Spatial Regal Technology

Zipper at the edge

CDN, WAF, functions, bot checks, and sealed Postgres — a Cloudflare-shaped edge on Global Server nodes.

Honest production on multi-layered Global Server nodes: application-layer DDoS and WAF, in-process cache, DNS-JSON, and image delivery. 22 named services. Portcullis on every sensitive action.

Create an account Open the control plane

Free plan · No credit card · Starter US$5/mo for 8 hostnames · priced per workspace

Zipper vs Cloudflare · Zipper vs Neon · Getting started

tinyzipper.com/dashboard

Edge healthy

Overview

Spatial Regal Court

Sovereign plan · 3 zones · 22 services

Requests / 24h

1.27M

+6.4% vs yesterday

Cache hit

94.1%

The Crown · in-process

Portcullis pass

99.1%

Managed mode

Edge traffic

p50 38ms

00:00Now

Watchtower

00:32
The Keep
OWASP SQLi · 14 hits blocked
00:28
Portcullis
login · managed · pass
00:11
The Crown
/assets/* · 12,408 objects warm
23:58
The Moat
Absorb idle · within 1.2σ

Zones

www.spatialregal.com
Accra · FRA
active
api.spatialregal.com
shielded
active
cdn.spatialregal.com
The Crown
warming

Service health

The Crown

The Keep

Portcullis

The Moat

Edge Functions

Site Hosting

Origin Connect

Palace Guard

The Throne Room — the same control plane you get after you create an account. Open a preview

The Crown

In-process cache

TTL, SWR, minify, and gzip on Zipper’s Global Server nodes.

Moat + Keep

HTTP DDoS & WAF

Application-layer flood caps and request rules. Palace Guard cordons files.

Herald + Gallery

DNS-JSON & images

DNS-JSON over HTTPS. Original-byte image delivery from the Gallery.

Services

Named services. Clear jobs.

View all services →

In-process cache

The Crown

A CDN-shaped cache that lives in Zipper’s process — TTL, SWR, minify, gzip.

Web application firewall

The Keep

A WAF that inspects requests before they reach your origin.

Human verification

Portcullis

A first-party bot challenge with a visible check — not a silent token.

Application-layer DDoS

The Moat

HTTP flood absorb on Zipper — per-IP caps, not Magic Transit.

DNS-JSON over HTTPS

The Herald

Store records and answer DNS-JSON on /dns-query — not port 53.

TLS certificates

The Vault

Automatic certificates, key rotation, and cipher policy for every hostname.

API shield and rate limits

The Scepter

Rate limits, tokens, and schema checks for public APIs.

Analytics and logs

The Watchtower

Request, threat, cache, and Portcullis metrics for your workspace only.

Load balancing

The Drawbridge

Health-checked origin pools with automatic failover.

Image delivery

The Gallery

Serve original image bytes from Zipper object storage. No transcode, no Polish.

Object storage

The Archives

Cached and stored objects with instant purge and signed URLs.

Zero-trust access

The Throne Room

Identity-aware access to private origins — no public exposure required.

Timed JS on Zipper

Edge Functions

Run a timed JavaScript handler on Zipper — Node vm, not V8 isolates.

Git-connected sites

Site Hosting

Build static and full-stack sites from git, with preview URLs per branch.

Background work

Job Queues

Durable queues so webhooks, mail, and retries never block a visitor.

Grounded inference on Zipper

Edge AI

Zipper-corpus answers and embeddings on Zipper — not a GPU LLM farm.

Stored video objects

Video Delivery

Serve uploaded video files from Zipper object storage. No encode, no HLS ladder.

Private origin links

Origin Connect

Publish an origin that never opens an inbound port — the connector dials out.

Routing, inboxes, and mail

Emails

Inbound mail store and routes — mailbox, webhook, or function. No outbound SMTP.

Surge protection

Visitor Queue

Hold extra visitors in line when origin is at capacity.

Edge antivirus cordon

Palace Guard

The first antivirus that lives in the palace — it cordons files in flight before they ever sit on disk.

World's first sealed Postgres

The Cellar

Rooms underground: DATABASE_URL and REST behind a sealed hatch, kept at a cool, stable climate.

Portcullis

Portcullis: a bot check you can see.

Embed a site key. Visitors solve a quiet proof-of-work — or a checkbox when traffic looks risky. Redeem the token with Siteverify. HMAC-signed, single-use, short-lived.

Portcullis docs

Live gate

Portcullis

Starting verification…

Zipper

Auto-scans first. A click is required only when traffic looks risky.

Embed

<script src="https://tinyzipper.com/portcullis/v1/api.js" async defer></script>
<div class="tz-portcullis" data-sitekey="0xYOUR_SITE_KEY"></div>

Palace Guard

The first antivirus that lives in the palace.

Files are judged while they are still in motion — public malware hashes, EICAR, web-shell names, ransomware notes, MIME polyglots, ZIP headers that never inflate. Hostile objects never reach disk. Watch the cordon scan.

Open Palace Guard

c99.php

invoice.pdf.exe

brand.avif

README.md

docs.zip

PRI 11 RPM02 CTCSTBY

Palace Guard on patrol

Live cordon

Drop a file or fire a public intrusion sample. Palace Guard matches hashes, names, MIME polyglots, and ZIP headers without detonating the object. Public demo — sign in to store a finding.

Scan a file

The Cellar

Rooms underground. Cool, stable storage.

A cellar is a room or set of rooms located wholly or partly underground, usually beneath a building, kept at a cool, stable temperature for storage. The Cellar is sealed Postgres under Zipper: capability seals, envelope encryption, row policies, DATABASE_URL, and PostgREST. Try the pad — then provision a workspace cellar to store.

Open The Cellar

Sealed query

World's first sealed Postgres

Underground rooms under Zipper. The hatch is a capability seal. Native clients omit Origin; browsers must come from a named origin. Encryption and row policies stay on. The public pad is a tasting room.

ready

Public pad — sign in to provision a workspace cellar.

Pricing

Straightforward plans

Full pricing table →

Free

Evaluate Zipper on a real hostname. All twenty-two services, with Free quotas — no credit card.

Start free

Most chosen

Starter

US$5 / mo

Production traffic for small teams. One workspace price — not billed per domain like Cloudflare Pro.

Choose Starter

Business

US$19 / mo

SSO, SIEM, and multi-origin failover. Versus Cloudflare Business at $200 per domain.

Choose Business

Spatial Regal Technology

Zipper at the edge

CDN, WAF, functions, bot checks, and sealed Postgres — a Cloudflare-shaped edge on Global Server nodes.

Honest production on multi-layered Global Server nodes: application-layer DDoS and WAF, in-process cache, DNS-JSON, and image delivery. 22 named services. Portcullis on every sensitive action.

Create an account Open the control plane

Free plan · No credit card · Starter US$5/mo for 8 hostnames · priced per workspace

Zipper vs Cloudflare · Zipper vs Neon · Getting started

tinyzipper.com/dashboard

Edge healthy

Overview

Spatial Regal Court

Sovereign plan · 3 zones · 22 services

Requests / 24h

1.27M

+6.4% vs yesterday

Cache hit

94.1%

The Crown · in-process

Portcullis pass

99.1%

Managed mode

Edge traffic

p50 38ms

00:00Now

Watchtower

00:32
The Keep
OWASP SQLi · 14 hits blocked
00:28
Portcullis
login · managed · pass
00:11
The Crown
/assets/* · 12,408 objects warm
23:58
The Moat
Absorb idle · within 1.2σ

Zones

www.spatialregal.com
Accra · FRA
active
api.spatialregal.com
shielded
active
cdn.spatialregal.com
The Crown
warming

Service health

The Crown

The Keep

Portcullis

The Moat

Edge Functions

Site Hosting

Origin Connect

Palace Guard

The Throne Room — the same control plane you get after you create an account. Open a preview

The Crown

In-process cache

TTL, SWR, minify, and gzip on Zipper’s Global Server nodes.

Moat + Keep

HTTP DDoS & WAF

Application-layer flood caps and request rules. Palace Guard cordons files.

Herald + Gallery

DNS-JSON & images

DNS-JSON over HTTPS. Original-byte image delivery from the Gallery.

Services

Named services. Clear jobs.

View all services →

In-process cache

The Crown

A CDN-shaped cache that lives in Zipper’s process — TTL, SWR, minify, gzip.

Web application firewall

The Keep

A WAF that inspects requests before they reach your origin.

Human verification

Portcullis

A first-party bot challenge with a visible check — not a silent token.

Application-layer DDoS

The Moat

HTTP flood absorb on Zipper — per-IP caps, not Magic Transit.

DNS-JSON over HTTPS

The Herald

Store records and answer DNS-JSON on /dns-query — not port 53.

TLS certificates

The Vault

Automatic certificates, key rotation, and cipher policy for every hostname.

API shield and rate limits

The Scepter

Rate limits, tokens, and schema checks for public APIs.

Analytics and logs

The Watchtower

Request, threat, cache, and Portcullis metrics for your workspace only.

Load balancing

The Drawbridge

Health-checked origin pools with automatic failover.

Image delivery

The Gallery

Serve original image bytes from Zipper object storage. No transcode, no Polish.

Object storage

The Archives

Cached and stored objects with instant purge and signed URLs.

Zero-trust access

The Throne Room

Identity-aware access to private origins — no public exposure required.

Timed JS on Zipper

Edge Functions

Run a timed JavaScript handler on Zipper — Node vm, not V8 isolates.

Git-connected sites

Site Hosting

Build static and full-stack sites from git, with preview URLs per branch.

Background work

Job Queues

Durable queues so webhooks, mail, and retries never block a visitor.

Grounded inference on Zipper

Edge AI

Zipper-corpus answers and embeddings on Zipper — not a GPU LLM farm.

Stored video objects

Video Delivery

Serve uploaded video files from Zipper object storage. No encode, no HLS ladder.

Private origin links

Origin Connect

Publish an origin that never opens an inbound port — the connector dials out.

Routing, inboxes, and mail

Emails

Inbound mail store and routes — mailbox, webhook, or function. No outbound SMTP.

Surge protection

Visitor Queue

Hold extra visitors in line when origin is at capacity.

Edge antivirus cordon

Palace Guard

The first antivirus that lives in the palace — it cordons files in flight before they ever sit on disk.

World's first sealed Postgres

The Cellar

Rooms underground: DATABASE_URL and REST behind a sealed hatch, kept at a cool, stable climate.

Portcullis

Portcullis: a bot check you can see.

Embed a site key. Visitors solve a quiet proof-of-work — or a checkbox when traffic looks risky. Redeem the token with Siteverify. HMAC-signed, single-use, short-lived.

Portcullis docs

Live gate

Portcullis

Starting verification…

Zipper

Auto-scans first. A click is required only when traffic looks risky.

Embed

<script src="https://tinyzipper.com/portcullis/v1/api.js" async defer></script>
<div class="tz-portcullis" data-sitekey="0xYOUR_SITE_KEY"></div>

Palace Guard

The first antivirus that lives in the palace.

Open Palace Guard

c99.php

invoice.pdf.exe

brand.avif

README.md

docs.zip

PRI 11 RPM02 CTCSTBY

Palace Guard on patrol

Live cordon

Drop a file or fire a public intrusion sample. Palace Guard matches hashes, names, MIME polyglots, and ZIP headers without detonating the object. Public demo — sign in to store a finding.

Scan a file

The Cellar

Rooms underground. Cool, stable storage.

Open The Cellar

Sealed query

World's first sealed Postgres

ready

Public pad — sign in to provision a workspace cellar.

Pricing

Straightforward plans

Full pricing table →

Free

Evaluate Zipper on a real hostname. All twenty-two services, with Free quotas — no credit card.

Start free

Most chosen

Starter

US$5 / mo

Production traffic for small teams. One workspace price — not billed per domain like Cloudflare Pro.

Choose Starter

Business

US$19 / mo

SSO, SIEM, and multi-origin failover. Versus Cloudflare Business at $200 per domain.

Choose Business