Docs
Every service, explained.
Zipper is an affordable Cloudflare alternative by Spatial Regal Technology. Global CDN, WAF, DDoS protection, Edge Functions, Site Hosting, and Portcullis bot checks from one control plane — priced per workspace, not per domain. Start with getting started, then jump to the service you need. Each page has use cases and a working API example.
Type a Cloudflare product or a Zipper service name.
Start
Getting started
Create a Zipper account, add a hostname, point DNS, and put The Crown in front of origin — the simple Cloudflare alternative path.
Quickstart in ten minutes
The shortest path from signup to a proxied hostname and a working Portcullis widget.
What to use Zipper for
Practical use cases: SaaS apps, media sites, internal tools, and launches — a cheaper Cloudflare alternative for real workloads.
Plans and quotas
What each Zipper plan includes. Every plan has all 20 services; quotas and extras (SSO, log push, dedicated IPs) scale with the plan.
Migrate from Cloudflare
Move DNS, CDN, WAF, Workers, Pages, Turnstile, Tunnel, Email Routing, and Waiting Room to Zipper without a dual-running tax.
Auth, tokens, and SSO
How Zipper workspace login, API tokens, Portcullis, SSO, and SCIM fit together.
Control plane API
Bearer tokens, idempotency, plan limits, and every v1 endpoint for Zipper — the Cloudflare API alternative for CDN, WAF, functions, and mail.
Delivery
The Crown
The Crown is Zipper’s content delivery network. It terminates TLS at the edge, caches static and negotiated assets, and routes visitors across an anycast network so pages load quickly worldwide. This is a Cloudflare Cloudflare CDN / Caching alternative included on every Zipper plan.
The Drawbridge
The Drawbridge steers traffic across origin pools. Unhealthy backends are taken out of rotation automatically. Weighted pools and sticky sessions are built in. This is a Cloudflare Cloudflare Load Balancing alternative included on every Zipper plan.
The Gallery
The Gallery resizes, converts, and compresses images at the edge — AVIF, WebP, and quality ladders without changing files on your origin. This is a Cloudflare Cloudflare Images / Polish alternative included on every Zipper plan.
The Archives
The Archives hold cached and stored objects with instant purge, signed URLs, and per-workspace isolation so one account cannot read another’s files. This is a Cloudflare Cloudflare R2 + cache purge alternative included on every Zipper plan.
Video Delivery
Video Delivery encodes uploads into adaptive ladders and serves HLS from The Crown. Watermarks, signed playback, and caption tracks are first-class. This is a Cloudflare Cloudflare Stream alternative included on every Zipper plan.
Security
The Keep
The Keep evaluates managed and custom WAF rules for SQL injection, XSS, protocol abuse, and your own signatures. Every workspace gets a hardened baseline as soon as you add a hostname. This is a Cloudflare Cloudflare WAF alternative included on every Zipper plan.
Portcullis
Portcullis is Zipper’s CAPTCHA alternative. It checks browser signals, solves a short proof-of-work, and issues a one-time token. Embed a site key, collect the token, and confirm it with Siteverify. Managed, non-interactive, and invisible modes. This is a Cloudflare Cloudflare Turnstile alternative included on every Zipper plan.
The Moat
The Moat filters volumetric and protocol floods at the network edge. Automatic mitigation starts when traffic leaves the normal baseline for that workspace. This is a Cloudflare Cloudflare DDoS / Magic Transit-class absorb alternative included on every Zipper plan.
The Scepter
The Scepter rate-limits, authenticates, and validates your APIs at the edge. Pair it with Portcullis to keep credential stuffing off login routes. This is a Cloudflare Cloudflare API Shield / Rate Limiting alternative included on every Zipper plan.
Visitor Queue
Visitor Queue parks excess sessions when a path exceeds its budget. Estimated wait, bypass for signed-in teammates, and a branded holding page keep origin inside its limits. This is a Cloudflare Cloudflare Waiting Room alternative included on every Zipper plan.
Compute
Edge Functions
Edge Functions is Zipper’s isolate runtime. Deploy request handlers that sit in front of origin, rewrite responses, or run on a cron. CPU is billed per invocation; memory is capped per isolate. This is a Cloudflare Cloudflare Workers alternative included on every Zipper plan.
Site Hosting
Site Hosting builds from your repository. Each branch gets a preview hostname. Production attaches to The Crown automatically, with rollback to the last healthy build. This is a Cloudflare Cloudflare Pages alternative included on every Zipper plan.
Job Queues
Job Queues pull work off the request path. Producers enqueue payloads from functions or origins; consumers retry with backoff. Poison messages land in a dead-letter queue. This is a Cloudflare Cloudflare Queues alternative included on every Zipper plan.
Edge AI
Edge AI hosts Zipper’s inference catalog. Call language, embedding, and classification models from Edge Functions without standing up a GPU fleet. Tokens are billed per workspace, and prompts can be redacted before they hit logs. This is a Cloudflare Cloudflare Workers AI alternative included on every Zipper plan.
Identity & access
The Herald
The Herald is authoritative DNS with DNSSEC, geo steering, and instant record updates. Zones you create in the dashboard are published automatically. This is a Cloudflare Cloudflare DNS alternative included on every Zipper plan.
The Vault
The Vault issues and renews certificates for each zone, enforces modern cipher suites, and stores private keys outside the tenant control plane. This is a Cloudflare Cloudflare SSL/TLS alternative included on every Zipper plan.
The Throne Room
The Throne Room publishes private applications behind Zipper identity. Only signed-in teammates can reach them; the public internet never sees the origin. This is a Cloudflare Cloudflare Access (Zero Trust) alternative included on every Zipper plan.
Origin Connect
Origin Connect keeps the origin off the public internet. A small connector in your network dials Zipper outbound; The Throne Room and The Crown then publish the hostname. No public IP and no inbound firewall holes. This is a Cloudflare Cloudflare Tunnel alternative included on every Zipper plan.
Emails
Emails receives mail for the zone, stores it in workspace inboxes, and routes copies to a mailbox, a webhook, or an Edge Function. Outbound mail is DKIM-signed. Catch-all, aliases, and per-address inboxes live here. This is a Cloudflare Cloudflare Email Routing alternative included on every Zipper plan.
Observe