Questions about Tryam

What is Tryam?

Tryam is a managed web application firewall (WAF) from AISec Private Limited. Point your domain at Tryam and it filters attacks before they reach your site, with HTTPS included. AISec Private Limited is an Indian company based in Noida, Uttar Pradesh.

Which attacks does Tryam block?

Tryam blocks SQL injection, cross-site scripting (XSS), path traversal, command injection and more. It also applies per-site and per-path rate limits, for example on a login page, and cuts off an address that floods a site.

How do I put a website behind Tryam?

Onboarding takes three steps: add the domain and where the server lives, publish one DNS TXT record to prove ownership, then point the domain's A record at Tryam.

Will Tryam block real visitors when I turn it on?

New domains start in detect mode, so you see what would be blocked before you enforce anything. You switch to block mode when you are happy with what you see.

Is HTTPS included?

Yes. HTTPS certificates are issued and renewed automatically for every domain you add.

Can Tryam protect APIs and AI applications?

Yes, on the Pro and Business plans. API protection covers OpenAPI schema validation, JWT checks and object-enumeration (BOLA) alerts. The AI firewall covers prompt injection, jailbreaks and data leaks such as personal data and secrets. Every plan includes API discovery.

Where does Tryam's edge run, and what happens if part of it fails?

Tryam's edge runs on three servers: two in Mumbai and one in Singapore. Each one protects traffic on its own. An edge location cut off from the control system keeps protecting traffic with its last configuration, and if the main control server fails, a standby takes over in about two seconds.

Does Tryam help with CERT-In reporting?

For an incident, the console prepares a draft CERT-In report, filled in from what the firewall saw, to help you meet India's 6-hour reporting rule. You review it and send it yourself.

What can I see in the console?

Traffic and blocked requests per domain, and a searchable security event log that can be exported as CSV. Team sign-in supports single sign-on (SSO), Google sign-in and authenticator-app two-factor codes.

Can an agency or managed service provider resell Tryam?

Yes. Agencies and managed service providers can offer Tryam under their own brand, with a partner console on their own domain.

How much does Tryam cost?

We do not publish prices. There are three plans, Starter, Pro and Business, described by what they include. Every plan starts with a 30-day free trial with no card needed, and you see the exact price in your console before you pay.

How do I get access to Tryam?

Tryam is in early access and accounts are created by invitation. Request early access, tell us about your sites, and we will get in touch.