Perfect for low-latency API gateways, session storage, and config sync.
🌐
Global Deployment
Compatible with Deno & Node.js. Edge SSR support for React JS. Native integration with GitHub. 20+ ecosystem capabilities.
Deno Node.js React JS GitHub
📝
Pages & More
Static pages hosting, Cache API, CLI, Logs, and 20+ additional ecosystem features for edge-native development.
Innovation

Cloud-to-Edge Convergence

Offload AI Workloads Close to End Users, Powered by Distributed AI Gateway & Edge Containers

🤖
AI Gateway
Intelligent LLM API Key management, traffic routing, security, and analytics. Brings AI inference closer to end users for reduced latency and improved throughput.
📦
Edge Container
Ephemeral lightweight container runtime optimized for distributed & AI workloads. Deploy stateful AI inference and microservices at the edge.

More advanced edge-native capabilities are under development and launching soon...

Observability

Observability & Analytics

Built-in Real-time Observability & Seamless Integration with 3rd Party SIEM/SOC/BI Workflow

📈 Built-in Observability

  • Real-time Instant Logs
  • Traffic Distribution Analytics
  • Traffic / Security / Cache Analytics
  • One-click Filtering
  • Performance Monitoring
  • Header Passthrough

📦 Real-time Log Delivery

  • Alibaba Cloud SLS
  • Selectable Default Fields
  • OSS, S3 / S3 Compatible
  • Custom Fields
  • Custom (HTTP Post, Kafka)
  • Log Filtering — ALL FREE
Integration

More Integrated Features for
Web Application Ops

Unified Control Plane for DNS, SSL, Traffic Management, and DevOps Automation

🔌
DNS
  • NS mode (DNS hosting)
  • CNAME mode (No migration)
  • DNS Analytics
  • SaaS Manager
  • CNAME Flattening
  • Static Anycast IP
🔒
SSL
  • Free SSL Certificate
  • Bring Your Own SSL
  • mTLS
  • Keyless SSL
  • Custom TLS Cipher
  • Post-quantum encryption
🔀
Traffic
  • Origin Pools (Multiple origin)
  • Load Balancing (Global)
  • Waiting Room
  • Rewrite URL and Origin
  • Header Modification
  • Custom Response Code
DevOps Mgmt.
  • Version Management
  • Canary Release
  • Terraform for IaC
  • OpenAPI, CLI and SDK
  • AI Skills & MCP Server
  • Landing Zone & Cloud SSO
03

Plans & Get Started

From Free to Enterprise – Scale with Global Infrastructure

Pricing

Plans for Every Scale
& Growth Stage

From Free Entrance to Enterprise Scale: Optimize Cost & Performance

Entrance
Personal & Dev
Free
  • Free Forever
  • CDN & Analytics
  • Basic DDoS Protection
Pro
Small Enterprise & Startup
$15/mo
  • 500GB Free Traffic
  • Chinese Mainland POPs
  • SLA Guarantee
  • Real-time Log
Enterprise
Large Enterprise
Custom
  • Flexible Upgrade
  • Enterprise Bot & DDoS
  • Layer 4 Protocol
  • Managed Service
Comparison

ESA Plans Comparison

From Personal Website Hosting to Large Enterprise Custom Solutions

Feature Entrance Pro Premium Enterprise
Monthly Subscription$0$15$249Custom
Free Traffic IncludedUnlimited500GB1500GBCustom
CDN & Analytics Dashboard
Basic DDoS Protection
SLA Guarantee
Chinese Mainland POPs (ICP)
Real-time LogCustom
Basic Bot ProtectionCustom
Waiting Room, Version ControlCustom
Enterprise Bot & DDoSCustom
Layer 4 Protocol (TCP/UDP)Custom

Refer to official documentation for detailed comparison.

Onboarding

Get Started Immediately

Self-Serve Console Activation for Standard Plans, Dedicated Onboarding for Enterprise

Self-Serve Plans
Entrance → Pro → Premium
Choose Plan Configure Go Live
Enterprise Customization
Contact Sales → Custom Solution → Dedicated Onboarding
Custom Quote Agreement Onboarding
Start Free Now →

https://www.alibabacloud.com/en/product/esa

04

User Scenarios

Tailored Solutions for Diverse Needs & Industries

Modular

Tailored Solutions for
Diverse Needs

Modular Architecture Allows You to Pick and Choose Capabilities, Balance Cost & Features

🌐
CDN Only
Cost Effective Price Basic Anti-DDoS Traffic Analytics Page Rules Free SSL & DNS Free Speed Monitor
🔒
Web & API
Smart Routing API Security Waiting Room Load Balancer Version Mgmt Edge Computing
🛡
Security
OWASP Protection 0-day Protection DDoS Mitigation AI Crawler Control Bot SDK SIEM Integration
🌐
Cross Region
Global Acceleration Global Backbone China Optimization Anycast Network
🤖
AI Acceleration
AI Gateway SSE Optimization Rate Limiting Geo-location Control
Industries

Tailored Solutions for
Different Industries

Empowering Global Growth with Industry-Specific Strategies

🏦
Finance
PCI-DSS Compliance
API Security
High Availability
🎮
Gaming
TCP/UDP Acceleration
Gaming DDoS Shield
Fast Patch Delivery
🛒
E-commerce
Flash Sales Traffic
Global Expansion
Personalized Experience
🤖
AI & SaaS
LLM API Acceleration
Edge Sandbox
AIGC Content Delivery
🎥
Media
HLS/DASH Video
OTT Platform Security
Audience Analytics
E

THANK YOU!

Edge Security Acceleration — A Unified AI-native Web Application Platform

Learn More About ESA →

Edge Cloud Dept. — ESA Product | May 2026

Use arrow keys or Space to navigate